Data security firm Cyera has entered into a definitive agreement to acquire Oasis Security in a deal valued at approximately $1 billion, according to SecurityWeek. This acquisition highlights a growing trend in the cybersecurity industry: the convergence of Data Security Posture Management (DSPM) and Non-Human Identity (NHI) management. Oasis Security recently gained significant momentum in the market, having raised $120 million in Series B funding for its agentic access management platform prior to this acquisition.
Securing Service Accounts in Hybrid Cloud Environments
The move by Cyera addresses a critical visibility gap in modern security architectures. As enterprises migrate to cloud-native infrastructures, the number of non-human identities—including service accounts, API keys, secrets, and tokens—has exploded, often outnumbering human users by a factor of 40 to 1. Traditional Zero Trust frameworks frequently focus on human authentication, leaving machine identities under-managed and over-privileged. This lack of oversight creates significant opportunities for Lateral Movement, where an attacker exploits a compromised service account to traverse the network and access sensitive data stores.
When defenders evaluate how to manage non-human identity security risks, they must consider that these credentials often lack the standard security controls applied to human users, such as multi-factor authentication (MFA). By integrating Oasis Security’s capabilities, Cyera aims to provide a unified view of who (or what) is accessing data, ensuring that identity context is inseparable from the data it protects. This integration is essential for a modern SOC to identify anomalous behavior patterns that deviate from established machine TTP profiles.
The Role of Agentic Access Management
Oasis Security differentiates itself through an “agentic” approach to access management. This technology automates the discovery, hardening, and lifecycle management of non-human identities. Unlike manual rotation processes that are prone to error and can cause service outages, the Oasis platform focuses on continuous monitoring and remediation of identity-related vulnerabilities. For organizations currently integrating DSPM with Oasis Security platform functionalities, the primary goal is to eliminate the “orphaned” or “zombie” accounts that often serve as entry points for Ransomware groups and other sophisticated actors.
Strategic Defensive Recommendations
To effectively secure the environment against threats targeting machine identities, security professionals should prioritize the following actions:
- Automated Discovery: Implement tools that provide a comprehensive inventory of all service accounts and API keys across both on-premises and cloud environments. You cannot protect what you cannot see.
- Least Privilege Enforcement: Review the permissions assigned to machine identities. Many service accounts are granted administrative rights by default; these must be scoped down to the minimum necessary functions.
- Secret Rotation and Lifecycle Management: Replace static secrets with dynamic, short-lived credentials where possible to reduce the window of opportunity for an attacker during a Supply Chain Attack.
- Contextual Auditing: Ensure that SIEM and EDR logs are configured to correlate data access events with the specific non-human identity involved.
This acquisition underscores that identity is the new perimeter. As the industry moves toward more integrated platforms, security leaders must ensure their strategy for securing service accounts in hybrid cloud environments evolves beyond simple vaulting toward a proactive, identity-centric data protection model.