About Oasis Security
Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. Oasis Security has been acquired by Cyera. Oasis Security's coverage spans IaaS, SaaS, PaaS and on-prem environments, including AWS, Azure, BigQuery, GitHub, ChatGPT, Salesforce, Office 365 and Copilot. Oasis Security connects to business systems through a BYOI (Bring Your Own Infrastructure) architecture. Oasis Security integrates with Cloud, SaaS and on-prem environments to create an ownership inventory enriched with CMDB data. Oasis Security maintains integrations with a variety of tools and platforms so that alerts and remediation guidance reach existing environments and workflows.[2][4]
Oasis Security's NHI discovery engine creates an inventory of all of a customer's NHI assets. Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges. Oasis Security assists customers in assigning owners for each non-human identity with its AI-based Ownership Discovery Engine. Oasis Security provides visibility into third-party vendor reputation and risk. Oasis Security workflows can trigger support tickets in a customer's ITSM and notifications in collaboration channels.[4]
Oasis Security ranks posture issues based on their severity. Oasis Security alerts customers about NHI-related risks, using AI-based analytics to identify compromise attempts, policy violations, misconfigurations, toxic combinations and anomalies. Oasis Security's policy-driven control plane normalizes security policies across asset types. Oasis Security's assisted remediation includes click-and-fix actions, automations and workflows. Oasis Security offers pre-configured remediation plans for the issues it identifies. Oasis Security presents compliance dashboards for frameworks like PCI, SOX, NIST CSF and more. Oasis Security alerts customers about NHIs with secrets about to expire.[2][5]
Oasis Scout provides threat and anomaly detection for NHIs. Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors. Oasis Security alerts customers to malicious activities targeting their NHIs, based on behavioral analysis, abnormal pattern detection and threat actor profiling. Oasis Security's Context Reconstruction Engine creates an evolving fingerprint for every NHI. Oasis Security provides a visual graph, a timeline and a threat actor profile for compromise attempts. Oasis Security uses threat intelligence sources to update customers about leaked credentials. Oasis Security offers the Oasis NHI Threat Center for expanded threat actor profiles.[2][6]
Oasis Security uses automated processes for NHI provisioning, monitoring and decommissioning. Oasis Security provides ILM workflows covering continuous monitoring, automated secret rotation, attestation and policy enforcement across a customer's infrastructure. Oasis Security sets up automatic secret rotation at defined intervals via the customer's vault of choice. Oasis Security enables customers to launch recertification campaigns to validate business justification with identity owners. Oasis Security enables identity creation in the identity provider of the customer's choice. Oasis Security provides full context on NHI consumers and resource access so that stale and unused identities can be decommissioned without service disruptions.[2][7]
Oasis Security gives every AI agent access only for as long as the agent needs it, automatically. Oasis Security continuously discovers unauthorized tools, NHIs and unmonitored agent activity across the enterprise. Oasis Security enforces least privilege, isolates AI access and ties every action to a governed identity. Oasis Security gives real-time visibility into AI adoption across endpoints, SaaS and cloud. Oasis Security detects risky AI identities, monitors entitlements and automates permission cleanups. Oasis Security enables customers to restrict AI agents to approved model suppliers.[8]
Oasis Security protects NHIs tied to policy management platforms, claims processing systems and customer service tools in insurance. Oasis Security supports healthcare-specific regulations such as HIPAA and HITRUST. Oasis Security protects access to the specialized software that energy companies use for design, simulations and project management by securing API keys, service accounts and third-party identities. Oasis Security supports PCI DSS 4.0, SOC 2 and GDPR requirements in financial services with automated ownership assignment, access reviews and policy enforcement workflows.[9][10][11][12]
Oasis Security on the record