Oak is the AI-native Identity Operating System. Connect any application in hours, see what every human, machine, and AI agent identity can access versus actually uses, and govern it all in one platform.
Oak is an AI-native platform that discovers and governs every identity in the enterprise, whether human, machine, or AI agent, across on-prem, cloud, SaaS, and homegrown applications. Oak delivers value in days: its AI connector framework builds new connectors in hours, so security and IAM teams get full identity visibility without long integration projects.
Key capabilities:
AI connector framework that connects to any application, including homegrown and on-prem systems, in hours
One live identity graph built from raw evidence, mapping what every identity can access against what it actually uses
Identity risk visibility and intelligence with AI-driven, real-time risk decisions
Usage-based access certifications that replace rubber-stamp quarterly reviews
Just-in-time access and role mining to reach least privilege
Root-cause remediation, with built-in AI agents that handle the analytical work while your team stays in control
Use cases:
Get a single view of who has access to what across all applications and identity types, including service accounts and AI agents
Safely remove unused and excessive access to shrink the identity attack surface and pass audits with confidence
Oak offers autonomous IGA solution or complements existing IGA and access management tools, extending coverage to the identities and applications they miss. Oak runs on AWS and governs identities across AWS environments, including AWS IAM users and roles and AWS IAM Identity Center.
Highlights
Speed to value: AI-built connectors reach any application in hours, not months, so teams see every identity within days of deployment.
One live identity graph maps what every human, machine, and AI agent identity can access against what it actually uses, showing exactly which access is safe to remove
Closes the loop from insight to action with real-time AI risk decisions, root-cause remediation, and built-in AI agents that do the analytical work while your team stays in control.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Continuous visibility, risk intelligence, and access certifications across human, machine, and AI agent identities. The Platform package includes and Identity Graph across your SaaS, cloud, and on-prem sources, surfaces contextual risk on every access relationship, and runs access certifications and reviews natively.
Oak sells through a single contract dimension: the Identity Platform, billed by Units. You commit upfront to a quantity of Units for the contract term, so your cost scales with how many Units you buy. One package covers all included capabilities, including identity visibility, risk intelligence, and access certifications across human, machine, and AI agent identities. There are no separate tiers or add-on dimensions to combine. To size the right number of Units for your environment, you work out the quantity with the vendor.
Top-of-mind questions for buyers
What counts as one Unit for billing purposes?
The pricing table bills the Identity Platform by Units but does not define what one Unit represents. The platform tracks human, machine, and AI agent identities across your systems, so sizing likely relates to identity scale. To confirm how Units map to your environment, work out the exact count with the vendor.
How does my cost change as my organization adds more identities over time?
You commit upfront to a quantity of Units for the contract term, so your cost is fixed by that committed quantity. The platform keeps the identity inventory updated as your organization changes. If identity growth exceeds your committed Units, discuss adjusting the quantity with the vendor.
Does the Identity Platform package include implementation and migration help?
The marketplace package covers the platform capabilities billed by Units. Implementation support is offered separately as a hands-on migration service, which the vendor provides for qualifying large organizations. This service is not a priced dimension here, so confirm scope and eligibility directly with the vendor.
www.oak.id+1
Helpful?
Vendor refund policy
No refunds. For billing questions, contact billing@oak.id.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
The AI-native CrowdStrike Falcon Platform provides comprehensive protection across all areas of enterprise risk - devices, identities, data, endpoints and cloud. Powered by a single agent, crowdsourced data, expert threat intelligence, and advanced AI, the Falcon Platform simplifies security operations and stops breaches.
Accelerate AI adoption with a fully managed, AWS-native data lake architecture that integrates storage, transformation, and machine learning workflows. Purpose-built for secure, scalable analytic
SailPoint Agentic Identity Security delivers governance for AI agents-helping enterprises discover, manage, and secure autonomous digital workers that access sensitive data, make decisions, and act on behalf of humans.
Hardened image with security baselines applied at first boot. This is a repackaged open source software product wherein additional charges apply for customization and OS hardening. Includes resource monitoring, patch management, and security alerts. Enterprise observability for Anolis OS cloud workloads from first boot.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.