Oasis Security Raises $120M- Why AI’s Identity Crisis Is Becoming Cybersecurity’s Next Battleground

Posted on March 20, 2026 at 08:42 PM

Oasis Security Raises $120M: Why AI’s Identity Crisis Is Becoming Cybersecurity’s Next Battleground

In the rush to deploy AI agents across enterprises, a silent risk is growing faster than anyone anticipated: machines now vastly outnumber humans—and they all need access.

That’s the problem cybersecurity startup Oasis Security is betting big on solving, and investors are taking notice.


The Funding Signal: $120M for a New Security Layer

Oasis Security has secured $120 million in Series B funding, led by Craft Ventures with participation from Sequoia Capital, Accel, and Cyberstarts. This brings total funding to nearly $190–195 million, underscoring strong investor conviction in a rapidly emerging category. (ctech)

Founded in 2022, the company is positioning itself at the center of a structural shift in enterprise security: the rise of non-human identities—AI agents, APIs, bots, and workloads operating autonomously. (SiliconANGLE)


The Core Problem: Machines Outnumber Humans 82:1

Enterprises are undergoing a profound transformation. According to industry data cited in the article, machine identities now outnumber human users by 82 to 1. (ctech)

This creates a fundamental mismatch:

  • Traditional security systems were designed for human access control
  • Modern environments are dominated by autonomous systems requesting access at scale

The result? A growing attack surface where:

  • Permissions are over-provisioned
  • Credentials are unmanaged
  • AI agents can act with excessive or invisible privileges

Oasis’s Approach: “Agentic Access Management”

Oasis introduces a new paradigm called Agentic Access Management (AAM)—built specifically for AI-driven environments.

Instead of static roles or permanent permissions, the platform uses:

  • Just-in-time access → permissions granted only when needed
  • Intent-based controls → access determined by what the system is trying to do
  • Least-privilege enforcement → minimal access for each task

This means access is:

Dynamic, contextual, and continuously evaluated—not predefined.

The platform also:

  • Discovers and maps machine identities
  • Detects unused or orphaned credentials
  • Monitors anomalous behavior
  • Automates policy enforcement across cloud and AI systems (SiliconANGLE)

Why This Matters Now

The rise of agentic AI—systems that can act independently—changes the security equation.

Key implications:

  • Access becomes the new control plane
  • AI agents with broad permissions can become high-risk attack vectors
  • Security teams lose visibility as machine identities scale exponentially

Oasis’s thesis is simple but powerful:

In the AI era, risk is defined by access—not just identity.

This aligns with a broader industry shift where identity security is evolving into real-time access governance.


Enterprise Adoption: Not Just Hype

Oasis is already seeing strong traction:

  • Rapid 5x growth in annual recurring revenue
  • Majority of customers are Fortune 500 enterprises
  • Increasing use in multi-year infrastructure-level deployments (ctech)

This suggests companies are not treating this as an add-on tool—but as a core security layer for AI infrastructure.


The Bigger Picture: A New Category Is Forming

Oasis isn’t just raising capital—it’s helping define a category:

  • Non-human identity security
  • AI agent governance
  • Dynamic access control

As AI systems proliferate, this space could become as critical as:

  • Identity & Access Management (IAM)
  • Endpoint security
  • Cloud security

In short: every AI-powered enterprise will need this layer.


Glossary

  • Non-human identity: Digital entities (e.g., APIs, bots, AI agents) that access systems without human interaction.
  • Agentic AI: AI systems capable of autonomous decision-making and actions.
  • Agentic Access Management (AAM): A security model that dynamically governs access for AI agents based on intent and context.
  • Just-in-time access: Temporary permissions granted only when required, then revoked.
  • Least privilege: Security principle where entities receive only the minimum access needed.
  • Orphaned credentials: Unused or unmanaged access credentials that pose security risks.

Final Take

Oasis Security’s $120M raise highlights a critical truth: AI adoption is outpacing security frameworks designed for a human-first world.

As enterprises move toward autonomous systems, controlling who (or what) gets access—and when—may become the most important cybersecurity challenge of the decade.


Source: https://www.techinasia.com/news/ai-identity-startup-oasis-security-nets-120m-series