All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Cyera completed its acquisition of Oasis Security in September 2026 in a deal SecurityBrief puts at $1 billion. Oasis sells enterprise identity teams software that inventories and controls access for service accounts, APIs, bots, and workloads that run without a person. Its Agentic Access Management product issues each AI agent request a short-lived identity with only the access needed. Oasis now operates as Cyera Identity, a dedicated unit inside Cyera. Founded in 2022, it raised $195 million, with a $120 million Series B led by Craft Ventures. CTech reports 170 employees. Oasis told Bloomberg that Fortune 500 companies account for most of its sales. A customer that routes its AI agents through Agentic Access Management would have to replace that access step to switch vendors.
| Description | Oasis Security manages the non-human identities and AI agents that operate across a company's cloud and on-prem systems, governing their access to services such as AWS, GitHub, and Salesforce. | [f1] |
|---|---|---|
| Acquisition | Cyera, announced 2026-07-28 , now Cyera Identity | [f2] |
| Founded | 2022 | [f3] |
| HQ | New York, NY | [f3] |
| Funding | $195M total | [f3] |
| Latest funding | Series B, $120 million, March 2026, led by Craft Ventures | [f4] |
| Deployment | SaaS | [f5] |
| Product | What it does |
|---|---|
| Oasis | Non-human identity management platform that discovers, governs, and enforces least-privilege access for service accounts, secrets, and AI agents across hybrid cloud. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Oasis is a non-human identity management platform that discovers, governs, and enforces least-privilege access for service accounts, secrets, and AI agents across hybrid cloud. It is mapped to the AI Defense Matrix. [f6]
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Oasis inventories conventional non-human identities, assesses posture, rotates secrets, detects identity threats, and provides remediation plans. This line is mapped to the Cyber Defense Matrix. The agentic AI line carries the AI Defense Matrix mapping. [f7]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | KuppingerCole names the buyer as identity and IAM teams, and Oasis cites ESG Reports for 20 to 50 times more non-human identities than human ones, growing 20% a year. Oasis presents that figure on its own page, and none of the independent articles contains a figure for the pain, so the problem has a named buyer without independent quantification. [s19, s4, s9] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Oasis product pages document specific mechanisms, including an environment-connected identity inventory, machine-learning owner suggestions, fingerprint-matched threat detection, and a short-lived identity for each AI agent request. SiliconANGLE and a GitGuardian blog roundup describe discovery and other identity-management features without a technical evaluation, so the depth is concrete but vendor-documented. [s2, s3, s8, s12] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | The enabler is enterprise use of AI agents that need their own access controls, which Oasis addressed with Agentic Access Management, announced November 19, 2025. The independent demand evidence is one signal kind, KuppingerCole analyst coverage of the non-human identity market, so timing is plausible with a credible enabler but short of multiple buyer-side signal kinds. [s16, s19, s3] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Co-founders Danny Brickman and Amit Zimerman met in Unit 81, and CTech reports Brickman served 11 years in the Talpiot program. President Michael DeCesare previously ran Forescout Technologies, which was sold in 2020. That is verifiable in-domain experience, and with no founder exit before Oasis in the cited sources, one hired executive’s prior company falls short of the plural prior builds the higher rung requires. [s9, s20, s5, s10] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 | The traction figures are the company’s own, relayed by CTech as a fivefold annual revenue increase and by SiliconANGLE as a majority of sales from Fortune 500 business. The homepage identifies customers by sector and size, and the newsroom documents a GuidePoint Security reseller partnership and a Zscaler integration. Those and Cyera’s completed purchase are indirect commercial signals. The cited sources contain no named reference customer. [s10, s8, s1, s6, s18] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 4/5 | Oasis raised $195 million, and Cyera completed its acquisition in a deal SecurityBrief reports at $1 billion and CB Insights places between $700 million and $1 billion. That exit confirms output per dollar deployed. KuppingerCole notes that shared investors keep the price from being a clean arm’s-length valuation, and the one revenue figure is a fivefold increase Oasis itself reported, so operating efficiency stays unconfirmed. [s7, s18, s13, s19, s10] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Third parties place Oasis in non-human identity management . KuppingerCole rated it a Rising Star in June 2025, and a GitGuardian blog roundup ranks it fourth among non-human identity tools alongside Astrix Security, Clutch Security, and Entro Security. KuppingerCole did not rate Oasis in its 2025 NHIM Leadership Compass, so the placement is participant rather than category-defining. [s19, s12] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Oasis embeds in customer operations through its identity inventory, owner assignments, lifecycle workflows, and the per-request identities Agentic Access Management issues, which is friction to absorption. KuppingerCole names Microsoft, Palo Alto Networks, and CyberArk as converging on the same control point and notes Cyera already offered its own identity module. No proprietary data flywheel appears in the sources. [s2, s3, s19] |
Oasis Security sells software that governs non-human identities and AI agents. SiliconANGLE describes these identities as service accounts, application programming interfaces, bots, and workloads that operate without direct human interaction. Oasis cites ESG Reports putting them at 20 to 50 times the number of human identities, growing 20% a year, and says classic MFA and conditional access cannot enforce their authentication.
The buyer is the enterprise identity team. KuppingerCole says Oasis sells to identity and IAM teams, and SiliconANGLE relays the company’s statement to Bloomberg that Fortune 500 business accounts for the majority of its sales. A Cyberstarts partner quoted by CTech described a customer base that included several Fortune 500 companies.
Oasis now serves that buyer as part of a data security company. Cyera completed its acquisition in September 2026, and KuppingerCole notes that Cyera sells to data security, privacy, and compliance functions. [s8, s1, s4, s19, s9, s13]
The Oasis platform connects to a customer’s environment and builds an inventory of non-human identities, which the product page says takes minutes. It suggests an owner for each identity using heuristics and machine learning. It also runs lifecycle actions from provisioning and vaulting to rotation and decommissioning, which SiliconANGLE describes as policy-driven governance for credential rotation and access control.
Oasis Scout adds threat and anomaly detection. The product page says Scout matches anomalies to known fingerprints of threat actors through a component called Oasis AuthPrint. The homepage says Oasis covers IaaS, SaaS, PaaS, and on-premises environments, from AWS, Azure, and BigQuery to GitHub, Salesforce, Office 365, and Copilot.
Oasis Agentic Access Management, announced November 19, 2025, extends the platform to AI agents. The product page says it works out what an agent is trying to do and runs each request on a short-lived, least-privilege identity. It links every action to a trail of prompt, intent, policy, session, and action. A GitGuardian blog roundup credits Oasis with strong multi-environment discovery. [s2, s8, s1, s3, s16, s12]
Oasis competes in non-human identity management. A GitGuardian blog roundup, which lists GitGuardian first, ranks Oasis fourth among tools that also include Astrix Security, Clutch Security, Entro Security, and Aembit. KuppingerCole rated Oasis a Rising Star in June 2025.
KuppingerCole places the Cyera deal in a wider contest over agent access. It names Microsoft, Palo Alto Networks, and CyberArk as converging on the same control point from different directions. It expects most large enterprises to keep identity governance anchored in their identity platform, and it notes that Cyera already offered an identity module covering human and non-human access to data.
Oasis also works alongside larger security vendors. Its newsroom lists an integration that combines Oasis identity governance with inline enforcement across Zscaler’s Zero Trust Exchange. [s12, s19, s6]
Oasis reported rapid expansion before the acquisition. CTech wrote, on Michael DeCesare’s appointment as president, that the expansion Oasis reported included a fivefold increase in annual revenue. SiliconANGLE relays the company’s statement that Fortune 500 business is the majority of its sales.
The homepage describes customer outcomes by sector and company size. They include a Fortune 50 healthcare provider that eliminated a critical exposure and a Fortune 500 logistics company that cut secret-rotation effort by 35%. The newsroom lists a reseller partnership with GuidePoint Security, and CTech reports that DeCesare oversees sales, marketing, partnerships, and customer success.
Cyera completed its acquisition of Oasis in a deal SecurityBrief reports as valued at $1 billion, and CB Insights places the valuation between $700 million and $1 billion. Oasis had raised $195 million, including a $120 million Series B led by Craft Ventures. CTech put its headcount at 170 employees. SEC EDGAR lists Form D filings by two investment vehicles named for Oasis Security, Inflection Ventures Oasis Security Fund I LLC in June 2026 and RNP Capital Oasis Security SPV LLC in August 2026. [s10, s8, s1, s6, s18, s13, s7, s20, s24]
Co-founders Danny Brickman, CEO, and Amit Zimerman, CPO, met during their military service in Unit 81, according to CTech. CTech later reported that Brickman served 11 years in the Talpiot program and Zimerman about seven years. SiliconANGLE describes both as alumni of Israeli military intelligence Unit 81.
The about page lists Michael DeCesare as president of go-to-market and Barak Shelef as head of technology. CTech reports that DeCesare previously served as CEO of Forescout Technologies, which was sold in 2020. [s5, s9, s20, s15, s10]
The Oasis homepage footer includes a SOC 2 compliance badge and an ISO 27001 certification logo. A probe of the trust and security subdomains and of the trust, security, and compliance paths on the main site found no trust center.
SecurityBrief reports that the acquired business will operate as Cyera Identity, a dedicated identity unit within Cyera. In its blog post announcing the Cyera letter of intent, Oasis told customers that the Oasis platform continues. The same post says their Oasis team stays focused on non-human identity and agentic access. [s1, s22, s18, s21]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Aembit | competes with | Listed in the same GitGuardian non-human identity roundup as Oasis, competing for the same non-human identity budget. | |
| Astrix Security | competes with | Ranked alongside Oasis in GitGuardian’s non-human identity tool roundup. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Entro Security | competes with | Ranked alongside Oasis in GitGuardian’s roundup, and KuppingerCole compares its sale to SailPoint with the Oasis deal. | |
| Clutch Security | competes with | Ranked alongside Oasis in GitGuardian’s non-human identity tool roundup. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Okta | adjacent | Identity-provider incumbent adjacent to the same enterprise identity team buyer. | |
| Zscaler | adjacent | Integration partner named in the Oasis newsroom for inline enforcement of Oasis identity governance. | |
| Microsoft | adjacent | KuppingerCole names Microsoft among vendors converging on the same control point as the Cyera and Oasis combination. | N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. |
Add analyzed competitors to compare them side by side with Oasis Security.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Oasis Agentic Access Management issues a short-lived identity for each AI agent request. A customer that routes its agents through it would have to replace that access step to switch vendors. Oasis also holds a patent granted in May 2026 on securing identity and access management operations, and CB Insights records 10 Oasis patent filings in all. KuppingerCole names Microsoft, Palo Alto Networks, and CyberArk as converging on the same control point, so those platforms contend for the same agent-access decisions as Cyera Identity.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Oasis sells a software platform for identity inventory, owner suggestions, posture assessment, lifecycle actions, threat detection, and per-request identities for AI agents. The product pages describe software functionality as the deliverable, the software-product level. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Once connected, Oasis holds the customer’s identity inventory, owner assignments, and rotation workflows, and Agentic Access Management issues the identity each agent request runs on. That is integration and workflow friction. The per-request access step is documented, and the cited record does not size what migrating away from it would cost. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | The homepage footer includes SOC 2 and ISO 27001 badges, and a probe of Oasis trust surfaces found no trust center or downloadable report. A funded rival can also obtain these attestations, and the sources identify no mandate or authorization tied to Oasis that would block replacement. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Oasis combines identity inventory across cloud, SaaS, and on-premises systems, machine learning to suggest owners, and fingerprint-matched threat detection. Agentic Access Management adds real-time policy decisions that issue a short-lived identity per agent request, and CB Insights records a granted Oasis patent in this area. That combination is machine learning and real-time systems work that takes specialized expertise. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | KuppingerCole says Oasis sells to identity and IAM teams, and SiliconANGLE relays the company’s statement that Fortune 500 business is the majority of its sales. Oasis’s homepage describes customer outcomes at a Fortune 50 healthcare provider and a Fortune 500 insurer. Those vendor-published references are unnamed, and they evidence regulated-enterprise buyers of the product, which reaches this rung. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 | Agentic Access Management runs each AI agent request on a short-lived, least-privilege identity and links every action to a prompt, intent, policy, session, and action trail. Agents that use it obtain their access through Oasis, which places the product at the infrastructure layer other software depends on to act. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | CB Insights records 10 patent filings by Oasis and a patent granted on May 5, 2026 for techniques that secure identity and access management operations via agents and relays. A granted patent is retained intellectual property that accrues to Oasis, which reaches the rung for some accumulated advantage. The sources name no retained dataset or content licence that would lift it further. |
Oasis targets identity and security teams at large enterprises. KuppingerCole says Oasis sells to identity and IAM teams. SiliconANGLE relays the company’s statement that business with Fortune 500 companies accounts for the majority of its sales.
The homepage presents customer outcomes by sector and company size, including a Fortune 50 healthcare provider, a Fortune 500 logistics company, and a Fortune 500 insurer. The product page quotes a Fortune 1000 head of identity who found more than 17,000 non-human identities in that company’s cloud environment. The Agentic Access Management page quotes a Fortune 500 CISO on gaining visibility and control over AI agents.
Agentic Access Management extends the same buyer’s scope to AI agents. Oasis frames the need with ESG Reports figures it cites of 20 to 50 times more non-human identities than human ones, growing 20% a year.
The Oasis platform inventories non-human identities and manages their lifecycle. The product page says it builds the inventory after connecting to the customer’s environment and uses heuristics and machine learning to suggest owners. Its lifecycle actions run from provisioning and vaulting to rotation and decommissioning. Oasis Scout adds threat and anomaly detection that matches anomalies to known fingerprints of threat actors.
Oasis Agentic Access Management applies access policy to AI agents as they act. The product page says it understands an agent’s intent in real time and runs each request on a short-lived, least-privilege identity. The launch release describes just-in-time session identities that last seconds to minutes and capture audit trails of person, prompt, policy, actions, and teardown.
CB Insights records 10 patent filings by Oasis, including a patent granted on May 5, 2026 for techniques that secure identity and access management operations via agents and relays. A GitGuardian blog roundup credits Oasis with strong multi-environment discovery.
Oasis sells to enterprises through its own sales organization and resellers. CTech reports that president Michael DeCesare oversees sales, marketing, partnerships, and customer success. The newsroom lists a reseller partnership with GuidePoint Security.
Oasis raised $195 million before the acquisition, including a $120 million Series B led by Craft Ventures with Cyberstarts, Sequoia Capital, and Accel, according to SecurityWeek. CTech reported that the Series B valued Oasis at about $700 million. CTech also wrote that Oasis reported a fivefold increase in annual revenue in the year before DeCesare joined.
Cyera completed its acquisition of Oasis in a deal SecurityBrief reports as valued at $1 billion, and CB Insights places the valuation between $700 million and $1 billion. KuppingerCole notes that Accel and Cyberstarts invested in both companies, so it does not treat the price as a clean arm’s-length valuation. SEC EDGAR lists Form D filings by two investment vehicles named for Oasis Security, filed in June and August 2026.
The /pricing address on the Oasis site redirects to its demo request page, which invites prospects to connect with Oasis technical experts. A GitGuardian blog roundup describes Oasis pricing as enterprise-tier pricing for commercial SaaS.
Neither page states the unit Oasis charges by, for the core platform or for Agentic Access Management. A buyer comparing costs can ask Oasis to specify the billing unit.
Oasis connects to customer environments without the need for agents, according to SecurityWeek, and uses built-in analytics to observe how non-human identities are used. The product page says that connection produces an inventory of non-human identities in minutes.
Agentic Access Management works inside agent workflows. It runs each agent request on a short-lived, least-privilege identity and links every action to a trail of prompt, intent, policy, session, and action. An agent workflow routed through it depends on Oasis to obtain access for each request.
The Oasis homepage footer includes a SOC 2 compliance badge and an ISO 27001 certification logo. A probe of the trust and security subdomains and of the trust, security, and compliance paths on the main site found no trust center.
Cyera completed its acquisition of Oasis, and SecurityBrief reports that the acquired business will operate as Cyera Identity, a dedicated identity unit within Cyera. In its blog post announcing the letter of intent, Oasis told customers that the Oasis platform continues. The same post says their Oasis team stays focused on non-human identity and agentic access.
Oasis integrates with the systems where non-human identities are used. The homepage says it covers environments from AWS, Azure, and BigQuery to GitHub, ChatGPT, Salesforce, Office 365, and Copilot. The Agentic Access Management page lists integrations with Claude, OpenAI, Cursor, and Glean, and the newsroom lists an integration that combines Oasis identity governance with inline enforcement across Zscaler’s Zero Trust Exchange.
Inside Cyera, the Oasis business will operate as Cyera Identity. Cyera’s blog says Oasis brings the intelligence to understand the identities, credentials, workloads, and agents accessing enterprise data. TechCrunch reported Cyera’s plan to integrate Oasis technology into a unified identity and data security platform.
Co-founders Danny Brickman, CEO, and Amit Zimerman, CPO, met during their military service in Unit 81, according to CTech. CTech later reported that Brickman served 11 years in the Talpiot program and Zimerman about seven years.
The about page lists Michael DeCesare as president of go-to-market and Barak Shelef as head of technology. CTech reports that DeCesare previously served as CEO of Forescout Technologies, which was sold in 2020. CTech put Oasis headcount at 170 employees.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Oasis Security: Non Human Identity Management Platform | official | 2026-09-15 |
| f2 | SecurityBrief UK: Cyera completes USD $1 billion Oasis Security deal | press | 2026-09-15 |
| f3 | SecurityWeek on the Oasis Series B | press | 2026-09-15 |
| f4 | SecurityWeek on the Oasis Series B | press | 2026-06-29 |
| f5 | AI Defense Matrix Catalog entry | other | 2026-06-07 |
| f6 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| f7 | Oasis NHI Security Cloud product overview | official | 2026-06-12 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.