theCUBEd Awards | Oasis Security (Rocketship Award)

Clips
News
More from theCUBEd Awards

Danny Brickman

CEO

Oasis Security

Why Oasis Security urges companies to secure non-human identities

The proliferation of bots has left companies vulnerable, with attacks significantly increasing in recent years due to the rise of generative AI models. Oasis Security Ltd. aims to change that by securing the non-human identities within an organization.“Today, the simplest way to do a hack or an attack is just to log in,” said Danny Brickman (pictured), co-founder and chief executive officer of Oasis. “It’s so simple, and we found it even more simple in this new world that has changed, the infrastructure that has changed to be microservice-based, API-based, and … just skyrocketed in numbers to the point that we’re seeing today, 50 times more non-human identities than human identities

Why Oasis Security urges companies to secure non-human identities

The proliferation of bots has left companies vulnerable, with attacks significantly increasing in recent years due to the rise of generative AI models. Oasis Security Ltd. aims to change that by securing the non-human identities within an organization.“Today, the simplest way to do a hack or an attack is just to log in,” said Danny Brickman (pictured), co-founder and chief executive officer of Oasis. “It’s so simple, and we found it even more simple in this new world that has changed, the infrastructure that has changed to be microservice-based, API-based, and … just skyrocketed in numbers to the point that we’re seeing today, 50 times more non-human identities than human identities

play_circle_outline Oasis CEO discusses company history, focus on innovation, and addressing identity security space.

play_circle_outline Oasis helps organizations bridge gap between security and developers, enabling progress and trust.

play_circle_outline Building industry-first solutions for governance of non-human identities at scale.

Info
Transcript

Oasis Security (Rocketship Award)

Danny Brickman

CEO Oasis Security

Danny Brickman, CEO of Oasis Security, joins theCUBE Research’s Kristen Nicole Martin to discuss innovative approaches that earned his company the Rocketship Award. Oasis, with its roots in military cyber innovation, focuses on identity security and addresses emerging challenges in managing non-human identities. Brickman shares insights into how Oasis leverages AI to enhance security while maintaining development velocity, providing a unique perspective on the rapidly evolving security landscape.

Oasis addresses the complexities of identity management ... Read more

explore Keep Exploring

What is the history and background of the company established by ex-military cyber experts in Israel? add

What were some key turning points that led to the success of bridging the gap between security and developers and winning awards? add

What was a pivotal point in the technology to address the governance of non-human identities at scale? add

bolt Powered by CUBE AI

Oasis Security (Rocketship Award)

search

>> Hello, CUBE fam. Welcome to a very special program with our CUBEd Awards. Today, we are hearing from a special winner of the Rocketship Award. Danny Brickman, CEO of Oasis, is here to tell us all about it. Welcome to the program.

Danny Brickman

>> Thank you, Kristen, and thanks for having me here.

>> Well, this sounds like, from what I've learned about your company, you guys have a celebrated culture of innovation, and that's really what these awards are about. So I would love to hear more about the company and really how you got to this place?

Danny Brickman

>> So I think that history goes a few years back, most of the company being established in Israel from ex-military cyber guys that were actually through all the years of their career, I would say, were focusing on innovating, because I think as we all know, in the defense space, you all the time need to be a step ahead. You need to all the time think a step ahead of how can we be better? How can we rethink of what we're doing, never be settled on what is existing today. And actually this company was established by the same DNA addressing, and I would say a space that is existing for many years, which is the identity space, identity security space.

>> And it's an area that we don't get to dig into very often here where you've got a unique take on the security space and you're dealing with non-human identities.

Danny Brickman

>> So when we started looking at this identity space and what has changed, obviously as most of the company came from this, I would say cyber offensive side. So we understand exactly how attackers are thinking and hackers are thinking. And we saw a dramatic change in how we operate it from being very focused on vulnerabilities, exploitations to a word of actually identities. Leveraging identities today is the simplest way to do a hack or an attack is just to log in. And there's a famous phrase that hackers are not hacking anymore. They're just logging in. And it's true because it's so simple and we found it even more simple in this new world that has changed, the infrastructure that has changed to be microservice based, API based, and the number of identities that are non-human, that are not attached to a person, identities that are attached to a service, to bot, to an application today, to AI agents are just skyrocketed in numbers to the point that we're seeing today, 50 times more non-human identities than human identities, 20 times more. And the numbers are just ridiculous. And it's so easy to just leverage that every organization today has a leaked secret, has something that can cause a massive breach, which turns those identities from being only identities to actually being real vulnerabilities for organizations. And this is where we understood that we need to actually come in and help organizations to reestablish, to rethink how identity is being secured, how identities are being secured in this modern world, in the world that is transitioning as fast as possible with AI from Steve right now that is actually creating more and more of those problems. How can we actually turn those problems into opportunities?

>> With the explosion of AI, it's one of those technologies that could be used for good and for evil. And when it comes to the innovation factor, you guys are leveraging AI as well and really looking to work at enterprise scale.

Danny Brickman

>> 100%. Actually, I got to say that AI was, is the enabler for us to actually address this market. So obviously technology moves together, AI created the problem, but AI can also solve the problem, right? This API architecture can create the problem but also can solve that. And this is where we came in when understood what is the missing piece today in order to secure the new world of non-human identities, we don't want to be disturbing the business. Today we're started hearing more and more of like, oh, I need to compromise on security just to get my velocity of developers higher. Or the opposite I need to stop the velocity of developers in order to focus on security. And we're saying, "No, no, let's use AI and anything we have to break this weird equation and to allow both security and the development velocity to move at the same pace."

>> I like that approach because why decide you shouldn't have to choose between velocity and productivity. So in that regard, can you tell us a little bit about maybe a particular challenge or scenario where Oasis was able to really apply an innovative approach?

Danny Brickman

>> So when we came into organization originally, and by the way, we spoke with if not hundreds of identity professionals just to understand what is exactly their pains. And we understood that while developers and infrastructure move to this new innovative space of decentralization, distributions of the network, of the infrastructure itself, the identity approach was very centralized, very forcing to put centralization in place, bring everything to me and I will help you solve it. That didn't allow actually the identity people, the identity security people to speak the same language. There was two different languages. It was English and Spanish. They understood a little bit each other, but they couldn't translate it properly. And what we were able to help them is to actually ask security people, "Hey, what are you wanting to achieve?" "Oh, you want to achieve XYZ? Fantastic. Let us translate to you how the infrastructure looks today in your terms and actually help you also do the things that will speak the same language as developers." So we kind of like this translation layer between security and developers, which actually pushed a lot of organizations that we're working today to a very successful place of both of those progressing the same time and the same velocity.

>> And between serving highly regulated industries and having a really knowledgeable team for your startup, it sounds like there were some specific turning points that may have also led to getting to this place of winning this award. Can you tell us a little bit about some of those key turning points?

Danny Brickman

>> The most notable one is actually some notes from our customers' identity folks that actually texted us and said, "Guys, this is the first time that I'm feeling that I'm an enabler for the business and not the guy that stops and says no, no to things." And it was because we helped them explain to the business how they can be moving faster, create more processes that can automate, can be automated for them, and actually gaining from that a lot of trust from the other hand. And I love saying that identity people are actually becoming today the cool guys of security. And this excites me a lot, but it also was an important turning point for us to understand that we are this important layer of connecting between the two, leveraging what could not be leveraged a few years before that we can use technology today to actually bridge this gap and actually move the organization forward in the such critical infrastructural point.

>> And that sounds like such a game changer. One of the notes from your submission really emphasized the industry first solutions that you guys are building here. And it sounds like that's become a point of pride. Tell us a little bit more about that?

Danny Brickman

>> It is taking this approach of breaking the centralization concept and bringing this decentralization distribution concept that are bringing a lot of value to the identity space required a very secret sauce I would say, of analyzing a lot of sources today to establish very simple things in order to act upon that. We said identity needs to be governed, right? Non-human identity needs to be governed at scale. We cannot do it any longer manually. It's not 500 identities. We're speaking millions of identities, being created, decommission, etc. How do we operate and automate that? And this layer that we've built that like ingests a lot of information and gets you to the point of understanding about each and every one of those accounts, what to do, how to do that, what would be the impact? Was a pivotal point in the technology that we brought to the table. And today, very simple things that we were very, very used to doing the human side for example, the password. We all woke up one day and our password needed to be rotated. It's not something we can easily do for a machine. A machine is not waking up in the morning and saying, "Oh, I need to rotate my password, let me change it quickly." It'll just stop working. So we broke this equation and this will break something to the point that we actually were able to facilitate a layer out of this old data ingestion in an AI processes there, helping the organization to do that, to do the rotation, to do the commission of accounts that we used to do, to do complicated processes like vaulting accounts and changing the authentication patterns of a specific application for a machine and bringing this knowledge of governance to the new era of AI and cloud.

>> And I'm certain that requires a very strong and supportive ecosystem. You've got some strategic partners that have also you credit to your success. What role does the ecosystem play here?

Danny Brickman

>> The most important, the name of the game is the ecosystem, I would say, in many cases, whether it's partners, technological partners that we're working with and establishing integrations with, whether it's partners in the ecosystem that help integrate and translate this language to big enterprise. And of course when you are working with the largest of the largest, you need to understand exactly we're coming to bring value for them, not for us, obviously. So this is a critical point of establishing good partnership with the industry itself. But even when we're integrated internally in organizations, the biggest ask usually is just like, "How do we play along with my existing tool sets? How do I make sure that one plus one equals three?" And this is exactly where always is. Once we're coming in, we're establishing this very broad network of integrations internally to make sure that your whole ecosystem is going up. And by the way, especially when we're this translation layer between security and developers, when we're democratizing a lot of the parts, we need to be integrating with both tools and understand well enough. And this is where the expertise of the developers that are working in Oasis come in play.

>> And circling back to something that you mentioned before, the secret sauce, this is actually something that we're asking all of the awardees because every successful company has their own secret sauce. And you mentioned it a little bit earlier, but what else can you tell us that's not so secret about your secret sauce?

Danny Brickman

>> It's very simple. It's very simple. The main and the most important piece in today's world to make decisions is contextualization, right? We are making decisions on our life, we need context. The more context we have, the more confidence we have with our decision. The same thing with non-human identities. And because the equation is so pricey, making a mistake with non-human identity can crush half of our production or even all of our production, then there is a direct impact on our business. This is the most critical piece that we were focusing and innovating around to make sure we're bringing the right data and information for the decision makers. So in many cases, for example, the most simple thing of who is the owner of a specific account, sometimes it needs to go beyond what is noted or logged or something like that. You need to understand a lot of nuances, applications, databases, etc., to gain this all information, to correlate that and to bring a specific answer that sometimes is not that trivial. But once you get it, you can actually act upon it. And the secret sauce is in this black box that getting this all information and actually throwing out the relevance and the most accurate context for those accounts.

>> Well, thank you so much for joining theCUBE and sharing your story. Congratulations again on winning the Rocketship Awards for our inaugural awards program and make sure that you tune in for more from our awardees at theCUBE.net.

Danny Brickman

>> Thank you very much for having me. And thank you very much for the recognition of Oasis.