Cyera Moves to Buy Oasis Security for $1 Billion as AI Agents Become a New Cyber Target

Updated July 29, 2026 3:25 am

Cyera has agreed to acquire Oasis Security in a deal valued at about $1 billion, a move designed to strengthen the data security company’s defenses around AI agents and the non-human identities they use to access enterprise systems. The transaction, announced Tuesday, comes as businesses rapidly deploy autonomous software tools that can act on their own and create a fresh cybersecurity challenge.

The acquisition, which is expected to be paid mostly in cash with the rest in Cyera shares, would bring Oasis’s identity-focused technology into Cyera’s broader platform. The deal is also a sign that cybersecurity vendors are racing to build products for an era in which software agents can authenticate, interact with applications and potentially be abused at scale.

Cyera has been expanding aggressively. The company recently raised $600 million at a $12 billion valuation and has also bought smaller security startups, including Ryft and Genie Security. If the Oasis transaction closes, it would deepen Cyera’s push to unify data protection and identity controls under one roof.

What the Cyera-Oasis deal means

Cyera’s planned purchase of Oasis Security is about more than adding another product line. It reflects a broader shift in cybersecurity, where companies are moving from protecting human users alone to managing fleets of software agents that can request access, query systems and carry out tasks without direct human intervention.

Oasis focuses on what the industry often calls non-human identities. In practical terms, these are the machine credentials, service accounts and AI-powered agents that increasingly need permissions to operate inside corporate software environments.

As enterprises adopt more AI tools, the risk surface expands. Each new agent may need access to email, databases, internal apps or cloud services, and each permission creates an opportunity for misuse if credentials are compromised or access controls are poorly managed.

Cyera’s strategy suggests it wants to tie together two of the most important layers in modern enterprise security: the data itself and the identities that can reach it. That combination is becoming more valuable as AI systems act less like passive software and more like active digital workers.

Why AI agents are changing cybersecurity

AI agents are driving demand for a new category of security tools because they do not behave like traditional software. Unlike a standard application, an agent can make decisions, initiate actions and interact with multiple systems in sequence. That flexibility makes them useful, but it also makes them harder to monitor.

Security teams are now being asked to answer basic questions such as:

• Which agents are active in the environment?
• What systems can they reach?
• Are their permissions still necessary?
• Can they be audited if something goes wrong?

Those questions are central to Oasis’s product area. By focusing on non-human identities, the startup sits in a part of cybersecurity that is growing quickly as companies increasingly deploy AI helpers to automate tasks that once required employees.

The concern is not limited to misconfiguration. Cybercriminals are also using AI to improve phishing, impersonation and exploitation campaigns, which raises the stakes for organizations that have to defend both human and machine identities at once.

How do non-human identities work?

They work by granting software entities their own credentials and permissions, allowing them to connect with apps and data sources in a controlled way. In theory, that makes automation possible without giving agents unrestricted access. In practice, however, the more agents a company deploys, the more difficult it becomes to track exactly who or what has access to what.

That is why identity security is becoming a core part of the AI security conversation. If enterprises cannot verify what their agents are doing, they risk creating a shadow layer of machine-based access that is difficult to monitor, revoke or govern.

How much is Cyera paying for Oasis Security?

Cyera is valuing Oasis Security at roughly $1 billion, according to the announcement. The deal is expected to be structured mostly as cash, with the remainder paid in Cyera stock.

That price tag is notable for a startup founded only in 2022. Oasis has raised around $195 million from investors including Accel, Craft Ventures and Cyberstarts, and its rapid valuation growth underscores how much investor interest has shifted toward AI-related security infrastructure.

The acquisition also highlights how much strategic premium buyers may now place on companies that can help secure agentic systems before they become a widespread enterprise risk.

Why is Cyera buying security startups so quickly?

Cyera appears to be using acquisitions to accelerate its product roadmap and widen the scope of its platform. Buying smaller companies can be faster than building every capability internally, especially in a market where customer needs are evolving quickly and competition is intense.

The company has already picked up Ryft, which was backed by Index Ventures, and Genie Security, a startup that was less than a year old. Those purchases suggest Cyera is assembling a broader security stack rather than remaining a point solution focused on a single niche.

Bringing Oasis into the mix would add an identity layer that fits naturally alongside data security. For enterprise buyers, the appeal is straightforward: a single vendor that can help govern both what data exists and which humans, applications and AI agents can touch it.

What is Cyera building?

Cyera is building a unified platform for data and identity security. The company’s pitch is that modern enterprises need visibility into data wherever it lives, along with controls over which users and systems can access it.

Oasis would extend that vision into machine identity management, a segment that is likely to gain importance as agentic AI becomes more common in workplaces. The integration could help Cyera position itself as a broader enterprise security layer rather than a specialized data security vendor.

What does this say about the cybersecurity market?

It says the market is moving toward AI-native defense and identity management. Security vendors are increasingly expected to protect organizations not just from classic malware and phishing, but from AI-enabled attacks and from the risks created by deploying AI systems internally.

This matters because cybersecurity budgets are often driven by the fastest-growing risk categories. If AI agents are becoming a permanent part of business operations, then guarding their identities may become as important as protecting employee accounts or cloud infrastructure.

At the same time, the rise of agentic systems creates a governance problem. Companies want automation, but they also need control. The balance between those two goals is likely to define a large part of enterprise security spending over the next several years.

Cyera’s move is also a reminder that consolidation is intensifying. Large, well-funded startups are using cash and stock to absorb smaller specialists before rivals can do the same. That can speed up product development, but it can also concentrate market power among a few heavily capitalized players.

How strong is Cyera’s financial position?

Cyera is in a strong position to pursue deals, but it is not yet profitable. The company recently said it had surpassed $150 million in annual recurring revenue, yet TechCrunch reported last month that it was still operating at a loss. Over its five-year history, Cyera has raised about $2.3 billion.

That funding war chest helps explain how the company can consider a $1 billion acquisition. It also indicates investor confidence that data security, identity security and AI security will continue to command premium valuations.

Still, scale does not automatically translate into profitability. Cyera will need to show that these acquisitions create a cohesive platform that customers are willing to buy as a consolidated offering, rather than as a collection of adjacent tools.

Timeline of Cyera’s expansion

Cyera’s move on Oasis fits into a broader pattern of quick growth and product expansion. The company has been building momentum through fundraising and acquisitions rather than organic growth alone.

What happens next?

The companies have signed a letter of intent, which means the deal is not yet complete. The next step will be moving through final transaction terms and closing conditions before the acquisition can be finalized.

If the deal closes, Cyera will likely integrate Oasis’s products into its platform and market the combined offering as a more comprehensive security system for the AI era. That could make the company more competitive against rivals chasing similar enterprise needs.

For now, the transaction stands as one of the clearest signs yet that AI agents are no longer just a product feature or a productivity experiment. They are becoming a security category of their own, and investors are now pricing that reality into billion-dollar acquisitions.

As enterprises continue deploying AI agents across internal workflows, the companies that can secure those agents may become some of the most valuable players in cybersecurity.