CISO Tribune

Vendor comparison · 2 companies

Oasis Security vs Zenity

Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. Zenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Oasis Security
  • Zenity
Oasis Security vs Zenity: Products, Customers and Funding Compared
Oasis SecurityOasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment.oasis.securityZenityZenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate.zenity.io
What it sells
  • Oasis Scout[2]Oasis Scout provides threat and anomaly detection for NHIs.
  • Context Reconstruction Engine[4][6]Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges.
  • Oasis NHI Threat Center[6]The Oasis NHI Threat Center provides expanded threat actor profiles.
  • AI Observability[5]Builds a live inventory of every agent across an organization's environment and tracks the data those agents access.
  • AI Security Posture Management (AISPM)[7]Evaluates configuration, permissions, and integrations before an agent goes live.
  • Boundaries[4][6][8]Evaluates every agent action in real time against an organization's rules and decides to let it through, block it, or shut the agent down.
  • AI Detection and Response (AIDR)[9]AIDR reads the full sequence of an agent's activity, detecting threats mapped to the OWASP LLM and MITRE ATLAS frameworks.
  • Zenity Security Assessment Hub[13]A set of 10 free, open-source tools built by Zenity Labs to help security teams identify and understand immediate risks.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pages2021[2]
Ownership and funding
Owned by Cyera[1][3]Privately held[3][6][17]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • July 28, 2026Cyera announced an agreement to acquire Oasis Security, a company specialising in non-human identity security.[14]
  • March 19, 2026Oasis Security announced it had raised $120 million in new funding to expand research, development and go-to-market operations.[15]
  • November 19, 2025Oasis Security announced the launch of Oasis Agentic Access Management, a product designed to govern AI agents across their entire lifecycle.[13]
  • September 23, 2026Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security.[15]
  • August 3, 2026Zenity announced a $125 million Series C round led by Norwest.[14]
  • June 17, 2026Zenity and Carahsoft announced a partnership under which Carahsoft serves as Zenity's Public Sector distributor.[17]
  • March 17, 2026Zenity announced general availability of runtime security controls for AI agents built on Microsoft Foundry.[16]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Oasis Security addresses healthcare organisations that need to meet regulations such as HIPAA and HITRUST. Oasis Security addresses financial services firms whose core banking, trading and payment systems rely on service accounts and API keys. Oasis Security addresses teams that want visibility into AI adoption across endpoints, SaaS and cloud.Zenity describes a global financial services firm and a global asset manager as organizations that write policy rules for agents. Zenity covers agents embedded in SaaS tools, home-grown agentic platforms in the cloud, and end-user devices. Zenity gives security and platform teams a single place to surface, enforce, and protect MCP usage.
Last verified
November 4, 2026November 9, 2026

Where they overlap

  • Oasis Security and Zenity are both filed under AI model and agent security.

Where they differ, field by field

  • Oasis Security's primary category is Non-human identity security; Zenity's is AI model and agent security.
  • Oasis Security is also filed under Identity threat detection and response and Privileged access management. Zenity is also filed under AI governance.
  • Oasis Security lists Oasis Scout, Context Reconstruction Engine and Oasis NHI Threat Center. Zenity lists AI Observability, AI Security Posture Management (AISPM), Boundaries, AI Detection and Response (AIDR) and Zenity Security Assessment Hub.
  • Zenity was founded in 2021.
  • Oasis Security is owned by Cyera. Zenity is privately held.

What it sells: Oasis Security

What Oasis Scout does[2]
Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors.
What Oasis NHI Threat Center does[6]
The Oasis NHI Threat Center is where customers access expanded threat actor profiles. The Oasis NHI Threat Center covers the tactics, tools and behaviors of malicious actors targeting non-human identities.

What it sells: Zenity

What AI Observability does[5]
AI Observability is Zenity's discovery and visibility layer for AI agents. Data Lens surfaces sensitive files and pages that are both frequently accessed and broadly exposed across agents.
What AI Security Posture Management (AISPM) does[7]
AISPM evaluates configuration and permissions for agents embedded in platforms like Microsoft Copilot Studio, ChatGPT Enterprise, and Salesforce Agentforce. AISPM applies stricter enforcement in production and more flexible policy in development or sandbox environments.
What Boundaries does[4][6][8]
Boundaries is Zenity's runtime enforcement engine. A rule written once in Boundaries is enforced on Copilot, ChatGPT Enterprise, Agentforce, Bedrock, coding agents, and homegrown builds. Boundaries includes a built-in AI assistant that turns a plain-language request into a working rule.
What AI Detection and Response (AIDR) does[9]
AI Detection and Response (AIDR) is Zenity's runtime security layer for AI agents. AIDR detects direct and indirect prompt injection and blocks execution before the agent acts on them. AIDR breaks every agent interaction into individual steps and groups them by thread in a single activity table.
What Zenity Security Assessment Hub does[13]
The Zenity Security Assessment Hub is built by Zenity Labs. The tools take a Red-Team approach to visualize threats across Microsoft 365, with a focus on 365 Copilot, Copilot Studio, and Power Platform.

Questions about Oasis Security and Zenity

What do Oasis Security and Zenity sell?
Oasis Security sells Oasis Scout, Context Reconstruction Engine and Oasis NHI Threat Center. Zenity sells AI Observability, AI Security Posture Management (AISPM), Boundaries, AI Detection and Response (AIDR) and Zenity Security Assessment Hub.
Are Oasis Security and Zenity in the same category?
They share AI model and agent security. Oasis Security's primary category is Non-human identity security and Zenity's is AI model and agent security.
When were Oasis Security and Zenity founded?
Zenity was founded in 2021.
Who owns Oasis Security and Zenity?
Oasis Security is owned by Cyera. Zenity is privately held.
Who are Oasis Security and Zenity sold to?
Oasis Security addresses healthcare organisations that need to meet regulations such as HIPAA and HITRUST. Zenity describes a global financial services firm and a global asset manager as organizations that write policy rules for agents.
What have Oasis Security and Zenity announced recently?
July 28, 2026: Cyera announced an agreement to acquire Oasis Security, a company specialising in non-human identity security. September 23, 2026: Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security.

About Oasis Security

Oasis Security sells a platform that creates an inventory of all Non-Human Identities in a customer's environment. Oasis Security has been acquired by Cyera. Oasis Security's coverage spans IaaS, SaaS, PaaS and on-prem environments, including AWS, Azure, BigQuery, GitHub, ChatGPT, Salesforce, Office 365 and Copilot. Oasis Security connects to business systems through a BYOI (Bring Your Own Infrastructure) architecture. Oasis Security integrates with Cloud, SaaS and on-prem environments to create an ownership inventory enriched with CMDB data. Oasis Security maintains integrations with a variety of tools and platforms so that alerts and remediation guidance reach existing environments and workflows.[2][4]

Oasis Security's NHI discovery engine creates an inventory of all of a customer's NHI assets. Oasis Security's Context Reconstruction Engine provides insights and visualizations on identity consumers, secrets and privileges. Oasis Security assists customers in assigning owners for each non-human identity with its AI-based Ownership Discovery Engine. Oasis Security provides visibility into third-party vendor reputation and risk. Oasis Security workflows can trigger support tickets in a customer's ITSM and notifications in collaboration channels.[4]

Oasis Security ranks posture issues based on their severity. Oasis Security alerts customers about NHI-related risks, using AI-based analytics to identify compromise attempts, policy violations, misconfigurations, toxic combinations and anomalies. Oasis Security's policy-driven control plane normalizes security policies across asset types. Oasis Security's assisted remediation includes click-and-fix actions, automations and workflows. Oasis Security offers pre-configured remediation plans for the issues it identifies. Oasis Security presents compliance dashboards for frameworks like PCI, SOX, NIST CSF and more. Oasis Security alerts customers about NHIs with secrets about to expire.[2][5]

Oasis Scout provides threat and anomaly detection for NHIs. Oasis Scout continuously monitors the environment to identify leaked credential, unauthorized access and account takeover. Oasis Scout is powered by Oasis AuthPrint, which matches identified anomalies to known fingerprints of threat actors. Oasis Security alerts customers to malicious activities targeting their NHIs, based on behavioral analysis, abnormal pattern detection and threat actor profiling. Oasis Security's Context Reconstruction Engine creates an evolving fingerprint for every NHI. Oasis Security provides a visual graph, a timeline and a threat actor profile for compromise attempts. Oasis Security uses threat intelligence sources to update customers about leaked credentials. Oasis Security offers the Oasis NHI Threat Center for expanded threat actor profiles.[2][6]

Oasis Security uses automated processes for NHI provisioning, monitoring and decommissioning. Oasis Security provides ILM workflows covering continuous monitoring, automated secret rotation, attestation and policy enforcement across a customer's infrastructure. Oasis Security sets up automatic secret rotation at defined intervals via the customer's vault of choice. Oasis Security enables customers to launch recertification campaigns to validate business justification with identity owners. Oasis Security enables identity creation in the identity provider of the customer's choice. Oasis Security provides full context on NHI consumers and resource access so that stale and unused identities can be decommissioned without service disruptions.[2][7]

Oasis Security gives every AI agent access only for as long as the agent needs it, automatically. Oasis Security continuously discovers unauthorized tools, NHIs and unmonitored agent activity across the enterprise. Oasis Security enforces least privilege, isolates AI access and ties every action to a governed identity. Oasis Security gives real-time visibility into AI adoption across endpoints, SaaS and cloud. Oasis Security detects risky AI identities, monitors entitlements and automates permission cleanups. Oasis Security enables customers to restrict AI agents to approved model suppliers.[8]

Oasis Security protects NHIs tied to policy management platforms, claims processing systems and customer service tools in insurance. Oasis Security supports healthcare-specific regulations such as HIPAA and HITRUST. Oasis Security protects access to the specialized software that energy companies use for design, simulations and project management by securing API keys, service accounts and third-party identities. Oasis Security supports PCI DSS 4.0, SOC 2 and GDPR requirements in financial services with automated ownership assignment, access reviews and policy enforcement workflows.[9][10][11][12]

Oasis Security on the record

Sources

Oasis Security full record

  1. [1]oasis.securityOasis Security · oasis.security · undated page, accessed November 4, 2026 · Tier A
  2. [2]Non-Human Identity Management PlatformOasis Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]Non Human Identity Management Platform | OASIS SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]NHI Asset Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]NHI Posture Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]ITDR for Non-Human Identities | Oasis Scout™Oasis Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]NHI Lifecycle Governance & Management | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Security Posture Management (AI-SPM) | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Insurance NHI Security | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Healthcare NHI Security | Protect Patient Data | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure Automation & Prevent Disruptions | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]NHI Security for Financial Services | Oasis SecurityOasis Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Oasis Security Launches Agentic Access Management, the First Identity Solution Built for AI AgentsPR Newswire · published November 19, 2025 · Tier A
  14. [14]5 Things To Know About Cyera's Deal To Acquire Oasis SecurityCRN · published July 28, 2026 · Tier B
  15. [15]Oasis Security raises $120M to secure nonhuman identities across AI and cloud environments - SiliconANGLESiliconANGLE · published March 19, 2026 · Tier B

Zenity full record

  1. [1]AI Agent Security and Governance | Zenity AI Security PlatformZenity · undated page, accessed September 27, 2026 · Tier A
  2. [2]Zenity announces strategic investment led by m12Zenity · zenity.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Zenity raises 38m series b funding round to secure agentic aiZenity · zenity.io · published October 29, 2024 · Tier A
  4. [4]AI Agent Security & Governance Platform for the Enterprise | ZenityZenity · undated page, accessed October 30, 2026 · Tier A
  5. [5]AI Observability | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Model Context Protocol (MCP) | ZenityZenity · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Security Posture Management | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  8. [8]Runtime Boundaries | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Detection and Response (AIDRZenity · undated page, accessed November 10, 2026 · Tier A
  10. [10]Agentic Identity & Access Management: Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  11. [11]Securing Financial Services AI | Zenity, Microsoft & SlalomZenity · undated page, accessed November 10, 2026 · Tier A
  12. [12]Company | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A
  13. [13]Zenity Security Assessment Hub | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A
  14. [14]Zenity Raises $125 Million to Secure the Era of 1 Billion AI AgentsZenity · published August 3, 2026 · Tier A
  15. [15]Zenity Named a Market Shaper in Gartner’s Inaugural Emerging Market Quadrant for AI Application SecurityZenity · published September 23, 2026 · Tier A
  16. [16]Zenity Announces Availability of Inline Agent Runtime Security for Agents Built on Microsoft FoundryZenity · published March 17, 2026 · Tier A
  17. [17]Zenity and Carahsoft Bring AI Agent Security and Governance to Federal, State and Local AgenciesZenity · published June 17, 2026 · Tier A

Spot a factual error? Request a correction.