Oasis Security is a non-human identity (NHI) management company that helps enterprises find, own, secure and retire the service accounts, tokens, secrets and AI agents that now outnumber their human users. It is now part of Cyera.
The problem it solves is ownership. Machine identities are created by developers and automation every day, rarely documented and seldom removed, which leaves security and identity teams holding long-lived credentials that nobody answers for.
At A Glance
| Vendor | Oasis Security, now part of Cyera |
|---|---|
| Category | Non-human identity management and agentic access management |
| Identities covered | Service accounts, service principals, API tokens, secrets, access keys, AI agents |
| Deployment | Agentless connection to clouds, identity providers and audit logs |
| Agentic AI | Oasis Agentic Access Management |
| Certifications | SOC 2 and ISO 27001 |
| Funding | Series B led by Craft Ventures (2026) |
| Market classification | NHI Platforms & Machine Identity; also Agentic AI Identity |
What Oasis Security Does
Service accounts, tokens, APIs and automation agents multiply quickly and often have no clear owner. Citing a 2024 ESG report, Oasis puts the ratio of NHIs to human identities at about 20 to one. The company’s answer is to build a complete inventory of these identities, reconstruct their context and ownership, and then automate their lifecycle from creation to decommissioning so that each one has someone accountable for it.
The same principle now applies to AI agents. Rather than giving an agent broad, permanent credentials, Oasis grants it narrow access for the task in hand. Cyera brings Oasis’s identity context together with its own data context, aiming to “make the integration between identity and data a first-class security control.”
Products
Oasis NHI Security Cloud
NHI Security Cloud is the core platform for teams that have lost track of their machine identities. It finds NHIs across the estate and enriches each one with its usage, consumers, resources and privileges, then ranks posture issues by severity with remediation playbooks. Detection of leaked credentials, unauthorised access and takeovers runs through Oasis Scout. Secret rotation is set by the customer as policy and carried out by Oasis automatically, and compliance reporting maps to PCI 4.0, NIST and SOC 2.
Oasis NHI Provisioning
NHI Provisioning tackles the problem at the source. It automates the creation, governance and security of non-human identities from the moment they are requested, assigns an owner and enforces least privilege for both secret-based and federated identities. Developers can request identities through the Oasis interface, ServiceNow or Terraform.
Oasis Agentic Access Management
Agentic Access Management (AAM) is for enterprises putting AI agents into production. It sits between the agents and the systems they reach, and turns each request into a short-lived, least-privilege session, so no agent holds standing permissions.
How It Works
Oasis connects agentlessly to cloud environments, identity providers and audit logs. From these it collects identities and their attributes, secret metadata, entitlements, activity logs, resource inventory and business application information.
| Component | What it does |
|---|---|
| Context Reconstruction Engine | A patent-pending component, also called Sherlock, that correlates this data with AI and ML to build a context map and ownership record for each identity. |
| Oasis Scout | The threat detection and response engine for NHIs, built on Oasis’s Authprint technology. |
| Identity Lifecycle Management | Policy-driven orchestration that standardises provisioning, rotation and decommissioning across systems. |
| Oasis Outpost | Keeps secret generation and storage inside the customer’s own infrastructure. |
Identities And Systems Covered
| Non-human identities | Service accounts, service principals, API tokens, secrets, access keys, AAD roles and UiPath processes. |
|---|---|
| AI agents | Copilots, assistants, automations, LLM chatbots and locally deployed agents, including agents on Foundry, OpenAI, Bedrock, Microsoft Copilot and Glean. |
| Cloud and identity stores | AWS, Azure, GCP, Microsoft Active Directory, Okta and Ping. |
| Vaults | HashiCorp Vault, Azure Key Vault, AWS KMS, GCP and CyberArk. |
| PaaS and SaaS | Snowflake, Databricks, GitHub and Salesforce. |
Agentic AI Capabilities
Intent-Based Access
AAM converts each prompt, tool call or action plan into structured intent covering resource, operation, scope and purpose. Policy, not the prompt, decides the outcome. An allowed request receives an ephemeral identity that is removed when the task ends, under a single policy control that works across infrastructure.
Audit Chain Of Custody
Every session keeps a full record running from the human, through the agent, prompt, intent, policy and identity, to the actions taken and their results, so any agent action can be traced back to the person who started it.
Company Background
| Founded | 2022. |
|---|---|
| Leadership | Danny Brickman, co-founder and CEO; Amit Zimerman, co-founder. |
| Office | New York, United States. |
| Funding | $120 million Series B in March 2026, with Cyberstarts, Sequoia Capital and Accel, bringing total funding to $195 million. Oasis reported dozens of Fortune 500 customers at the time. |
| Acquisition | Cyera completed its acquisition of Oasis on 1 September 2026, in a deal reported at $1 billion; the business operates as Cyera Identity, a dedicated identity unit within Cyera’s platform. |
Note: This overview is compiled from Oasis Security’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.