Cyera, an Israeli-American data security company, signed a letter of intent on July 28, 2026 to acquire the startup Oasis Security for about $1 billion. The deal targets a gap opened by the fast-growing number of AI agents: their actions must be monitored and their access to other systems governed just like human accounts.
Key takeaways
- Deal value: about $1 billion, mostly cash plus a portion in Cyera shares.
- Oasis Security specializes in non-human identity management — governing AI agents and their permissions.
- Cyera is valued at $12 billion after a $600 million round in June 2026.
- This is Cyera's third acquisition in 2026, after Ryft and Genie Security.
- Status: signed letter of intent, not a closed deal.
Machine identity is the new security frontier
Oasis Security, founded in 2022, works on what the industry calls non-human identity — managing identities that do not belong to people: API keys, service accounts and, increasingly, autonomous AI agents. Its software watches what an agent does and decides which other software it may reach. As companies deploy agents that act on their own, each one becomes a separate identity that has to be authenticated, constrained and held accountable.
Cyera describes itself as the "trust layer for the AI era" and builds an enterprise data security platform. Acquiring Oasis adds a layer that controls who — human or agent — reaches the data. The startup has raised about $195 million from investors including Accel, Craft Ventures and Cyberstarts.
Cyera is buying up rivals and adjacent tech
This is not Cyera's first such move this year. The company earlier acquired Ryft and Genie Security in 2026, making Oasis its third acquisition in a matter of months. Cyera and Oasis also share investors — Accel and Cyberstarts — which simplifies talks and shows how tightly connected this market segment is.
The buying spree rests on Cyera's finances. After the June round of $600 million the company reached a $12 billion valuation, and its annual recurring revenue passed $150 million. In total Cyera has raised about $2.3 billion, though it still operates at a loss — a typical profile for a fast-growing software vendor that chooses expansion over profitability.
Why it matters
Security has long revolved around human identity — logins, passwords, employee permissions. AI agents invert that ratio: one team can spin up hundreds of automated actors, each with its own credentials and real access to company systems. A billion dollars for a startup founded barely four years ago shows how highly investors price this problem. For Cyera the deal is a bet that data security and machine-identity control will merge into a single product — whoever guards the data must also guard which agent reaches it. The risks are integrating three companies bought in one year, and the fact that this is still a letter of intent rather than a closed deal. But if the agent trend holds, non-human identity control will stop being a niche and become a mandatory part of every security stack.
What's next?
- The deal must still close — it is a letter of intent for now, so final terms and approvals may change.
- Integrating Oasis alongside the earlier Ryft and Genie Security buys will test Cyera's ability to merge three acquisitions into one product.
- A $1 billion price for a non-human identity vendor may accelerate further acquisitions in the segment by Cyera's rivals.
