CISO Tribune

Vendor comparison · 2 companies

Archipelo vs Oasis Security

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Archipelo
  • Oasis Security
Archipelo vs Oasis Security: Products, Customers and Funding Compared
ArchipeloArchipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.archipelo.comOasis SecurityOasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment.oasis.security
What it sells
  • Salmon[1][2][3][4][5]Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.
  • Oasis Scout[2]Oasis Scout provides threat and anomaly detection for NHIs.
  • Context Reconstruction Engine[4][6]Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges.
  • Oasis NHI Threat Center[6]The Oasis NHI Threat Center provides expanded threat actor profiles.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesOwned by Cyera[1][3]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 28, 2026Cyera announced an agreement to acquire Oasis Security, a company specialising in non-human identity security.[14]
  • March 19, 2026Oasis Security announced it had raised $120 million in new funding to expand research, development and go-to-market operations.[15]
  • November 19, 2025Oasis Security announced the launch of Oasis Agentic Access Management, a product designed to govern AI agents across their entire lifecycle.[13]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Archipelo describes incident investigation teams as needing to work backward from a consequential state change toward the execution associated with it. Archipelo names systems that investigate, evaluate, govern, and depend upon execution as the systems for which verifiable execution history matters.Oasis Security addresses healthcare organisations that need to meet regulations such as HIPAA and HITRUST. Oasis Security addresses financial services firms whose core banking, trading and payment systems rely on service accounts and API keys. Oasis Security addresses teams that want visibility into AI adoption across endpoints, SaaS and cloud.
Last verified
September 30, 2026November 4, 2026

Where they overlap

  • Archipelo and Oasis Security are both filed under AI model and agent security.

Where they differ, field by field

  • Archipelo's primary category is Software supply chain security; Oasis Security's is Non-human identity security.
  • Archipelo is also filed under Insider risk management. Oasis Security is also filed under Identity threat detection and response and Privileged access management.
  • Archipelo lists Salmon. Oasis Security lists Oasis Scout, Context Reconstruction Engine and Oasis NHI Threat Center.
  • Oasis Security is owned by Cyera.

What it sells: Archipelo

What Salmon does[1][2][3][4][5]
Salmon is Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Execution is represented as a cryptographically signed event with explicit context. Salmon captures execution as it occurs upstream within supported environments.

What it sells: Oasis Security

What Oasis Scout does[2]
Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors.
What Oasis NHI Threat Center does[6]
The Oasis NHI Threat Center is where customers access expanded threat actor profiles. The Oasis NHI Threat Center covers the tactics, tools and behaviors of malicious actors targeting non-human identities.

Questions about Archipelo and Oasis Security

What do Archipelo and Oasis Security sell?
Archipelo sells Salmon. Oasis Security sells Oasis Scout, Context Reconstruction Engine and Oasis NHI Threat Center.
Are Archipelo and Oasis Security in the same category?
They share AI model and agent security. Archipelo's primary category is Software supply chain security and Oasis Security's is Non-human identity security.
Who owns Archipelo and Oasis Security?
Oasis Security is owned by Cyera.
Who are Archipelo and Oasis Security sold to?
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Oasis Security addresses healthcare organisations that need to meet regulations such as HIPAA and HITRUST.
What have Archipelo and Oasis Security announced recently?
July 28, 2026: Cyera announced an agreement to acquire Oasis Security, a company specialising in non-human identity security.

About Archipelo

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Archipelo builds Salmon for autonomous multi-actor software systems. Archipelo, Inc. is the company developing and stewarding Salmon.[1][3][4][5]

Archipelo states that autonomous agents, tools, runtimes, and controllers increasingly perform consequential actions themselves. Archipelo states that the resulting state alone cannot show which execution occurred, in what order, or how each state transition derived from the ones before it. Archipelo develops infrastructure that makes autonomous multi-actor software execution independently verifiable. Archipelo states that safe and reliable agents need verifiable evidence of their execution history.[4][5]

Archipelo points to Git as showing the value of persistent, linked source code history. Archipelo says Execution Verification Infrastructure addresses a different problem, which is establishing a verifiable record of state transitions and the resulting state.

Archipelo describes execution as represented by a cryptographically signed event with explicit context. Archipelo states that Salmon captures execution as it occurs upstream within supported environments, not downstream after the event has already taken place. Archipelo states that Salmon does not visually or structurally manufacture execution continuity when execution continuity has not been established.

Archipelo states that agent generated changes can involve delegated execution, tools, subprocesses and multiple state transitions. Archipelo states that execution history provides a durable record of supported execution relationships to verify outcomes. Archipelo states that during incident investigation, teams need to work backward from a consequential state change toward the execution associated with it, to determine what caused the outcome.

One principle is that downstream systems should not be forced to establish execution history solely through retrospective inference where it can be captured during supported execution. Archipelo states that what an actor was permitted or instructed to do is distinct from what it actually executed. Archipelo states that machine-speed software systems require execution evidence that other software systems can consume and verify. Archipelo describes identity, policy, observability, security, engineering, and governance systems as solving adjacent problems.[5]

Archipelo describes itself as a deep tech company building foundational infrastructure for verifiable autonomous systems.[1][3][4][5]

Archipelo on the record

Sources

Archipelo full record

  1. [1]archipelo.comArchipelo · archipelo.com · undated page, accessed September 30, 2026 · Tier A
  2. [2]Archipelo - Making Autonomous Software Execution VerifiableArchipelo · undated page, accessed October 30, 2026 · Tier A
  3. [3]Terms of Service — SalmonArchipelo, Inc. · published September 20, 2026 · Tier A
  4. [4]Archipelo - This page has been retiredArchipelo · undated page, accessed October 30, 2026 · Tier A
  5. [5]About — SalmonArchipelo · undated page, accessed November 10, 2026 · Tier A

Oasis Security full record

  1. [1]oasis.securityOasis Security · oasis.security · undated page, accessed November 4, 2026 · Tier A
  2. [2]Non-Human Identity Management PlatformOasis Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]Non Human Identity Management Platform | OASIS SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]NHI Asset Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]NHI Posture Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]ITDR for Non-Human Identities | Oasis Scout™Oasis Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]NHI Lifecycle Governance & Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Security Posture Management (AI-SPM) | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Insurance NHI Security | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Healthcare NHI Security | Protect Patient Data | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure Automation & Prevent Disruptions | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]NHI Security for Financial Services | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Oasis Security Launches Agentic Access Management, the First Identity Solution Built for AI AgentsPR Newswire · published November 19, 2025 · Tier A
  14. [14]5 Things To Know About Cyera's Deal To Acquire Oasis SecurityCRN · published July 28, 2026 · Tier B
  15. [15]Oasis Security raises $120M to secure nonhuman identities across AI and cloud environments - SiliconANGLESiliconANGLE · published March 19, 2026 · Tier B

Spot a factual error? Request a correction.