Willow

• Wix is Willow's only deeply quantified deployment and a related party, the founders' former employer with two Wix executives as angel backers, so its headline traction could reflect a captive relationship rather than broad independent market demand.
• Identity incumbents Okta, CyberArk, and Microsoft could ship native agent identity and MCP access control inside platforms enterprises already license, removing the third-party budget line Willow depends on.
• MCP gateways and connectors are replicable engineering, so a funded rival or an open-source project could match Willow's discovery, access, and audit feature set within a release cycle.
• Willow raised a 7 million dollar seed, so a better-funded rival could outspend it on go-to-market before Willow converts its Wix proof into a broad customer base.
• Willow's gateway sits in the path of every agent tool call, so an outage or added latency in Willow could block agents from acting, making its reliability a gating concern for enterprise adoption.

Willow sells to the enterprise security and platform team that wants employees and agents to use AI tools without losing control of what those agents can reach. The company frames the gap as AI agents connecting to internal systems faster than security can see or govern, including shadow AI that nobody approved, where an agent holds standing access to production data and tools.

The concern is echoed beyond Willow's own marketing. Crypto Briefing reports that identity incumbents Okta and CyberArk have signaled interest in agent-related access, because their platforms were built for human identity first, which places the same problem on the incumbents' roadmaps. Calcalist, citing Willow's own data, reports that most companies now run AI agents and that a majority have had an agent-related incident in the past year, so the urgency is real even though the specific figures are the vendor's. [s2, s14, s15]

Willow is a governed gateway that gives each AI agent a scoped credential tied to a real user and brokers its access to enterprise tools. The identity and access page describes provisioning, suspending, and auditing agents individually, with credentials that are scoped and time-bound rather than standing. SecurityWeek describes the platform integrating with Okta and Entra, assigning an identity to every operating agent, controlling which internal endpoints an agent can reach, and enforcing least-privilege at runtime.

The platform pairs that control with discovery, audit, and containment. Willow describes finding the agents, tools, and MCP servers in use, including unapproved ones, and adds rules, guardrails, PII protection, approvals, audit trails, and observability on one control plane. Deployment spans software-as-a-service, dedicated cloud, and self-hosted setups, including fully air-gapped environments, which fits a security buyer that cannot route agent traffic through a shared cloud.

Willow shows its depth through a running deployment rather than an independent test. With Willow, Wix built enterprise infrastructure supporting nearly 600 tools and more than 300,000 weekly tool calls, described in detail by the company's engineers. No cited open code or independent third-party technical evaluation corroborates the capability from outside Willow's own account, and the public docs the site links are first-party material rather than independent validation. [s2, s10, s3, s6, s20]

Willow competes in a fast-filling agent-identity and MCP-gateway category against both startups and the identity incumbents moving to own it. Aembit, Astrix Security, Token Security, Natoma, and Keycard cover overlapping ground in credentialing and governing non-human and agent identities, and Willow itself notes that many rivals are open-source projects, positioning its managed enterprise platform against them.

Its stated edge is enterprise readiness proven early rather than a unique feature. Willow points to CISO sign-off, an audit trail, deployment flexibility, native shadow-AI detection, and runtime policy as the reasons it fits large organizations, and the Wix deployment is the evidence it offers that the approach works at scale.

The structural pressure is the incumbents. Crypto Briefing reports Okta and CyberArk moving toward agent-related access, and those platforms already hold the enterprise's human identity, so they are positioned to fold agent identity into a suite the buyer already licenses. Willow's answer is depth of embedding rather than a barrier the incumbents cannot cross. [s5, s14, s3]

Willow's go-to-market pairs a free entry point with an enterprise motion and leans on a small set of named references. The pricing page invites buyers to start free and scale into skills, approvals, audit trails, and enterprise deployment, and the product routes prospects to a demo. Wix is the one deployment quantified in public. With Willow, Wix built enterprise infrastructure supporting nearly 600 tools and more than 300,000 weekly tool calls, used by about 5,000 weekly users.

That flagship reference is deep but not arms-length. Wix is the founders' former employer, and two Wix executives, co-founder Avishai Abrahami and president Nir Zohar, were early angel backers, so the biggest deployment and the earliest backers are one relationship. Willow does show non-Wix references, a named Innovid testimonial and a self-displayed logo wall, and says deployments are expanding into cyber security, real estate, and fintech, but only the Wix deployment is quantified in public.

Investor conviction reinforces the picture without settling it. Hetz Ventures led the 7 million dollar seed and the Wix founders backed it, a credible signal that experienced buyers value the product. Whether Willow turns these early references into a broad independent base is what the next named customers will show. [s17, s6, s13, s19, s8]

Willow was founded by three former Wix engineers who built the product inside a large public company before spinning it out. Crypto Briefing names Eyal Ben Ezra as CEO, Shalev Shalit as CTO, and Idan Chetrit as VP Platform, all from Wix. That background is directly relevant, because the team built enterprise AI access infrastructure at scale before selling it to others.

The pedigree is verifiable but not yet decorated. The founders show senior in-domain engineering experience rather than a prior exit, a sustained publication record, or independent industry recognition, which is the evidence the next scoring rung would need. Wix co-founder and CEO Avishai Abrahami and president Nir Zohar backing the seed as angels is a strong external vote of confidence in the team, though it also ties the company closely to a single relationship. [s12, s13]

Willow states enterprise access controls and one attestation. Its rebrand announcement lists SSO with Okta and Azure AD, RBAC, SCIM, and SOC 2, and the platform adds audit trails, approvals, and PII protection as procurement-facing controls. The SOC 2 is company-stated and table-stakes for this buyer rather than a differentiator.

A trust-surface probe found no public self-serve trust portal or downloadable report in the reviewed surfaces, with trust.withwillow.ai, security.withwillow.ai, and the /trust and /security paths all not-found as of July 2026. The pricing page states SOC 2 Type II with documentation available on request, so the attestation is vendor-stated and shared on request rather than open. Because the product sits in the path of agent access to internal systems, an enterprise reviewer still has to request the report rather than self-serve it. [s4, s18, s21, s2]

Add analyzed competitors to compare them side by side with Willow.

Willow targets the enterprise security and platform team standing up AI agents at scale. The buyer is the organization where employees and agents already reach for internal tools and where security cannot see or govern that access. Wix is the named instance, an AI Core team whose company-wide rollout now reaches about 5,000 weekly users, with Willow supporting nearly 600 internal tools.

The product is built for that buyer rather than a single developer experimenting with one agent. Willow offers software-as-a-service, dedicated cloud, and self-hosted deployment, including fully air-gapped environments, which are the options a security review demands before agents touch production systems. The identity and access controls, audit trails, and approvals target the same formal buyer.

A free tier widens the top of the funnel without changing the target. Willow invites teams to start free and grow into skills, approvals, audit trails, and enterprise deployment, and the company says deployments are expanding into cyber security, real estate, and fintech. Beyond Wix it names one reference, Innovid, and shows a Trusted-by logo wall, so the enterprise focus rests on the Wix account plus a thin set of other references and the vendor's roadmap.

Willow's claimed advantage is sitting in the path agents take to reach tools rather than watching from the side. Each agent receives a scoped, time-bound credential tied to a real user, and the platform integrates with Okta and Entra, controls which internal endpoints an agent can reach, and enforces least-privilege at runtime. Policy applies at the moment of access rather than being reconstructed from logs afterward.

Discovery, audit, and containment pair with the enforcement layer. Willow describes finding the agents, tools, and MCP servers in use, including unapproved shadow AI, and adds rules and guardrails, PII protection, approvals, audit trails, and observability on one control plane. Administrators can provision, suspend, and audit agents individually, which is the containment a security team needs when an agent misbehaves.

What holds up is the gateway position and the engineering, not a model advantage or a proprietary dataset. The connector catalog, per-agent policies, and audit logs are software a funded rival could rebuild from the same Model Context Protocol standard, and no proprietary model or named non-public dataset appears in the fetched record. The verifiable strength is a real at-scale deployment rather than an independent technical evaluation.

Willow runs a free-to-enterprise motion led by a handful of named references. The pricing page invites buyers to start free and scale into skills, approvals, audit trails, and enterprise deployment, and the product routes prospects to a demo. Wix is the one deployment quantified in public. With Willow, Wix built enterprise infrastructure supporting nearly 600 tools and more than 300,000 weekly tool calls, used by about 5,000 weekly users.

That flagship reference is deep but relationship-linked. Wix is the founders' former employer, and two Wix executives, co-founder Avishai Abrahami and president Nir Zohar, were early angel backers, so the biggest deployment and the earliest backers are one relationship. Willow does show non-Wix references, a named Innovid testimonial and a self-displayed logo wall, and says deployments are expanding into cyber security, real estate, and fintech, but only the Wix deployment is quantified in public.

Investor conviction reinforces the picture without settling it. Hetz Ventures led the 7 million dollar seed, and the two Wix executives' earlier angel checks add investor validation rather than proof that buyers chose the product. What the record does not yet show is a non-Wix enterprise running Willow at comparable depth, which the next detailed customer story would provide.

Willow publishes tiered pricing, which is uncommon for an enterprise security product and lets a buyer see the entry cost. A free plan carries no cost for up to 5 users, 5 integrations, and unlimited tool calls with proxy support only. A paid plan runs at $15 per seat and adds unlimited members, on-premises integrations, built-in MCPs, and premium support. An enterprise plan is custom and quoted through a contact-us flow, adding flexible on-premises or cloud deployment, SCIM, and guardrails.

The metering shows what Willow charges for. The paid tier bills by the seat rather than by agent or tool call, and every tier keeps tool calls unlimited, so cost scales with the people using the platform rather than the volume of agent activity. That choice prices Willow like a per-user platform, and it leaves the enterprise price, where on-premises deployment and policy controls live, to a negotiated contract.

Willow sells software in several delivery modes rather than an analyst-staffed managed service. It offers software-as-a-service that Willow operates, dedicated cloud, and self-hosted deployment, including fully air-gapped environments, so a buyer can place the gateway where its security posture requires. In every mode the buyer sets the policy, and no analyst-staffed layer takes accountability for outcomes.

The inline role raises the operational stakes. Because every agent tool call routes through Willow, its availability and latency directly affect whether agents can act, so Willow becomes a dependency in the agent's access path. That is the same exposure a network gateway carries, and it makes reliability a first-order concern for a buyer putting agents into production.

Operational commitments are not spelled out in the fetched record. Willow describes audit trails and observability, but the public pages do not publish an uptime SLA or incident-response terms, so the operational assurance an enterprise change-management review looks for rests for now on the Wix deployment rather than stated guarantees.

Willow states enterprise access controls and one attestation. Its rebrand announcement lists SSO with Okta and Azure AD, RBAC, SCIM, and SOC 2, and the platform adds audit trails, approvals, and PII protection as procurement-facing controls. The SOC 2 is company-stated and eases procurement without setting Willow apart.

A trust-surface probe found no public self-serve trust portal or downloadable report in the reviewed surfaces, with trust.withwillow.ai, security.withwillow.ai, and the /trust and /security paths all not-found as of July 2026. The pricing page states SOC 2 Type II with documentation available on request, so the attestation is vendor-stated and shared on request rather than open.

That posture matters more than usual because the product sits in the path of agent access to sensitive systems. A gateway that authorizes and brokers every tool call handles credentials, policy, and a record of every action, so a security buyer weighs the attestation alongside the audit trail and identity controls. For now an enterprise reviewer has to request the report rather than self-serve it.

Willow positions itself as the control plane between AI agents and enterprise tools rather than a point control. It standardizes how agents connect through one governed gateway, maintains a catalog of connectors, skills, and plugins, and works across agents such as Claude, ChatGPT, and Cursor. The claim rests on owning the access path agents traverse to reach company systems.

That position is what platform owners are moving to control. Crypto Briefing reports Okta and CyberArk signaling interest in agent-related access, and those vendors already hold the enterprise's human identity, so they are the natural owners of agent identity too. An independent gateway is exposed to an incumbent folding the same control into a suite the buyer already licenses.

A pending deal points the same direction. Snowflake signed a definitive agreement to acquire Natoma, a comparable enterprise Model Context Protocol gateway, a sign that a major data platform wants this layer integrated; the deal had not closed as of the cited release. Willow's counter is depth of embedding at a customer, which slows absorption without removing the incumbents' structural advantage.

Willow's founders come from engineering roles at Wix. Crypto Briefing names Eyal Ben Ezra as CEO, Shalev Shalit as CTO, and Idan Chetrit as VP Platform, all former Wix engineers. After founding Willow, the team deployed it at scale at their former employer, which is where its flagship proof lives.

The pedigree is verifiable but not yet decorated. The cited sources document Wix engineering experience but do not document a prior exit, a sustained publication record, or independent recognition. Wix co-founder Avishai Abrahami and president Nir Zohar backing the seed as angels is a strong external vote for the team, though it also concentrates the company's early validation in a single relationship with its former employer and first customer.