cyber.hendryadrian.com
Security News · securityweek.com

Offroad Raises $7 Million to Address Enterprise Identity Risk

· Original article ↗

Summary

Offroad emerged from stealth with $7 million in seed funding and an agentic AI identity-risk platform. Its audit of 2,890 public OAuth apps found 918 with at least one structural exposure signal.

Key points

  • Offroad raised $7 million in seed funding led by Ibex Investors and Skywell Capital.
  • The company says its agentic AI platform gathers context across fragmented systems to investigate and remediate identity risks, either autonomously or with human oversight.
  • Offroad’s audit reviewed 2,890 public OAuth applications on Google Workspace Marketplace and GitHub Marketplace.
  • The audit identified at least one structural exposure signal in 918 apps (32%), including scopes broader than stated functions and AI apps with write access.
  • Offroad launched ohauth[.]ai, a community catalog focused on OAuth apps with over-privileged scopes, dead publisher domains, and silent permission drift.

Article Details

Event Type
Offroad emerged from stealth with $7 million in seed funding and launched a community catalog of OAuth application risks.
Impact
Offroad’s audit of 2,890 public OAuth applications on Google Workspace Marketplace and GitHub Marketplace found that 918 (32%) had at least one structural exposure signal. The article describes potential identity and permission risks, not confirmed compromise.

People

Dan BendlerOffroad co-founder and CEO; he described the identity-risk challenges the company aims to address.Philip ShteynOffroad co-founder and CTO; he discussed how AI agents and changing identity activity challenge traditional security approaches.

Vendors

OffroadOffroad seeks to provide that control.

Products

GitHub MarketplaceIllustrating the current problem, Offroad has produced and published (available from its site) a detailed audit report of 2,890 public OAuth applications on Google Workspace Marketplace and GitHub Marketplace.Google Workspace MarketplaceIllustrating the current problem, Offroad has produced and published (available from its site) a detailed audit report of 2,890 public OAuth applications on Google Workspace Marketplace and GitHub Marketplace.