Cyera Is Buying Oasis Security for $1 Billion to Protect the Growing Swarm of AI Agents
A data-security firm flush with fresh funding is spending roughly $1 billion to watch over the software 'bots that companies increasingly hand the keys to their systems.
Key points
- Cyera signed a letter of intent to acquire Oasis Security for approximately $1 billion, mostly in cash, announced Tuesday 28 July 2026.
- Oasis Security specialises in protecting non-human identities, meaning AI agents (software that can carry out multi-step tasks on its own) rather than human employees.
- Cyera raised $600 million at a $12 billion valuation before this deal and has now raised about $2.3 billion in total.
- Oasis was founded in 2022 and had raised roughly $195 million from investors including Accel and Craft Ventures.
- Post-acquisition, Cyera plans to fold Oasis's technology into a single identity and data security platform.
Every time a company gives an AI agent access to its file storage or its customer database, it creates a new entry point a criminal could exploit. Oasis Security was built to guard those entry points. The company focuses on what the industry calls non-human identities: the digital credentials, or login tokens, that AI agents use to get permission to touch other software. As businesses deploy more agents, the number of such credentials multiplies fast, and most companies can't say where they all are.
What is Cyera actually buying?
Cyera is buying a specialist lock for a door that most companies didn't realise they'd left open. Oasis monitors agent behaviour in real time and controls which systems each agent can reach.
Cyera, a five-year-old data-security company, plans to absorb that capability into a broader platform covering both data protection and identity management. The deal is a letter of intent, meaning the parties have agreed in principle but haven't yet completed the formal closing process. The price is approximately $1 billion, paid mostly in cash with some Cyera shares making up the balance.
Why does this matter to ordinary workers and businesses?
If your employer uses AI tools that can book meetings or pull reports on your behalf, those tools hold login credentials just as you do. A gap in oversight means a compromised agent could reach far more than the employee who set it up ever intended.
We first covered non-human identity as a distinct security concern on 22 July 2026, when Pentera made the case for evidence-based defences over theoretical risk models. This acquisition suggests the market has already moved past that debate and into the consolidation phase.
Protection of that kind has become a business priority fast. TechCrunch reported last month that Cyera, despite surpassing $150 million in annual recurring revenue (the subscription income a company collects in a year), isn't yet profitable, which shows how heavily firms are spending to grow before the market settles.
Cyera has been acquisitive: it recently bought Ryft, backed by Index Ventures, and Genie Security, a firm less than a year old at the time.
| Company | Founded | Total funding raised | Role in deal |
|---|---|---|---|
| Cyera | 2021 | ~$2.3 billion | Buyer |
| Oasis Security | 2022 | ~$195 million | ~$1 billion acquisition target |
The two firms share investors, Accel and Cyberstarts backed both, which typically smooths the legal and commercial side of a deal.
What happens next?
Once the deal closes formally, Oasis's technology will be folded into Cyera's platform. Existing Oasis customers should expect communications about what changes and when.
For everyone else, this is a signal that the market for AI-agent security now justifies ten-figure price tags. The race to own it is moving fast, and buyers with deep pockets are already picking winners.
Common questions
What is a non-human identity and why should I care?
A non-human identity is a digital pass, similar to a username and password, that a piece of software uses to log into other systems automatically. If that pass is stolen or misused, an attacker can reach any system the software was allowed to touch.
Does this deal change anything for current Oasis Security customers?
Not immediately. Letters of intent precede a formal close, so products and contracts continue as normal until Cyera announces integration plans, which it says will result in a combined platform.
