# oasis-security

Source: https://startwithidentity.com/vendors/ai-identity/oasis-security/
Last updated: 2026-10-16
License: content by Start with Identity. Cite the source URL.

---

## Overview

Non-human identities (service accounts, secrets, tokens, certificates, and AI agents) typically lack the ownership, expiry, and offboarding discipline applied to human accounts, which leaves them stale and over-permissioned. Oasis Security is a [non-human identity](https://startwithidentity.com/guides/fundamentals/what-is-non-human-identity/) management platform that focuses on the full lifecycle: discovery, ownership attribution, posture, rotation, and decommissioning. Founded in 2022 with operations in New York and Tel Aviv, it aims to bring real operational hygiene to machine identities.

Data security vendor [Cyera](https://startwithidentity.com/vendors/ai-identity/cyera/) signed a letter of intent on 28 July 2026 to acquire Oasis for roughly 1 billion dollars, about 700 million of it cash. Cyera says Oasis will continue as a dedicated unit owning the non-human identity line. Because this is a letter of intent rather than a closed deal, terms and roadmap commitments can still move: see the [news item](https://startwithidentity.com/blog/2026-07-28-cyera-agrees-to-acquire-oasis-security-for-1-billion/).

## What it is good at

Oasis stands out for pushing past inventory into lifecycle and remediation workflows, including assisted rotation and offboarding, which is where many NHI projects stall. Governance, audit, and provisioning-style automation are its strengths, scoring highest, and AI agent coverage is part of the roadmap. For enterprises that already know they have NHI sprawl and need to actually fix it, the operational depth is the differentiator.

## Where it falls short

Limitations track the category: it is not an identity provider, so human authentication, SSO, and MFA are out of scope, deployment is SaaS-only, and pricing is opaque. The market is early, so expect features to mature and integrations to expand. It is best deployed alongside an existing IdP and [secrets manager](https://startwithidentity.com/guides/fundamentals/what-is-secrets-management/) rather than replacing either.

## Pricing

No public pricing. Annual enterprise subscription scoped by identity count and connected systems, sold through a sales-led process with a proof of value. Model identity counts with the [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

A fit for enterprises that want lifecycle and rotation workflows for NHIs, not just discovery, and teams reducing service-account and secret sprawl across hybrid environments. Look elsewhere if you want published pricing and self-serve onboarding, or expect human SSO and MFA in the same tool. Compare with [Astrix Security](https://startwithidentity.com/vendors/ai-identity/astrix-security/) (now part of Cisco and no longer sold standalone), [Token Security](https://startwithidentity.com/vendors/ai-identity/token-security/), and the [AI identity](https://startwithidentity.com/vendors/ai-identity/) category.

## Bottom line

One of the more operationally complete non-human identity platforms, with real lifecycle workflows rather than dashboards alone. Strong fit for enterprises serious about machine identity cleanup.