Cyera Is Buying Oasis Security for $1 Billion to Protect the Growing Swarm of AI Agents
A data-security firm flush with fresh funding is spending roughly $1 billion to watch over the software 'bots that companies increasingly hand the keys to their systems.
Key points
- Cyera signed a letter of intent to acquire Oasis Security for approximately $1 billion, mostly in cash, announced Tuesday 29 July 2026.
- Oasis Security specialises in protecting non-human identities, meaning AI agents (software that can carry out multi-step tasks on its own) rather than human employees.
- Cyera raised $600 million at a $12 billion valuation before this deal and has now raised about $2.3 billion in total.
- Oasis was founded in 2022 and had raised roughly $195 million from investors including Accel and Craft Ventures.
- Post-acquisition, Cyera plans to fold Oasis's technology into a single identity and data security platform.
Every time a company gives an AI agent access to its email system, its customer database, or its file storage, it creates a new entry point that a criminal could exploit. Oasis Security was built to guard those entry points.
The company focuses on what the industry calls non-human identities: the digital credentials, or login tokens, that AI agents use to get permission to touch other software. As businesses deploy more of these agents, the number of such credentials multiplies fast, and most companies have no clear view of where they all are or what they are doing.
What is Cyera actually buying?
Cyera is buying a specialist lock for a door that most companies did not realise they had left open. Oasis monitors agent behaviour in real time and controls which systems each agent can reach.
Cyera, a five-year-old data-security company, plans to absorb that capability into a broader platform that covers both data protection and identity management in one product. The deal is signed as a letter of intent, which means the parties have agreed in principle but have not yet completed the formal legal and financial closing process.
The price is approximately $1 billion, paid mostly in cash with some Cyera shares making up the balance.
Why does this matter to ordinary workers and businesses?
If your employer uses AI tools that can book meetings, pull reports, or send messages on your behalf, those tools hold login credentials just as you do. A gap in oversight means a compromised agent could access far more than the employee who set it up ever intended.
Protection of that kind has become a business priority fast. TechCrunch reported last month that Cyera, despite surpassing $150 million in annual recurring revenue (the subscription income a company collects in a year), is still not profitable, underlining how heavily firms in this space are spending to grow before the market consolidates.
Cyera has been acquisitive: it recently bought Ryft, backed by Index Ventures, and Genie Security, a firm less than a year old at the time of purchase.
| Company | Founded | Total funding raised | Acquiring price |
|---|---|---|---|
| Cyera | 2021 | ~$2.3 billion | Buyer |
| Oasis Security | 2022 | ~$195 million | ~$1 billion |
The two firms share investors: Accel and Cyberstarts backed both, which typically smooths the legal and commercial side of a deal.
What happens next?
The acquisition still needs to close formally. Once it does, Oasis's technology will be folded into Cyera's platform. Existing Oasis customers should expect communications from Cyera about what changes, and when.
For everyone else, the deal is a signal: the market for AI-agent security is now large enough to justify ten-figure price tags, and the race to own it is moving quickly.
Common questions
What is a non-human identity and why should I care?
A non-human identity is a digital pass, similar to a username and password, that a piece of software uses to log into other systems automatically. If that pass is stolen or misused, an attacker can reach any system the software was allowed to touch.
Does this deal change anything for current Oasis Security customers?
Not immediately. Letters of intent precede a formal close, so products and contracts continue as normal until Cyera announces integration plans, which it has said will result in a combined platform.
