Rising Star Oasis Security

Non-Human Identity Management (NHIM) is emerging in response to the explosive growth of non-human identities (NHIs) created by cloud adoption, microservices, and automation. Service accounts, API keys, tokens, and certificates now often outnumber human identities by roughly 50 to 1, expanding the attack surface and attracting increasing attention from malicious actors. Traditional IAM programs and tools—primarily designed around human users—frequently lack the visibility, governance, and security controls needed for these machine and workload identities, creating a clear market gap and a driver for rapid NHIM growth across hybrid and multi-cloud environments.

Oasis Security, founded in 2022 and headquartered in New York, positions itself as a specialized leader in this category. The company raised $40M in January 2024 in a Series A led by Sequoia Capital with Accel, Cyberstarts, and Maple Capital participating, then added a $35M Series A extension in May 2024, totaling $75M. Its platform focuses on discovering all NHIs, building contextual understanding of ownership, usage, access levels, and privileges, and applying AI-based analytics to detect anomalies and policy violations in real time.

Beyond visibility, Oasis emphasizes governance and lifecycle control—supporting remediation of overprivileged access, stale accounts, and configuration drift via structured workflows and policy-driven automation. A centralized control plane enables operations like credential rotation, recertification, and decommissioning, while integrating with common environments including AWS, Azure, GCP, and on-premises Microsoft Active Directory. Key challenges include educating buyers about NHIM’s importance and continuously adapting as threats targeting NHIs evolve.

• Oasis Security was founded in 2022.
• The company is headquartered in New York, USA.
• Total Series A funding reached $75 million.
• A $40 million Series A round occurred in January 2024 and was led by Sequoia Capital.
• Accel, Cyberstarts, and Maple Capital participated in the January 2024 funding round.
• A $35 million Series A extension was secured in May 2024.
• Non-human identities can outnumber human identities by a factor of 50 to 1.
• Oasis supports major cloud providers including AWS, Azure, and GCP.
• Oasis integrates with on-premises Microsoft Active Directory.
• The platform addresses issues including overprivileged access, stale accounts, and configuration drift.

• “These NHIs often outnumber human identities by a factor of 50 to 1, creating a vast and complex attack surface that is increasingly targeted by malicious actors.”
• “Traditional identity and access management (IAM) solutions are typically designed for human users and often lack the capabilities to effectively manage and secure NHIs.”
• “Using advanced AI-based analytics, the platform automatically discovers all NHIs in an organization’s environment and delivers rich, contextual insights into each identity’s ownership, usage, access levels, and privilege status.”
• “Its AI-driven architecture builds a dynamic understanding of how identities behave and interact, surfacing anomalies and policy violations in real time to enhance overall security posture.”
• “To streamline mitigation, the platform provides structured remediation workflows that address issues such as overprivileged access, stale accounts, and configuration drift.”
• “Governance is enforced through a centralized, policy-based control plane that automates key lifecycle operations including credential rotation, recertification, and decommissioning.”
• “Oasis Security faces the challenge of educating potential customers about the importance of NHIM and the unique value proposition of their solution.”
• “The dynamic nature of cyber threats targeting NHIs requires continuous innovation and adaptation to stay ahead of potential vulnerabilities.”
• “What truly sets Oasis apart is its clear, actionable guidance for remediation, seamlessly paired with built-in automation to minimize manual effort and accelerate time-to-secure.”
• “This unique combination addresses a critical and often overlooked aspect of cybersecurity, empowering organizations to proactively secure their expanding non-human identity footprint with confidence and efficiency.”