Cyera's $1B Oasis Acquisition Targets the Identity Crisis AI Agents Are Creating
The data-security unicorn's third deal this year unifies data protection with non-human identity governance as autonomous agents flood the enterprise.
What matters
- Cyera agreed to acquire Oasis Security for approximately $1 billion, with ~$700M in cash and the remainder in shares.
- Oasis specializes in non-human identity and agentic access management—securing AI agents and machine accounts in enterprise environments.
- Non-human identities in Fortune 500 companies grew nearly 500% in the last six months, per Cyera.
- This is Cyera's third acquisition in 2026, following a $600M raise at a $12B valuation in June.
- Oasis raised ~$195M total, including a $120M Series B in March 2026, backed by Accel, Sequoia, Cyberstarts, and Craft Ventures.
Funding facts
- Amount:
- $1,000,000,000
- Round:
- acquisition
- Valuation:
- $12,000,000,000
What happened
Cybersecurity unicorn Cyera announced on July 28, 2026 that it has signed an agreement to acquire Israeli startup Oasis Security in a deal valued at approximately $1 billion. According to Calcalist, roughly $700 million of the consideration will be paid in cash, with the remainder in Cyera shares.
Oasis Security, founded in 2022 by Danny Brickman and Amit Zimerman—both veterans of the IDF's Unit 81—builds a platform for discovering, managing, and controlling access from non-human identities such as AI agents. The startup raised approximately $195 million to date, including a $120 million Series B in March 2026, backed by Accel, Cyberstarts, Sequoia Capital, and Craft Ventures.
Cyera, founded in 2021 by Yotam Segev and Tamar Bar-Ilan, both veterans of Israel's Talpiot program and Unit 8200, recently raised $600 million at a $12 billion valuation in June 2026. The company has raised approximately $2.3 billion to date. This marks Cyera's third acquisition in 2026.
Why it matters
The core problem the deal addresses is straightforward: AI agents are proliferating inside enterprises faster than security teams can govern them. Cyera reports that non-human identities inside Fortune 500 companies grew nearly 500% in the last six months alone, making them the fastest-growing identity type in the enterprise.
Traditional security models were built around human users—people who log in, request access, and make decisions at human speed. Agents operate at machine speed, acting in milliseconds, and they don't need to be compromised to cause damage. Give an agent valid credentials and an objective, and it can expose sensitive data or break a critical process.
Oasis's Agentic Access Management (AAM) technology provides visibility, control, and policy enforcement across critical systems for non-human identities. By combining this with Cyera's existing data security platform, the merged company aims to offer a single system that governs what every human, machine, and agent can see and do.
As Segev put it: "Knowing your data isn't enough if you can't govern who or what touches it. Knowing your identities isn't enough if you don't know what they can see. Put those two things together and you get one system that decides what every human, machine, and agent can see and do."
What to watch
- Integration timeline: Cyera has not publicly disclosed when Oasis's AAM capabilities will be fully integrated into its platform or whether Oasis will operate as a standalone product in the interim.
- Competitive response: Other data-security and identity-management vendors may accelerate their own non-human identity offerings or pursue acquisitions to keep pace.
- Regulatory scrutiny: A $1 billion deal by a company valued at $12 billion is unlikely to face major antitrust hurdles, but it adds to a busy 2026 Israeli tech M&A landscape.
- Agent adoption curve: The urgency of non-human identity security depends on how quickly enterprises actually deploy autonomous agents at scale. If adoption slows, the premium Cyera is paying may face second-guessing.
What to do next
Developers
Audit your non-human identities—API keys, service accounts, agent credentials—and map which systems each can access.
Non-human identities are the fastest-growing attack surface in the enterprise, and most teams don't have full visibility into what agents can touch.
Founders
If you're building AI agent products, bake identity governance and least-privilege access into your architecture from day one rather than bolting it on later.
The $1B valuation of Oasis signals that investors and acquirers are placing enormous value on non-human identity security as a foundational layer.
PMs
Evaluate whether your current identity and access management stack can handle machine-speed, autonomous agents—or whether you need a dedicated agentic access management layer.
Traditional IAM tools were designed for human workflows and may not provide the visibility and policy enforcement needed for agent-driven environments.
Investors
Track the broader non-human identity security category, as Cyera's $1B acquisition could trigger consolidation and follow-on funding in this niche.
The deal validates the market for agentic access management and may catalyze acquisitions of similar startups by larger security platforms.
Operators
Inventory all AI agents and autonomous tools already running in your environment and assess what data and systems they can access.
Cyera reports 500% growth in non-human identities at Fortune 500 companies in six months—most organizations likely have more agent activity than they realize.
Testing notes
Caveats
- This is an M&A announcement, not a product release. The integrated Cyera-Oasis platform is not yet available for testing. Integration timeline has not been publicly disclosed.