As AI agents become employees, NewCore emerges with $66M to give them identities

NewCore emerged from stealth with $66 million in funding and a $300 million post-money valuation to build identity and access controls for AI agents. The startup says its platform manages both human and AI-agent identities in one system and has already attracted fewer than 10 customers plus more than 10 design partners, with commercial charging expected this summer. The news is constructive for the AI security and identity-management niche, but it is still early-stage and unlikely to move broader markets.

Analysis

This is less a direct revenue event for the public names than an early signal that identity becomes the bottleneck in enterprise AI rollouts. The second-order effect is favorable for security budget expansion, but unfavorable for incumbents whose architecture forces AI governance to be bolted on after the fact: as agent counts scale, per-seat identity economics break and buyers will shift spend toward control-plane vendors that can enforce machine-to-machine permissions natively.

OKTA is the most exposed in the near term because the market will increasingly ask whether its platform is being disintermediated at the margin by purpose-built agent identity layers. Even if agent features are added, the risk is that new workflows get routed around the core human-identity stack, compressing attachment rates and elongating sales cycles over the next 2-4 quarters. MSFT faces a subtler version of the same issue: Entra benefits from default distribution, but the more autonomous agents proliferate, the more customers will demand third-party or cross-cloud neutrality for privileged credential handling.

The contrarian view is that this is not a winner-take-all land grab; it may expand the TAM faster than it redistributes share. Enterprises rarely rip out identity infrastructure quickly, so the first monetization wave will likely be advisory, policy, and audit layers rather than full platform replacement, which means revenue inflection for NewCore-style entrants may lag the narrative by 12-18 months. GS is only lightly affected as an early enterprise adopter benchmark, but the broader signal is that financials and regulated industries will be early buyers of agent governance, pulling forward security spend in 2026 rather than 2025.

The key risk to the thesis is that agent adoption stalls before identity pain becomes acute; if copilots remain assistive rather than autonomous, the urgency of a new control plane fades and incumbent vendors can absorb demand with incremental features. A faster-than-expected standardization of agent identity protocols from hyperscalers would also cap startup pricing power and reduce the odds of a standalone category premium.

Key Decisions for Investors

• Short OKTA on a 1-3 month horizon into strength; the market may overestimate how easily human-centric identity layers extend into autonomous-agent governance. Use a defined-risk options structure if borrow is tight, targeting a 10-15% downside move if the market starts pricing architectural obsolescence.
• Hold a modest long MSFT/short OKTA pair over 3-6 months. MSFT should retain distribution and bundle advantage even if third-party agent identity wins share at the margins; this pair isolates the risk that best-of-breed agent governance erodes standalone identity vendors first.
• Initiate a basket long in cybersecurity infrastructure names with exposure to policy/audit workflows rather than pure IAM, on a 6-12 month view. The spend shift is likely to favor control, observability, and revocation tooling before replacement-grade platform swaps occur.
• Use GS as an early adopter barometer rather than a direct trade: if large-regulated enterprises begin publicly standardizing agent governance, expect a broader enterprise security budget reprioritization and rotate into security software on any market pullback.
• Avoid chasing NewCore-style private marks blindly; the category may be real, but revenue conversion likely lags hype by 4-6 quarters. Wait for pricing proof or a strategic tuck-in acquisition signal before paying venture-style multiples in the public comps.