NewCore

• Okta or Microsoft Entra could ship comparable agent-identity governance inside their existing suites, letting enterprise buyers treat NewCore's capability as a platform feature rather than a standalone purchase.
• NewCore left stealth with no named reference customers, so a slow start to paid adoption could stay invisible until it surfaces in hiring data or the terms of the next round.
• The $66 million seed at a $300 million valuation sets a high bar, and if revenue lags that valuation the next round could be flat or down, signaling stalled traction.
• The Secure Split Key design requires customers to hold and operate their half of the signing key, and enterprises unwilling to take on that operational responsibility could stall deployments.
• NewCore differentiates its agent layer through integrations with specific coding assistants, so a shift to a different agent stack or protocol could erode that surface.
• NewCore markets side-by-side deployment alongside an existing identity provider, but becoming the primary control plane still means displacing entrenched Okta and Microsoft Entra workflows, a long enterprise sales cycle that could outlast NewCore's seed runway.

NewCore targets what it frames as the root of most breaches: enterprise identity systems built for human employees now have to govern machines and AI agents, and those non-human identities fall outside the controls designed for people. The company argues that agents can request access to production systems within seconds and will soon outnumber human workers, so the identity layer has to treat them as first-class identities with their own permissions and revocation path rather than as service accounts.

The buyer is the enterprise identity or security leader, and independent reporting frames the same pressure. TechCrunch describes established identity providers extending platforms built for human employees to cover agents. NewCore's own whitepaper puts identity at the root of most attacks, a vendor-produced figure that grounds the messaging rather than the independent scale of the pain. [s8, s2, s12, s1]

NewCore sells one platform organized around three capabilities: discovering and unifying every identity, securing authentication, and governing agents. The discovery layer consolidates accounts from directories and SaaS systems such as Okta and Google Workspace into a single record, including the shadow accounts no team tracks. The security layer centers on Secure Split Key, which splits the SAML and OIDC signing key between the customer and NewCore so that NewCore alone can never mint a token, an approach the company says closes Golden SAML, adversary-in-the-middle, and token-replay attacks.

The agent capability is the newest and the one NewCore leads with. It treats each AI agent as a first-class identity with least-privilege access, a trust score, and a full issue-to-revoke lifecycle, and it ships an Agentic Skill that lets popular coding assistants authenticate and operate as managed identities. The capability detail is concrete but rests on NewCore's own pages. No public documentation portal, open-source code, or third-party technical evaluation is available to test the claims independently. [s4, s3, s6, s2]

NewCore positions itself as a ground-up rebuild against incumbents it says bolted agent support onto platforms designed for people. TechCrunch quotes CEO Zohar Alon arguing that traditional vendors offer an agentic path to identity that sits on the side rather than integrated, and it notes Okta and Microsoft Entra have already begun adding agent capabilities. That framing is also the competitive risk, because the incumbents own the accounts NewCore must win and are moving into the same capability.

Against dedicated identity vendors, NewCore competes on two fronts: with identity-governance incumbents on unifying and governing identities, and with non-human and agent-identity specialists on the agent layer. Its differentiator is the split-key architecture and a single platform spanning human, machine, and agent identity, rather than a proprietary data advantage or an established install base. [s8, s6, s3]

NewCore emerged from stealth in June 2026 with early, unnamed adoption. No reference customers appear in the public record, though TechCrunch reports fewer than 10 customers and more than 10 design partners, with paid charging expected to begin in summer 2026. The company's public presence is a request-a-demo site rather than a self-service product or published pricing, so the go-to-market case depends on early usage, the raise, and the team rather than named accounts.

The funding and backing are the strongest external signals. SecurityWeek reports a $66 million seed from Cyberstarts, Index Ventures, and Evolution Equity Partners. The Jerusalem Post reports the round values NewCore at $300 million. That backing is ecosystem validation from a leading cybersecurity investor, not evidence of customer scale. [s1, s9, s11]

NewCore's founding team is its most verifiable asset. CEO Zohar Alon founded Dome9, the cloud security posture company Check Point acquired, and previously served as President of Cybereason. Co-founder Erez Yarkoni was the T-Mobile and Telstra CIO, and CTO Amihai Neiderman is a former Unit 8200 researcher who founded Nym, backgrounds Calcalist reports independently.

The pedigree is directly relevant to enterprise identity and pairs senior operating experience with security-research depth. It is a strong single-exit and enterprise-leadership record rather than a repeat pattern of category-defining exits, which is the bar for the top of the scale. [s5, s10]

NewCore front-loads its trust posture, a fit for a product that holds the keys to customer logins. It runs a public trust center listing a SOC 2 Type II attestation described as annually audited, CSA STAR Level 1, GDPR and CCPA alignment, and the CISA Secure-by-Design Pledge, alongside a summary of 37 operational controls. Reaching a SOC 2 Type II attestation within roughly a year of founding is faster than typical.

These are first-party claims, but they are dated, specific, and the kind of evidence enterprise procurement expects. They are also commercial table stakes rather than a differentiator, since a funded rival can earn the same attestations. NewCore does not appear to hold a federal authorization such as FedRAMP, consistent with a young commercial-enterprise focus. [s7]

Add analyzed competitors to compare them side by side with NewCore.

NewCore sells to enterprises that now run a workforce of humans, machines, and AI agents under one identity system. The buyer is the identity or security leader accountable for who and what can reach production systems, the same person the incumbent identity vendors already serve. NewCore's whitepaper frames the opening as identity being the root of most attacks and the existing platforms being built for an earlier era.

The newest and sharpest segment is agent identity. NewCore argues that agents can request access within seconds and will soon far outnumber human employees, so the security leader inherits a governance problem the human-identity stack was not designed for. TechCrunch corroborates that established providers such as Okta and Microsoft Entra are extending human-built platforms to cover agents, which both validates the segment and names the competition.

Geographic and vertical segmentation are implicit this early. NewCore operates from Tel Aviv and San Francisco and sells into enterprise environments, but no vertical-specific packaging is visible in public materials.

NewCore's claimed capabilities are concrete on its own pages, though external validation is absent. The platform discovers and unifies every identity across directories and SaaS systems into one record, secures authentication through the Secure Split Key design, and governs agents across their lifecycle. Secure Split Key splits the SAML and OIDC signing key between the customer and NewCore so that NewCore alone can never mint a token, which the company says closes Golden SAML, adversary-in-the-middle, session-theft, and token-replay attacks.

The agent capability is the durable technical bet. NewCore treats each agent as a first-class identity with least-privilege access, a trust score, and a full issue-to-revoke lifecycle, and it ships an Agentic Skill that lets popular coding assistants authenticate as managed identities. NewCore also engages the emerging standard directly, noting that the Model Context Protocol added a stable Enterprise-Managed Authorization extension in June 2026.

NewCore's public differentiation is identity architecture and agent governance rather than a proprietary AI model or a data flywheel. The durable depth is cryptographic and protocol engineering rather than accumulated data, and that engineering is real but reproducible, since no public documentation portal, open-source code, or third-party evaluation lets an outsider test it, and a funded rival could build the same design.

NewCore's go-to-market is early and sales-led. Its public presence is a request-a-demo site with a downloadable whitepaper rather than a self-service product or published pricing, which points to negotiated enterprise deals with the identity or security buyer.

The strongest external signals are capital and pedigree rather than customer traction. SecurityWeek reports a $66 million seed from Cyberstarts, Index Ventures, and Evolution Equity Partners. The Jerusalem Post reports a $300 million valuation. NewCore names no reference customers in the public record, though TechCrunch reports fewer than 10 customers and more than 10 design partners with paid charging expected to begin in summer 2026, so the go-to-market case depends on early usage, the raise, the founders, and a leading cybersecurity investor rather than on named accounts.

Category engagement is deliberate for the stage. NewCore publishes on the Model Context Protocol authorization standard and positions its platform against incumbents adding agent features, building visibility ahead of disclosed traction.

NewCore does not publish pricing, a choice that signals negotiated enterprise deals. There is no public price sheet, free tier, or self-service sign-up, only a request-a-demo path, which fits a platform sold to identity and security leaders through direct sales rather than product-led adoption.

The pricing unit is not disclosed, so whether NewCore charges by identity, by agent, by workforce size, or by platform is unknown from public materials. For a product that spans human, machine, and agent identities, the charging unit will shape whether elastic agent fleets are priced predictably, but the company has not stated its model.

This opacity is normal for a company that only left stealth in June 2026. It also means a buyer cannot estimate cost before contacting sales, the same evaluation friction that characterizes the incumbents NewCore competes with.

NewCore delivers a platform that sits in the authentication path, which sets a high operational bar. The Secure Split Key design requires the customer to hold and operate half of the signing key inside its own environment, so NewCore alone can never sign a token. That split removes a single point of compromise, and it also means the customer takes on responsibility for operating its half of the key.

Because the platform issues logins and governs access for people and agents, its availability directly affects whether the workforce can authenticate. NewCore markets frictionless, passwordless access across cloud and on-premise environments and claims customers can adopt it in days or weeks. Public materials do not document service levels, regional redundancy, or failure modes, which enterprise procurement will probe given the platform's position in the login path.

The discovery layer connects to existing directories and SaaS systems such as Okta and Google Workspace, so deployment starts by mapping what a customer already runs rather than replacing it on day one. That lowers the initial lift, even though the longer-term goal is to become the system every identity authenticates through.

NewCore front-loads its trust posture, a fit for a product that holds the keys to customer logins. It runs a public trust center listing a SOC 2 Type II attestation described as annually audited, CSA STAR Level 1, GDPR and CCPA alignment, and the CISA Secure-by-Design Pledge, alongside a summary of 37 operational controls spanning information security, data protection, incident response, and endpoint security.

Reaching a SOC 2 Type II attestation within roughly a year of founding signals that NewCore built its compliance program early. These are first-party claims, but they are dated, specific, and the evidence enterprise procurement expects to see. They are also commercial table stakes rather than a differentiator, since a funded rival can earn the same attestations.

The trust bar is higher for NewCore than for most companies at this stage, because a compromise or outage at NewCore would directly affect customer access to production systems. No federal authorization such as FedRAMP appears in the public record, consistent with a young company focused on commercial enterprises rather than government.

NewCore positions itself as a single platform spanning human, machine, and agent identity rather than a feature inside one cloud or identity suite. The discovery, security, and agent-governance capabilities draw on one identity record and policy model, so the agent line extends the same platform rather than starting from scratch.

The integration surface is directory and SaaS breadth plus the emerging agent stack. NewCore consolidates accounts from platforms such as Okta and Google Workspace on the human side, and on the agent side it ships an Agentic Skill for coding assistants and engages the Model Context Protocol authorization standard that reached stability in June 2026. That standard engagement matters because it ties NewCore to how enterprises will govern agent access broadly.

The competitive frame is the rest of the identity stack. TechCrunch reports that Okta and Microsoft Entra are adding agent capabilities to platforms built for humans, so NewCore's platform claim rests on shared internal foundations and ground-up integration rather than a partner-built ecosystem or external network effects, which are not yet visible this early.

NewCore's founding team is its most verifiable asset. CEO Zohar Alon founded Dome9, the cloud security posture company Check Point acquired, and previously served as President of Cybereason. Co-founder Erez Yarkoni was the T-Mobile and Telstra CIO, and CTO Amihai Neiderman is a former Unit 8200 researcher who founded Nym. Calcalist reports these backgrounds independently.

The pedigree fits the problem. A cloud-security founder, a large-enterprise CIO, and an offensive-security researcher cover the product, buyer, and adversary sides of enterprise identity, and the team pairs senior operating experience with security-research depth. SecurityWeek describes the founders as cybersecurity veterans and Israeli intelligence alumni.

The execution record is short by definition. NewCore was founded in 2025 and left stealth in June 2026 with a platform, a trust program, and a $66 million raise, but with no disclosed revenue and no named customers, so the team's ability to convert pedigree into paid enterprise adoption is still unproven.