CISO Tribune

Vendor comparison · 2 companies

Oasis Security vs Truffle Security

Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. Truffle Security is the company behind TruffleHog, an open-source security project. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Oasis Security
  • Truffle Security
Oasis Security vs Truffle Security: Products, Customers and Funding Compared
Oasis SecurityOasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment.oasis.securityTruffle SecurityTruffle Security is the company behind TruffleHog, an open-source security project.trufflesecurity.com
What it sells
  • Oasis Scout[2]Oasis Scout provides threat and anomaly detection for NHIs.
  • Context Reconstruction Engine[4][6]Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges.
  • Oasis NHI Threat Center[6]The Oasis NHI Threat Center provides expanded threat actor profiles.
  • TruffleHog[1][4][5][6][7][8][9][10][11]Uncovers exposed non-human identities and their secrets.
  • TruffleHog Analyze[1][5][10]Identifies the resources and permissions associated with NHIs, API keys, and other secrets.
  • TruffleHog Enterprise[1][10][11]Used by Optro and TextNow to detect exposed secrets across source code and collaboration tools.
Categories
Headquarters
Not stated on its pagesSan Francisco, United States[3]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Owned by Cyera[1][3]Privately held[7]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • July 28, 2026Cyera announced an agreement to acquire Oasis Security, a company specialising in non-human identity security.[14]
  • March 19, 2026Oasis Security announced it had raised $120 million in new funding to expand research, development and go-to-market operations.[15]
  • November 19, 2025Oasis Security announced the launch of Oasis Agentic Access Management, a product designed to govern AI agents across their entire lifecycle.[13]
  • June 1, 2026Truffle Security says Hugging Face partnered closely with it, and CTO Julien Chaumond contributed native storage-bucket scanning support to TruffleHog.[4]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Oasis Security addresses healthcare organisations that need to meet regulations such as HIPAA and HITRUST. Oasis Security addresses financial services firms whose core banking, trading and payment systems rely on service accounts and API keys. Oasis Security addresses teams that want visibility into AI adoption across endpoints, SaaS and cloud.Its customer stories describe organisations that scan source code together with collaboration tools such as Jira, Slack, and Confluence, and one of them works in customer data and marketing automation. TruffleHog can run on isolated servers operated by Truffle Security or on servers the customer runs. TruffleHog also offers on-premise scanners for sources on an internal network.
Last verified
November 4, 2026September 27, 2026

Where they overlap

  • Oasis Security and Truffle Security are both filed under Non-human identity security.

Where they differ, field by field

  • Oasis Security's primary category is Non-human identity security; Truffle Security's is Secrets detection.
  • Oasis Security is also filed under Identity threat detection and response, Privileged access management and AI model and agent security.
  • Oasis Security lists Oasis Scout, Context Reconstruction Engine and Oasis NHI Threat Center. Truffle Security lists TruffleHog, TruffleHog Analyze and TruffleHog Enterprise.
  • Truffle Security is headquartered in San Francisco, United States.
  • Oasis Security is owned by Cyera. Truffle Security is privately held.

What it sells: Oasis Security

What Oasis Scout does[2]
Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors.
What Oasis NHI Threat Center does[6]
The Oasis NHI Threat Center is where customers access expanded threat actor profiles. The Oasis NHI Threat Center covers the tactics, tools and behaviors of malicious actors targeting non-human identities.

What it sells: Truffle Security

What TruffleHog does[1][4][5][6][7][8][9][10][11]
TruffleHog scans hidden content, deleted code, and version history from GitHub, Google Cloud, Slack, and other commonly used tools. TruffleHog looks for secrets in GitHub comments and pull requests. TruffleHog integrates with more than 20 platforms and tools. TruffleHog scans released artifacts for leaked secrets introduced during the build process.
What TruffleHog Analyze does[1][5][10]
TruffleHog Analyze identifies the resources and permissions associated with NHIs, API keys, and other secrets without requiring access to a provider's UI. TruffleHog Analyze works with TruffleHog Enterprise to reveal secret ownership, access scope, and permissions.
What TruffleHog Enterprise does[1][10][11]
Optro chose TruffleHog Enterprise for its detectors and integrations. Optro detects exposed secrets across source code, Jira, Slack, and S3 application logs, and routes findings into its SecOps workflows. Findings from Optro's scans move into Tines for investigation and response. With TruffleHog Enterprise at TextNow, verification helps the team decide which exposures require immediate response.

Questions about Oasis Security and Truffle Security

What do Oasis Security and Truffle Security sell?
Oasis Security sells Oasis Scout, Context Reconstruction Engine and Oasis NHI Threat Center. Truffle Security sells TruffleHog, TruffleHog Analyze and TruffleHog Enterprise.
Are Oasis Security and Truffle Security in the same category?
They share Non-human identity security. Oasis Security's primary category is Non-human identity security and Truffle Security's is Secrets detection.
Where are Oasis Security and Truffle Security headquartered?
Truffle Security is headquartered in San Francisco, United States.
Who owns Oasis Security and Truffle Security?
Oasis Security is owned by Cyera. Truffle Security is privately held.
Who are Oasis Security and Truffle Security sold to?
Oasis Security addresses healthcare organisations that need to meet regulations such as HIPAA and HITRUST. Its customer stories describe organisations that scan source code together with collaboration tools such as Jira, Slack, and Confluence, and one of them works in customer data and marketing automation.
What have Oasis Security and Truffle Security announced recently?
July 28, 2026: Cyera announced an agreement to acquire Oasis Security, a company specialising in non-human identity security. June 1, 2026: Truffle Security says Hugging Face partnered closely with it, and CTO Julien Chaumond contributed native storage-bucket scanning support to TruffleHog.

About Oasis Security

Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. Oasis Security has been acquired by Cyera. Oasis Security's coverage spans IaaS, SaaS, PaaS and on-prem environments, including AWS, Azure, BigQuery, GitHub, ChatGPT, Salesforce, Office 365 and Copilot. Oasis Security connects to business systems through a BYOI (Bring Your Own Infrastructure) architecture. Oasis Security integrates with Cloud, SaaS and on-prem environments to create an ownership inventory enriched with CMDB data. Oasis Security maintains integrations with a variety of tools and platforms so that alerts and remediation guidance reach existing environments and workflows.[2][4]

Oasis Security's NHI discovery engine creates an inventory of all of a customer's NHI assets. Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges. Oasis Security assists customers in assigning owners for each non-human identity with its AI-based Ownership Discovery Engine. Oasis Security provides visibility into third-party vendor reputation and risk. Oasis Security workflows can trigger support tickets in a customer's ITSM and notifications in collaboration channels.[4]

Oasis Security ranks posture issues based on their severity. Oasis Security alerts customers about NHI-related risks, using AI-based analytics to identify compromise attempts, policy violations, misconfigurations, toxic combinations and anomalies. Oasis Security's policy-driven control plane normalizes security policies across asset types. Oasis Security's assisted remediation includes click-and-fix actions, automations and workflows. Oasis Security offers pre-configured remediation plans for the issues it identifies. Oasis Security presents compliance dashboards for frameworks like PCI, SOX, NIST CSF and more. Oasis Security alerts customers about NHIs with secrets about to expire.[2][5]

Oasis Scout provides threat and anomaly detection for NHIs. Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors. Oasis Security alerts customers to malicious activities targeting their NHIs, based on behavioral analysis, abnormal pattern detection and threat actor profiling. Oasis Security's Context Reconstruction Engine creates an evolving fingerprint for every NHI. Oasis Security provides a visual graph, a timeline and a threat actor profile for compromise attempts. Oasis Security uses threat intelligence sources to update customers about leaked credentials. Oasis Security offers the Oasis NHI Threat Center for expanded threat actor profiles.[2][6]

Oasis Security uses automated processes for NHI provisioning, monitoring and decommissioning. Oasis Security provides ILM workflows covering continuous monitoring, automated secret rotation, attestation and policy enforcement across a customer's infrastructure. Oasis Security sets up automatic secret rotation at defined intervals via the customer's vault of choice. Oasis Security enables customers to launch recertification campaigns to validate business justification with identity owners. Oasis Security enables identity creation in the identity provider of the customer's choice. Oasis Security provides full context on NHI consumers and resource access so that stale and unused identities can be decommissioned without service disruptions.[2][7]

Oasis Security gives every AI agent access only for as long as the agent needs it, automatically. Oasis Security continuously discovers unauthorized tools, NHIs and unmonitored agent activity across the enterprise. Oasis Security enforces least privilege, isolates AI access and ties every action to a governed identity. Oasis Security gives real-time visibility into AI adoption across endpoints, SaaS and cloud. Oasis Security detects risky AI identities, monitors entitlements and automates permission cleanups. Oasis Security enables customers to restrict AI agents to approved model suppliers.[8]

Oasis Security protects NHIs tied to policy management platforms, claims processing systems and customer service tools in insurance. Oasis Security supports healthcare-specific regulations such as HIPAA and HITRUST. Oasis Security protects access to the specialized software that energy companies use for design, simulations and project management by securing API keys, service accounts and third-party identities. Oasis Security supports PCI DSS 4.0, SOC 2 and GDPR requirements in financial services with automated ownership assignment, access reviews and policy enforcement workflows.[9][10][11][12]

Oasis Security on the record

Sources

Oasis Security full record

  1. [1]oasis.securityOasis Security · oasis.security · undated page, accessed November 4, 2026 · Tier A
  2. [2]Non-Human Identity Management PlatformOasis Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]Non Human Identity Management Platform | OASIS SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]NHI Asset Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]NHI Posture Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]ITDR for Non-Human Identities | Oasis Scout™Oasis Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]NHI Lifecycle Governance & Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Security Posture Management (AI-SPM) | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Insurance NHI Security | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Healthcare NHI Security | Protect Patient Data | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure Automation & Prevent Disruptions | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]NHI Security for Financial Services | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Oasis Security Launches Agentic Access Management, the First Identity Solution Built for AI AgentsPR Newswire · published November 19, 2025 · Tier A
  14. [14]5 Things To Know About Cyera's Deal To Acquire Oasis SecurityCRN · published July 28, 2026 · Tier B
  15. [15]Oasis Security raises $120M to secure nonhuman identities across AI and cloud environments - SiliconANGLESiliconANGLE · published March 19, 2026 · Tier B

Truffle Security full record

  1. [1]trufflesecurity.comTruffle Security · trufflesecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Truffle security raises 25 million series b to expand nhi security 302606933Truffle Security via PR Newswire · prnewswire.com · published November 6, 2025 · Tier A
  3. [3]Terms conditionsTruffle Security · trufflesecurity.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Scanning 7.6 Petabytes of Hugging Face Training Data for SecretsTruffle Security Co. · published June 1, 2026 · Tier A
  5. [5]Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]About ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Security ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Meet Truffle Security at Black Hat 2026 - Booth 5727Truffle Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Integrations ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Klaviyo Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Optro Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Customers ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]TextNow Customer Story ◆ Truffle Security Co.Truffle Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.