Oasis Security

Oasis Security is a non-human identity management platform that discovers every service account, API key, token, certificate and AI agent across cloud, SaaS and on-premises estates, assigns each one a human owner, scores its risk, and then orchestrates vaulting, rotation and decommissioning under policy. It is built for identity and security teams whose machine identities already outnumber their staff.

Oasis Security builds an enterprise platform for discovering, securing and governing non-human identities - the service accounts, API keys, tokens and certificates, and increasingly the AI agents, that now outnumber human users in enterprise environments by roughly 82 to 1, a ratio Oasis cites from Palo Alto Networks research. It was founded in 2022 by chief executive Danny Brickman and chief product officer Amit Zimerman, is headquartered in New York, and raised a $120 million Series B led by Craft Ventures on 19 March 2026 with Cyberstarts, Sequoia Capital and Accel participating, bringing total funding to $195 million - the largest single round raised in the non-human identity category. The platform works in three stages. It first inventories non-human identities across AWS, Google Cloud, Azure, SaaS and on-premises systems and enriches each with usage, consumers, resources and privilege context, then uses machine-learning heuristics against CMDB data to auto-assign an owner, which is the step that makes remediation possible at all, since orphaned credentials are precisely the ones nobody dares rotate. It then assesses posture and detects anomalies, credential leaks and unauthorized access through Oasis Scout, its identity threat detection and response module, supported by AuthPrint fingerprinting at the authentication stage. Finally it orchestrates the lifecycle: provisioning, vaulting, safe rotation and decommissioning under policy, with certification campaigns producing audit evidence. Its newer Agentic Access Management layer extends the same model to AI agents using intent-based, just-in-time and ephemeral permissions rather than static roles, alongside AI security posture management for agent configurations. Integrations span HashiCorp Vault, CyberArk, Okta, Ping Identity, Microsoft Active Directory, GitHub, Salesforce, Databricks, Snowflake and OpenAI and Copilot platforms. Oasis reports 5x year-over-year growth in new ARR on a customer base concentrated in the Fortune 500, largely on multi-year contracts, and is SOC 2 Type II compliant and ISO 27001 certified.

Category

Governance & Security

Pricing

Contact for pricing, Subscription

Target Market

CISOs, Identity and Access Management Teams, Cloud Security Engineers, CIOs, Compliance and Audit Teams

Deployment

Cloud-first, Multi-cloud

Founded

2022

Headquarters

New York, United States

Customers

Customer base concentrated in the Fortune 500, including Citizens Financial and Mars; exact count not disclosed

• ✓
  Automated non-human identity discovery

  Inventories service accounts, keys, tokens and certificates across hybrid cloud, SaaS and on-premises estates with usage and privilege context.

• ✓
  ML-based ownership auto-assignment

  Correlates usage patterns against CMDB data to name a human owner for each orphaned credential, making remediation actionable.

• ✓
  Oasis Scout

  Identity threat detection and response for non-human identities, surfacing credential leaks, anomalies and unauthorized access attempts.

• ✓
  AuthPrint

  Fingerprints threat-actor behaviour at the authentication stage against the Oasis NHI Threat Center to cut false positives.

• ✓
  Agentic Access Management

  Grants AI agents intent-based, just-in-time and ephemeral permissions via vaulting, federation and short-lived session identities.

• ✓
  Lifecycle orchestration and safe rotation

  Pre-configured remediation plans drive provisioning, vaulting, rotation and decommissioning without breaking dependent services.

• ✓
  Certification campaigns

  Policy-driven access reviews generate reviewable records of who approved each machine identity, for audit and compliance.

• •
  Credential sprawl audit before an examination

  A bank inventories every service account across three clouds and its SaaS estate ahead of a regulatory review.

• •
  Rotating credentials nobody owns

  Ownership mapping identifies the responsible team, so a decade-old key can finally be rotated or retired safely.

• •
  Onboarding AI agents without standing privilege

  An agent receives time-bound, intent-scoped access rather than a permanent administrative token embedded in configuration.

• •
  Reducing breach blast radius

  Over-privileged non-human identities are surfaced and downscoped before an attacker can chain them into lateral movement.

• •
  Continuous compliance evidence

  Access certification campaigns produce the reviewable approval trail auditors expect for machine identities, not just human accounts.

No list pricing is published anywhere on the Oasis site - the pricing page carries only a demo request form, and the sole call to action is to speak with a technical expert. The company states that the majority of its new revenue comes from multi-year enterprise agreements with a customer base concentrated in the Fortune 500, so expect an annual-contract negotiation rather than seat- or usage-based self-serve, with scope more likely driven by the size of the identity estate than by headcount. Budget for a security-platform-sized line item, not a tool.

This page was written from 8 sources, 5 on domains other than oasis.security.

1. 1.oasis.security — productvendor
2. 2.oasis.security — about usvendor
3. 3.oasis.security — pricingvendor
4. 4.calcalistech.com — ske4mstcwl
5. 5.finance.yahoo.com — oasis security raises 120m series 160000141
6. 6.accessnewswire.com — oasis security raises 120m series b to secure the rise of en
7. 7.cremit.io — rsac 2026 nhi
8. 8.hn.algolia.com — hn.algolia.com