Oasis Security raised $120 million to manage access for AI agents and service accounts
Oasis Security raised $120 million from Craft, Sequoia Capital, and Accel. The company builds tools to manage access for service accounts, integrations, and…
AI-processed from Bloomberg Tech; edited by Hamidun News
Oasis Security raised $120 million from investors including Craft, Sequoia Capital, and Accel. The startup is building tools for managing access to corporate systems by non-human accounts — from service accounts to AI agents, and this area is rapidly becoming a new frontier in cybersecurity.
What Oasis Does
Oasis Security's product addresses a problem that until recently seemed niche: who and on what terms enters a system if it's not an employee, but a program. Companies have long had service accounts, integrations, bots, automations, and internal scripts. Now AI agents are being added to the mix, gaining access to documents, corporate knowledge bases, email, CRM, and other work systems. The more such entities exist, the harder it becomes to understand what permissions they have and where access becomes excessive.
The problem is that non-human accounts often fall through the cracks of classical security processes. An employee has a manager, a role, a termination date, and a clear point for revoking access. With an AI agent or service account, everything is different: access can be granted quickly, used across multiple systems simultaneously, and persists longer than necessary. As a result, companies accumulate a growing layer of privileges that nobody accounts for as strictly as they do for regular user access.
Why Demand Is Growing
The market itself is driving this. Businesses are implementing AI tools not just for chat and search, but for real actions: reading internal data, launching processes, working with tickets, analytics, and customer systems. Each such scenario requires credentials, tokens, roles, and access rules. The more actively companies transition from experiments to automation, the more pressing the question becomes: how to control not people, but digital executors acting on behalf of the company.
In practice, the risks usually look like this:
- AI agents gain access to multiple internal services and SaaS products simultaneously.
- Service accounts live for years and rarely undergo the same access review as employee access.
- Permissions accumulate as new integrations are launched and are almost never revoked.
- Compromise of one technical account can open the path to a chain of other systems.
This is why the category of managing non-human identities is beginning to stand out as a separate layer in the security stack. For investors, this looks not like a narrow function, but as an infrastructure problem that will only grow alongside the proliferation of autonomous AI scenarios. While companies could previously tolerate chaos around machine accounts, with mass adoption of agents, such an approach becomes too costly and risky.
Market Signal
The size of the round alone speaks volumes. $120 million is not a bet on a trendy term, but a major investment in a specific pain point of the enterprise segment. The participation of Craft, Sequoia Capital, and Accel shows that major funds see a long growth cycle in this area: companies will not just buy another security tool, but will rethink the access model itself for programs, bots, and AI agents. For Oasis Security, this provides the resources to rapidly scale the product and establish itself in a category that is just forming.
At the same time, this deal exemplifies a broader shift within the cybersecurity market itself. Just a few years ago, the main conversation was about protecting devices, networks, and employees. Now the focus is shifting to the question of digital identity without the human element: who initiates an action, on what grounds, and how can this be verified at any moment. As AI transitions from demonstrations to workflows, such platforms could become a mandatory element of corporate architecture.
What This Means
The Oasis Security story confirms a simple conclusion: the more AI agents and automations a business has, the more important it is to manage their access as strictly as employee access. The security market is already beginning to reorganize around this reality, and major investments show that demand for such solutions will grow alongside corporate AI adoption.
Want to stop reading about AI and start using it?
AI News is a curated feed of AI/tech news. Hamidun Academy teaches you to use AI systematically in your work.