Cyera to Acquire Oasis Security for About $1 Billion, Targeting AI-Agent Identity Controls
Cyera to acquire Oasis Security for about $1B, adding AI-agent identity controls to its security platform as firms fortify defenses against AI-driven threats.
Cyera Announces Letter of Intent for Oasis Security
Cyera announced on Tuesday, July 28, 2026, that it has signed a letter of intent to acquire Oasis Security for approximately $1 billion, with the consideration expected to be paid mostly in cash and the balance in Cyera stock. The deal, if completed, will be one of the largest transactions focused specifically on non-human identity and AI-agent protection in the enterprise security market.
The companies said the agreement remains subject to customary due diligence and regulatory approvals, and both parties expect to finalize terms as the transaction progresses. Cyera framed the move as a strategic purchase to accelerate integration of agent-aware controls into its broader data-security platform.
Terms, Funding and Shareholder Overlap
The proposed purchase price of roughly $1 billion follows a period of intense capital activity for both firms. Oasis, founded in 2022, has raised around $195 million from investors that include Accel, Craft Ventures and Cyberstarts. Cyera itself raised $600 million earlier this year at a $12 billion valuation and has accumulated roughly $2.3 billion in total funding since inception.
Several investors overlap between the two companies, notably Accel and Cyberstarts, a dynamic that may smooth shareholder deliberations but will still require separate corporate approvals. Cyera said most of the payment will be in cash, signaling strong near-term liquidity, while a share component will align incentives for Oasis leadership within the combined company.
Oasis Security’s Focus on Non‑Human Identities
Oasis has built technology designed to govern and monitor non-human identities — software agents, bots and other automated processes — that act on behalf of organizations. Its tools aim to provide visibility into agent behavior, enforce least-privilege access and establish permissioning frameworks as the number of AI agents grows inside enterprise environments.
Security teams have increasingly identified non-human identities as a new attack surface because automated agents can propagate misconfigurations or be co-opted to move laterally. Oasis’s product portfolio centers on discovering these identities, mapping their access paths and applying policy controls to limit risk.
Cyera’s Consolidation Strategy and Recent Acquisitions
The acquisition aligns with Cyera’s recent push to broaden its platform through M&A. In the past year the company has added firms whose technology complements data protection, including purchases focused on data discovery and cloud security tooling. Cyera said it will fold Oasis’s capabilities into a unified identity-and-data security offering to give customers coordinated controls across human and non-human actors.
Executives at Cyera have described the integration as aiming to deliver policy-driven workflows that connect identity, data visibility and threat detection. If successful, the combined stack would let enterprises trace which AI agents access sensitive datasets and enforce automated safeguards from a single administrative plane.
Market Momentum and the Rise of AI‑Driven Threats
Industry observers say the transaction underscores a surging market for vendors that can defend enterprises from AI-enabled attacks and misuses of automated agents. As organizations deploy more generative models, orchestration scripts and third-party bots, defenders face a multiplication of service accounts and credentials that traditional identity systems were not designed to govern.
Investors have pushed capital into startups that promise to manage these emergent risks, creating demand for consolidation as larger platform vendors seek to embed specialized controls. Analysts expect deals that bolt AI-agent governance onto broader security suites to continue as enterprises prioritize hardened access management and automated detection.
Financial Profile and Integration Risks
Cyera reported surpassing $150 million in annual recurring revenue but remains unprofitable, reflecting rapid growth and heavy investment in product development and sales. That financial profile is common among late-stage cloud security companies, but it leaves acquirers and boards balancing growth objectives against cost discipline when structuring deals.
Integration risk will be a key factor to watch: assimilating agent-focused discovery, permissioning logic and a new product team into an existing platform requires product alignment and engineering work. Regulators, customers and enterprise auditors will scrutinize how the combined solution preserves data privacy and meets compliance obligations as it reassigns access controls across diverse environments.
Cyera said it intends to integrate Oasis’s technology into its platform to deliver coordinated identity and data protection capabilities, though it did not provide a detailed implementation timeline at the announcement.
Industry participants will be watching for the definitive agreement and any regulatory filings that provide more detail on financing, earn-outs and employment arrangements. The transaction, if completed, would mark a significant step in the industry’s response to the security challenges posed by proliferating AI agents, and it highlights how identity protection is becoming central to enterprise data defense strategies.
