Aembit, AuthMind, Cygrid and Oasis Security

About AuthMind

AuthMind sells an identity observability platform built for the age of agentic AI, securing what AI agents, NHIs and humans actually do, not just what policies intend. AuthMind is an identity observability and protection company built for agentic AI. AuthMind observes and protects every AI agent, NHI and human identity at runtime. AuthMind secures agentic AI, non-human, and human identities by observing what identities actually do across every environment.^[1][5][6][7]

AuthMind observes actual access paths on the wire, including cloud traffic, network flows, and workload activity. AuthMind integrates with IdPs, PAM, vaults, and secret managers to enrich activity with identity attributes, roles, groups, policies, and secrets. AuthMind stitches collected and correlated activity into a real-time Identity Activity Access Graph, a dynamic map of how AI Agents, NHIs, users, and other identities actually access applications, services, data, and infrastructure. AuthMind continuously correlates access path activity of AI agent, NHI and human identity across cloud, SaaS and on-premise environments. AuthMind automatically compares expected access (IAM/IGA, PAM, and policy intent) with actual access (observed behavior) and applies a set of native AI models.^[4][5][7][8]

AuthMind secures AI agents, GenAI integrations, and autonomous identities operating across cloud, SaaS, workloads, and APIs. AuthMind continuously discovers all agentic AI identities across cloud, SaaS, and on-prem environments, including shadow and unmanaged agents, and maps every agent back to its human owner. AuthMind maps how AI agents authenticate, what roles they assume, which secrets they access, and what systems they touch. AuthMind identifies rogue agents, abnormal access patterns, privilege misuse, and unexpected activity. AuthMind maps every AI agent's actual access behavior against its intended boundaries, detecting unauthorized access, shadow activity, and policy violations in real time.^[5][9]

AuthMind describes Non-Human Identities (NHIs) as AI agents, service accounts, API keys, tokens and certificates that power modern infrastructure across cloud, SaaS, and workloads. AuthMind correlates NHIs and AI agents to their human owners, workloads, vault authentication, and execution paths. AuthMind identifies unexpected authentication patterns, overly permissive roles, vault bypass attempts, and misuse hidden within legitimate access paths. AuthMind exposes shadow identities, stale credentials, and secrets persisting beyond workload lifetimes. AuthMind detects brute-force attacks, enumeration attempts, risky behavior, and lateral movement targeting IAM systems, vaults, and secrets managers. AuthMind's patented Identity Access Flow Graph maps the full path from vault authentication through secret retrieval to actual workload usage, in real time, across every environment.^[5][10]

AuthMind detects MFA bypass, IdP compromise, token theft, impossible travel and suspicious access patterns across every external attack vector in real time. AuthMind detects AD attacks, privilege abuse, lateral movement such as LOTL, and credential misuse, including threats that bypass PAM and hide inside legitimate access paths. AuthMind applies patented AI and ML models to the full identity access path to detect LOTL activity that blends into legitimate access. AuthMind observes the full access path, detecting MFA bypass attempts, post-authentication anomalies, token theft, and compromised identity activity across every environment. AuthMind surfaces and remediates shadow assets, missing MFA, dormant service accounts, and users circumventing controls automatically. AuthMind automates containment and delivers full identity context across human, NHI, and agentic AI identities to SOC. AuthMind has a remediation framework that enables actionable response and remediation across IDPs, endpoints, network, SASE, PAM, and security tools.^[5][8][11]

AuthMind continuously observes identity activity across identity providers, SIEM platforms, cloud infrastructure, network security tools, and ITSM solutions. AuthMind ingests and correlates identity activity logs in Splunk Cloud. AuthMind monitors and protects identity activity across Okta IdP. AuthMind's patented Identity Activity Access Graph maps what identities actually do across the network against what identity systems intend. AuthMind's observability extends to non-human identities, like service accounts, secrets and workloads, and to human users. AuthMind is SOC 2 Type II compliant and independently audited for the security, availability and confidentiality of its platform.^{[3][5][6][7][10][12]}

About Cygrid

Cygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy. Cygrid puts humans, service accounts, API connections and AI agents in one Identity Intelligence Graph. Cygrid connects identity, SaaS, cloud and AI sources into the Identity Intelligence Graph and secures every identity at three enforcement points: before first use, while access exists and at runtime. Cygrid offers one platform to discover, clean up, audit and secure access across SaaS.^{[1][4][5][6][9]}

Cygrid models the action, meaning the permission actually in play, in full context. The graph records what each identity may do, what it actually does and on whose behalf, and policy rules and AI-driven analysis score the risk together. Cygrid discovers the AI agents, MCP servers and connected apps across SaaS, maps each one to the person it acts for, and records who approved what.^[4][5][7]

The Cygrid MCP Gateway sits in the tool-call path and audits, allows, rewrites or blocks every agent tool call at runtime, decided by the same graph as every other enforcement point. Every MCP tool call is authenticated through the customer identity provider, tied to the person behind the agent and checked against policy down to the tool and parameter. In the MCP Gateway, credentials are issued just in time, and every call is logged. Cygrid keeps a registry of approved MCP servers with owner, provenance and version, and pauses a server whose tools change until it is re-reviewed. Cygrid verdicts include allow, downscope, block, revoke on approval or grant just in time, and each verdict is written to an immutable decision log. Cygrid issues a scoped credential at the moment of use and lets it expire. Cygrid removes standing admin and grants elevated access on request, for a limited time.^{[5][8][9][10][11]}

Okta, Entra ID or Google Workspace can sync users, groups and offboarding to the MCP Gateway, so access follows the person. Cygrid ingests existing security tools as feeds and does not replace them. Cygrid connectors are read-only by default, with write access only for fixes the customer approves. On approval, Cygrid revokes risky access, orphaned accounts and dormant tokens at the source, blocks unapproved MCP servers and controls which identities AI agents use. Cygrid inventories every OAuth grant, API key, service account and AI app connection, and revokes the risky ones. Cygrid works with ChatGPT, Claude, Claude agents and more, plus any agent that connects through MCP or OAuth.^{[5][6][8][9][12]}

In a finance example, an AI assistant on Drive can read, edit and share files while every delete is blocked. When an agent asks to export 100,000 records, Cygrid blocks the call or reduces it to the 500-record limit before it reaches the app. For e-commerce, Cygrid maps staff, apps and AI agents with access in every Shopify store and flags dormant admins and over-scoped app tokens. Cygrid grants temporary staff, agencies and freelancers time-limited access and removes it automatically when the work ends.^[13][14]

Cygrid audits every identity and its access, enforces customer policies on every action, and generates evidence for NIS2, DORA and the EU AI Act from one live graph. Cygrid fills in a register of ICT third parties, including OAuth apps and AI agents, automatically from the graph. Cygrid finds shadow admins whose rights come through groups and never appear in the admin list of the platform, and shows the path from user to group to role. The Cygrid gateway inspects tool calls, not content, and its logs record each action and the person behind it, never prompts. Cygrid is ISO 27001 audited, has SOC 2 Type II in progress and has passed an external penetration test. Cygrid is hosted in Frankfurt across multiple availability zones.^{[1][4][7][8][12][13][14]}

About Oasis Security

Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. Oasis Security has been acquired by Cyera. Oasis Security's coverage spans IaaS, SaaS, PaaS and on-prem environments, including AWS, Azure, BigQuery, GitHub, ChatGPT, Salesforce, Office 365 and Copilot. Oasis Security connects to business systems through a BYOI (Bring Your Own Infrastructure) architecture. Oasis Security integrates with Cloud, SaaS and on-prem environments to create an ownership inventory enriched with CMDB data. Oasis Security maintains integrations with a variety of tools and platforms so that alerts and remediation guidance reach existing environments and workflows.^[2][4]

Oasis Security's NHI discovery engine creates an inventory of all of a customer's NHI assets. Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges. Oasis Security assists customers in assigning owners for each non-human identity with its AI-based Ownership Discovery Engine. Oasis Security provides visibility into third-party vendor reputation and risk. Oasis Security workflows can trigger support tickets in a customer's ITSM and notifications in collaboration channels.^[4]

Oasis Security ranks posture issues based on their severity. Oasis Security alerts customers about NHI-related risks, using AI-based analytics to identify compromise attempts, policy violations, misconfigurations, toxic combinations and anomalies. Oasis Security's policy-driven control plane normalizes security policies across asset types. Oasis Security's assisted remediation includes click-and-fix actions, automations and workflows. Oasis Security offers pre-configured remediation plans for the issues it identifies. Oasis Security presents compliance dashboards for frameworks like PCI, SOX, NIST CSF and more. Oasis Security alerts customers about NHIs with secrets about to expire.^[2][5]

Oasis Scout provides threat and anomaly detection for NHIs. Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors. Oasis Security alerts customers to malicious activities targeting their NHIs, based on behavioral analysis, abnormal pattern detection and threat actor profiling. Oasis Security's Context Reconstruction Engine creates an evolving fingerprint for every NHI. Oasis Security provides a visual graph, a timeline and a threat actor profile for compromise attempts. Oasis Security uses threat intelligence sources to update customers about leaked credentials. Oasis Security offers the Oasis NHI Threat Center for expanded threat actor profiles.^[2][6]

Oasis Security uses automated processes for NHI provisioning, monitoring and decommissioning. Oasis Security provides ILM workflows covering continuous monitoring, automated secret rotation, attestation and policy enforcement across a customer's infrastructure. Oasis Security sets up automatic secret rotation at defined intervals via the customer's vault of choice. Oasis Security enables customers to launch recertification campaigns to validate business justification with identity owners. Oasis Security enables identity creation in the identity provider of the customer's choice. Oasis Security provides full context on NHI consumers and resource access so that stale and unused identities can be decommissioned without service disruptions.^[2][7]

Oasis Security gives every AI agent access only for as long as the agent needs it, automatically. Oasis Security continuously discovers unauthorized tools, NHIs and unmonitored agent activity across the enterprise. Oasis Security enforces least privilege, isolates AI access and ties every action to a governed identity. Oasis Security gives real-time visibility into AI adoption across endpoints, SaaS and cloud. Oasis Security detects risky AI identities, monitors entitlements and automates permission cleanups. Oasis Security enables customers to restrict AI agents to approved model suppliers.^[8]

Oasis Security protects NHIs tied to policy management platforms, claims processing systems and customer service tools in insurance. Oasis Security supports healthcare-specific regulations such as HIPAA and HITRUST. Oasis Security protects access to the specialized software that energy companies use for design, simulations and project management by securing API keys, service accounts and third-party identities. Oasis Security supports PCI DSS 4.0, SOC 2 and GDPR requirements in financial services with automated ownership assignment, access reviews and policy enforcement workflows.^{[9][10][11][12]}