AI Defense Stack

Agent & MCP security

Oasis Security: non-human identity and agent access platform

Oasis Security is a non-human identity and agent access platform from Cyera. It is a commercial product offered as: SaaS. Pricing model: not published.

  • Last reviewed
Visit Oasis Security (opens in a new tab)
Commercial Layer 7: Agent and tool access

Best for

  • Teams that want agents to run on short-lived least-privilege identities with per-session audit, and that already look at Cyera for data security
  • Identity teams that want agent access handled like privileged access, with time-bound elevation and approval steps

Ownership

Cyera's press release announces the completion of its acquisition of Oasis Security and says the Oasis platform will operate as Cyera Identity, the identity pillar of Cyera's platform. Source, checked October 21, 2026: cyera.com (opens in a new tab)

Consider instead if

  • You want agent runtime policy and shutdown controls rather than identity-first access management. See Zenity.
  • Your first need is to tie each agent to a human owner and map what it can reach (Veza), or to detect compromised agent credentials (Astrix). See Veza AI Agent Security or Astrix AI Agent Security.

What Oasis Security does

Oasis Security, now owned by Cyera, sells identity controls for non-human identities, and its Agentic Access Management (AAM) product applies them to AI agents. Its angle differs from the two other agent identity listings here. Veza (now ServiceNow) starts from access review: it ties each agent to a human owner and maps what the agent can reach. Astrix (now Cisco) pairs an agent inventory with short-lived credentials and threat detection. Oasis puts the decision at request time: it interprets what the agent is trying to do, checks policy, and issues an identity that lasts one session, with a trail from prompt to action. We found no public docs, prices or account of how intent is judged, so ask how it classifies intent and what happens when it is wrong. Cyera says the platform will operate as Cyera Identity.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
Cyera (Oasis Security) Source, checked October 21, 2026: cyera.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: oasis.security (opens in a new tab)
Ownership
Cyera's press release announces the completion of its acquisition of Oasis Security and says the Oasis platform will operate as Cyera Identity, the identity pillar of Cyera's platform. Source, checked October 21, 2026: cyera.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: oasis.security (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
SaaS Source, checked October 21, 2026: aws.amazon.com (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: oasis.security (opens in a new tab)
Website
oasis.security Source, checked October 21, 2026: oasis.security (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
Not documented in the sources we checked
Attestations or disclosure
SOC 2 and ISO 27001 badges are shown in the home page footer Source, checked October 21, 2026: oasis.security (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where Oasis Security fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Oasis Security covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L7 Agent access Agent and tool access Primary Limit which tools, MCP servers, data and credentials an agent can use, and require approval for risky actions. Follows its category, Agent & MCP security
L8 Monitoring Monitoring and response Also covers Documents a record of intent, policy, identity and activity for each session, linked to an audit trail. Records intent, policy, identity, activity and expiration for each session and links each action to an audit trail
L2 Discovery Discovery and posture Also covers Documents a real-time inventory of non-human identities that maps each agent, identity and permission. Keeps a real-time inventory of non-human identities and maps each agent, identity and permission

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Oasis Security, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM06 Excessive Agency Runs agents on short-lived, least-privilege identities with time-bound access. Issues ephemeral per-session identities so each agent request runs on a short-lived, least-privilege identity; Enforces time-bound access and context-aware privilege elevation for agents, with approval workflows

Not mapped in our analysis: LLM01, LLM02, LLM05, LLM07. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in Agent & MCP security, ranked within the category by Coverage Score.

Cisco DefenseClaw

Cisco

Open sourceApache-2.0
  • CLI
  • Self-hosted

Scans skills and MCP servers, inspects agent tool calls and keeps an audit trail around AI coding agents.

Best for: Security teams that want scanning, guardrails and an audit trail around the coding agents developers already run, starting in observe mode before anything is blocked

Coverage Score 76 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

Docker MCP Gateway

Docker

Open sourceMIT
  • CLI
  • Self-hosted

Proxies AI clients to MCP servers it runs as isolated Docker containers, with tool filters and call logs.

Best for: Developers and platform teams that already use Docker and want MCP servers to run in containers behind one gateway with per-server tool selection

Coverage Score 72 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

agentgateway

agentgateway (a Series of LF Projects, LLC)

Open sourceApache-2.0
  • CLI
  • Self-hosted
  • Cloud-native

Open-source proxy that applies auth, CEL policy and guardrails to LLM, MCP and agent-to-agent traffic.

Best for: Platform teams that want one open-source gateway in front of MCP servers and LLM providers, with token validation, CEL rules per MCP method and pluggable guardrails

Coverage Score 69 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

Oasis Security FAQ

Who owns Oasis Security?

Cyera. Its press release announces the completion of its acquisition of Oasis Security, and the Oasis site shows an acquired-by-Cyera banner.

Will Oasis keep its name?

Cyera's release says the Oasis platform will operate as Cyera Identity. The Oasis site still used the Oasis name when we opened it, so check the vendor for the current product name.

Is Oasis open source?

No. It is a commercial product, and we found no public source repository for it.

Which systems does Oasis connect to?

The AAM page shows identity providers (Okta among them), AI platforms such as OpenAI and Claude, and data platforms including Snowflake and Databricks. These are logos and names, not integration guides, and we found no public documentation describing how each connection works.

Key facts you can cite

We have no commercial relationship with Cyera (Oasis Security).

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.