NewCore emerges from stealth with $66M

In short:NewCore emerged from stealth on 15 June 2026 with $66M from Cyberstarts, Index Ventures and Evolution Equity Partners. It is an agent governance layer that runs alongside the identity provider a company already has. It leads our standings at 8.70, on runtime control and ownership.

What was announced?

NewCore came out of stealth with $66M from Cyberstarts, Index Ventures and Evolution Equity Partners. It has offices in Tel Aviv and the US.

The company also announced an Agentic Skill package for Claude Code, Codex and Cursor.

What does NewCore do?

NewCore is an agent governance layer. It works alongside the identity provider a company already runs. Your current identity platform keeps handling employee sign-in.

The product has three parts: discover, secure and govern.

Discover finds agents through read-only integrations, without relying on teams to register them. It resolves a person's accounts across identity providers, directories and HR systems and links their agents. It traces access paths, including outside SSO.

Secure replaces standing credentials with short-lived, task-scoped access. The agent never holds the tool's credential. Every tool call passes through the gateway, which identifies the agent and the person behind it. It keeps agents within the permissions of the person they act for.

Govern runs one policy engine for people and agents. Actions are allowed, need approval or are denied. Policies are written in a sentence and replayed against recent real sessions before going live.

How does human approval work?

Risky calls go to a named approver in the NewCore App. The approver confirms with device biometrics. An agent can never approve its own action.

Tool calls, sessions and approvals sit in one audit trail. Denied attempts are treated as a threat signal.

How does it score?

NewCore scores 8.70 and leads the standings. It scores ten on ownership and runtime control. Credentials and delegation score nine. Discovery scores eight.

Its weak spots are standards and buying clarity, both five. Public material names SAML, OIDC and an MCP server registry. It does not name OAuth 2.1, SPIFFE or Cross App Access. There is no list price, though an AWS Marketplace listing gives a procurement path.

Where does it not lead?

On our standards-first builders ranking, Aembit and Descope place ahead. On free start for small teams, Aembit leads and NewCore shares second with Descope.

What should buyers check?

Ask how the gateway sits in your agent traffic. Ask which agent frameworks the Agentic Skill package covers beyond Claude Code, Codex and Cursor.

Ask about standards on the roadmap. OAuth 2.1, CIMD and Enterprise-Managed Authorization are worth raising.

Ask how the AWS Marketplace listing works for your procurement team. It uses custom units with an upfront commitment.

Our read

NewCore covers the full path from discovery to approval in one product. That is rare in this field. The human approval design, with biometrics and a rule against self-approval, is the most complete we found.

See the full NewCore profile and comparisons such as NewCore vs Aembit.