Oasis Security raised $120 million from Craft Ventures and Sequoia. On the surface, it looks like another large cybersecurity round. But the funding is not the main signal here.

What matters is the problem they are focusing on.

Oasis is building around non-human identities. Service accounts, APIs, bots, and increasingly AI agents. These are everywhere in modern systems, yet most teams don’t actively manage them.

That gap is starting to get expensive.

The problem most companies quietly accumulate

Modern infrastructure is no longer user-centric. Systems interact with other systems constantly. Automations trigger processes, APIs connect services, and now AI agents are beginning to act inside environments.

These identities don’t behave like people. They don’t log in through dashboards or go through password resets. But they still carry permissions, often broad ones.

The issue builds slowly.

A credential is created for an integration. Another for a temporary fix. Another during a migration. Over time, no one has a complete view of what exists, what is still active, or what level of access each identity holds.

This is not rare. It is the default state in many companies.

Oasis is targeting exactly that layer. Not user identity, but machine identity.

Why investors are paying attention now

This space has been around for a while, but urgency has increased.

Two things are driving it.

First, the level of automation has grown significantly. Systems are more connected, and each connection creates credentials.

Second, AI agents are starting to operate within systems. Not just analyzing data, but triggering actions.

Each of these adds more identities that need to be tracked and controlled.

Security teams already struggle with visibility. These identities make that problem harder because they don’t behave like users and often sit outside traditional monitoring approaches.

From an investor perspective, the logic is simple. The attack surface is expanding, the buyer is clear, and the problem grows as systems become more complex.

This is also a timing story

Oasis did not appear overnight. The company has been building in this space and is now accelerating with a large round.

This pattern shows up often in infrastructure.

A category exists quietly in the background. Complexity increases. A visibility gap becomes harder to ignore. Then capital flows in quickly.

AI likely accelerated this timeline.

Not because AI is the product, but because it multiplies the number of identities inside systems. More agents means more credentials. More credentials means more potential exposure.

What fintech founders should take from this

For fintech teams, this hits close to home.

Fintech stacks are heavily built on APIs and integrations. Payments, KYC providers, banking infrastructure, fraud tools. Every connection introduces machine identities.

In early stages, these are usually treated as setup tasks. Something you configure once and move on from.

That approach works until the system becomes too complex to track manually.

Security issues rarely build in a visible way. They tend to surface when something goes wrong.

Key takeaways for fintech startups

A few practical points worth keeping in mind:

• Non-human identities are growing faster than human users
  
  
• API keys, service accounts, and bots need lifecycle management, not just creation
  
  
• AI agents will increase identity sprawl
  
  
• Security tooling is shifting toward visibility and control layers
  
  
• Investors are backing problems that scale with system complexity

If this is starting to show up in your stack, it is worth addressing early. If you want help thinking through your setup and growth path, reach out.