Oasis Security Raises $120M: The Rise of NHI Management

In a move that signals the "Industrialization of AI Security," Oasis Security has officially closed a $120 million Series C funding round. The round, led by...

Non-human identities (NHIs) are the service accounts, API keys, tokens, certificates, and machine credentials that software uses to talk to other software. In most organizations they already outnumber human accounts, and each one is a standing grant of access that rarely gets reviewed after it is created. NHI management is the practice of discovering these identities, understanding what they can reach, and controlling their lifecycle the same way you would for an employee who joins, changes roles, and eventually leaves.

The deal

The deal in Oasis Security Raises $120M: The Rise of NHI Management is the fact pattern. Hold the round size, investors, and valuation to what Tech Bytes actually printed. If a figure is missing, leave the hole visible — do not fill it from memory of a previous round.

In a move that signals the "Industrialization of AI Security," Oasis Security has officially closed a $120 million Series C funding round. Non-human identities (NHIs) are the service accounts, API keys, tokens, certificates, and machine credentials that software uses to talk to other software.

Why this round now

Rounds like this usually land when a product has a buyer and a capacity problem, not because a market is 'hot'. Ask which of those two the company is solving. Capacity problems look like GPUs, headcount, and go-to-market; buyer problems look like a new SKU or a new segment.

In most organizations they already outnumber human accounts, and each one is a standing grant of access that rarely gets reviewed after it is created. NHI management is the practice of discovering these identities, understanding what they can reach, and controlling their lifecycle the same way you would for an employee who joins, changes roles, and eventually leaves.

What the money is for

Use-of-proceeds, when named, is the only honest roadmap. If the piece does not name one, assume hiring plus compute until the company says otherwise. That assumption is a prior, not a fact — label it that way if you repeat it.

The deal in Oasis Security Raises $120M: The Rise of NHI Management is the fact pattern. Hold the round size, investors, and valuation to what Tech Bytes actually printed.

Competitive context

Look at who already sells the same job-to-be-done. A large check changes how long the startup can price below incumbents and how loudly the incumbent will respond with a bundle or an acquisition rumor.

If a figure is missing, leave the hole visible — do not fill it from memory of a previous round. Rounds like this usually land when a product has a buyer and a capacity problem, not because a market is 'hot'.

Open questions

Open questions: dilution, governance, and whether the product still ships to outsiders after the money clears. Wait for the S-1, the blog post, or the first enterprise contract leak — not the tweet. Until then, treat strategic claims as marketing.

Capacity problems look like GPUs, headcount, and go-to-market; buyer problems look like a new SKU or a new segment. If the piece does not name one, assume hiring plus compute until the company says otherwise.

A 3–5 minute news post is a briefing, not a runbook. Keep Tech Bytes and the vendor's primary page in another tab, quote only what they printed, and write down the single decision this story forces (upgrade, wait, or ignore) before you Slack it to the rest of the team. If you need more than that decision, you want the primary docs or a later engineering deep-dive — not another recap of Oasis Security Raises $120M: The Rise of NHI Management.

When you brief someone else on Oasis Security Raises $120M: The Rise of NHI Management, lead with the surface that moved and the decision you need from them. Do not paste the whole thread. If you cannot name the surface — API, policy, model, hardware, or commercial terms — you are not ready to brief. Go back to Tech Bytes and the vendor page until you can. That extra ten minutes is cheaper than a wrong upgrade or a missed exposure.