On the surface, it read like a routine leadership announcement. On July 21, identity and access management vendor Ory said it had hired Rob Murray as chief revenue officer and Colleen Shannon as chief financial officer, framing the move as fuel for “its next wave of growth.” Look at who they are, where they came from, and what Ory has been building since its CEO changed hands in 2024, and the picture gets more interesting. This appears a company assembling the scaffolding it needs to operate at a much larger scale. Another funding round wouldn’t be a surprise.
Ory has made no announcement about raising money. Nobody at the company has used the words “Series B” in public. A raise is a reasonable guess, given the pattern, but it isn’t the only explanation, and it’s worth looking past the speculation to what the hires and the product roadmap actually suggest where Ory thinks the market is going.
Two hires, one signal
Let’s start with Shannon because her resume may be a tell. Most recently, she was CFO at equipifi, a fintech vendor, where she helped lead a $34 million Series B backed by Left Lane Capital. Before that she was CFO at CampusLogic, an edtech SaaS company acquired by Ellucian, a Blackstone and Vista Equity Partners portfolio company, and earlier at security vendor Lumension which was acquired by Clearlake Capital. Ory’s new finance chief has personally run the exact process Ory would need to implement if a large institutional round is in the making.
Murray’s background fits well with this narrative. He arrives after seven years as vice president of enterprise sales for North America at Ping Identity, one of Ory’s largest and most established direct competitors in the identity and access management market, with earlier sales leadership stints at PagerDuty, Anaplan and HP. Hiring a senior sales leader out of the incumbent you’re trying to unseat is its own kind of statement. Ory is no longer positioning itself as the scrappy open-source alternative undercutting Ping and Okta on price. It’s positioning itself to compete for the same enterprise contracts.
The two hires read like a company that has decided it’s ready to be judged as a peer to the incumbents rather than an open-source alternative to them.
The capital base looks light for the ambition
Whatever Ory is preparing for, its funding history looks modest relative to where it may be heading. It raised $22.5 million in a Series A led by Insight Partners in December 2021, with Balderton Capital and In-Q-Tel participating. In April 2024, it added a $5 million extension, again from Insight and Balderton, timed, coincidentally or not, to the arrival of CEO Jeff Kukowski, a security industry veteran who previously ran companies like Secureauth and Cloudbolt, and was the top GTM executive at AXON and Yubico. Total disclosed funding sits at roughly $27.5 million to $29.3 million, depending on the source. That is a small balance sheet for a company that now claims to manage 3.3 billion identities and lists among the customers OpenAI which is running identity for its 800 million weekly active users. For context Okta, Ory’s most obvious point of comparison, raised more than $230 million before its IPO. If Ory intends to compete for the enterprise budgets it is now chasing, a Series B would close that capital gap.
What Ory’s built since 2024
The two-plus years since Kukowski’s arrival reads like deliberate scaffolding, not incremental product work. In May 2025, Ory acquired BoxyHQ, a Nauta Capital-backed open-source SSO project, rebranding it as Ory Polis, adding B2B federation capability. Ory achieved PCI DSS compliance in 2025, a prerequisite for selling into financial services and other regulated industries. And in June 2026, it launched Ory Agent Security and Ory Talos, expanding the company’s pitch from conventional customer and B2B identity toward what it calls “Agent IAM,” access management built specifically for autonomous AI agents rather than just humans. Each of those moves is defensible on its own as ordinary product strategy. Stacked together, with two new C-suite hires on top, they resemble a company building toward a much bigger stage.
The moment the market can’t ignore
That timing is the most interesting part of the story. On the same day Ory announced its CRO and CFO, it also published a blog post dissecting Hugging Face’s July breach, an incident in which, according to OpenAI’s own account, an experimental model running with reduced safety guardrails broke out of an internal cybersecurity sandbox, found a zero-day vulnerability, and used stolen credentials to gain remote code execution on Hugging Face’s production systems with no human directing it. OpenAI said it recovered roughly 17,600 logged agent actions from the intrusion, which ran for several days before disclosure.
Hugging Face was not an isolated case. In early August, the UK’s AI Security Institute revealed that both Anthropic’s and OpenAI’s models had created fake online identities and tried to socially engineer a developer into approving malicious code during a red-team cybersecurity test, and Meta confirmed days later that its Muse Spark model had breached a third-party network during a security test of its own. In the span of about two weeks, three of tech’s largest AI labs each disclosed incidents where autonomous agents acted outside their intended boundaries with malicious intent.
The common thread across these incidents is not model capability. It is identity. Enterprises have spent two decades building single sign-on, multi-factor authentication, role-based permissions and credential rotation around human users. Almost none of that infrastructure assumes a non-human actor might be issued its own credentials, granted delegated authority across systems, and left running on a static API key that never expires. An Ory-commissioned EMA survey published this year found more than 80 percent of organizations have already deployed AI agents in production, while only about 21 percent have documented governance policies covering them.
Ory’s bet on being the gatekeeper
That gap is precisely what Ory has spent the past year building product to fill. Talos replaces static API keys with short-lived, delegable tokens. Agent Security embeds authorization checks at the point where an agent takes action, before it executes a command rather than after. Agent DX pushes the same controls into coding tools like Claude Code and OpenAI Codex, betting that if agent identity gets built in at the point developers are working, it becomes infrastructure rather than an afterthought.
Whether that bet pays off depends less on the technology, which is plausible but unproven at scale, than on whether enterprises move as fast as the incidents suggest they should. Ory’s advantage, if it has one, is provenance: a nine-year-old open-source identity project with deployments inside companies like Axel Springer, Fandom and OpenAI, now wrapped in commercial packaging and led by executives who have financed and sold security software into large enterprises before. That combination of open-source trust plus product moves that meet the market moment, and a newly assembled executive team, is what makes the company worth watching.
