The Cyera Oasis Security acquisition, announced on 29 July 2026, puts a roughly $1 billion price tag on the question of who controls what an AI agent is allowed to do. Cyera, the data security firm valued at $12 billion after its most recent fundraising round, signed a letter of intent to buy Oasis Security in a deal structured as mostly cash with the remainder paid in Cyera shares.
The cash component is estimated at around $700 million, with the balance in Cyera equity, according to Calcalist. That figure has not been officially confirmed by either company. The Wall Street Journal reported the parties expect the deal to close later in 2026.
What Oasis Security Actually Does
Oasis was co-founded in 2022 by Danny Brickman and Amit Zimerman, two veterans of the identity security world. The company’s platform focuses on non-human identities: service accounts, API keys, and, increasingly, the AI agents that enterprises are deploying at speed across their infrastructure.
The core capability is fine-grained, real-time access control. According to Craft Ventures, Oasis can interpret an agent’s intent in real time and grant scoped, short-lived, least-privilege access to corporate assets as needed, provisioning at the session level rather than opening permanent permissions. That architecture matters as AI agents multiply: a credential left open between sessions is an attack surface.
Oasis raised $120 million in a Series B announced on 19 March 2026, bringing total funding to $195 million. Craft Ventures led that round, with participation from Cyberstarts, Sequoia Capital, Accel, and new investor Leaders Fund, as reported in the Series B press release.
The Cyera Oasis Security Acquisition in Strategic Context
Cyera has been spending freely. The five-year-old company purchased Ryft, backed by Index Ventures, and Genie Security, which was less than a year old at the time of acquisition. Now Oasis adds an identity layer to what Cyera frames as a unified identity and data security platform.
The funding to support that spending has not been modest. Cyera closed a $600 million Series G round at a $12 billion valuation, led by Evolution Equity Partners with participation from Cyberstarts and Temasek, per the New York Times. Six months before that, in January 2026, it had raised $400 million at a $9 billion valuation. Total funding across the company’s life now stands at roughly $2.3 billion.
Cyera and Oasis share investors: Accel and Cyberstarts appear on both cap tables, a dynamic that can smooth due diligence and align incentives but also raises questions about independent price discovery in the negotiation.
Revenue has grown: Cyera has surpassed $150 million in annual recurring revenue. Profitability remains a different matter. The company is not yet profitable, a position that sits in tension with its acquisition pace.
A Market Heating Up Around Non-Human Identities
Cyera is not alone in spotting the opportunity. On 18 June 2026, SailPoint announced its acquisition of Entro Security for a reported approximately $200 million, another deal targeting non-human identity management. Two sizeable acquisitions in the same niche within weeks of each other suggests buyers are moving before the market consolidates further rather than after.
The logic is straightforward, if the execution is not. Every enterprise deploying autonomous AI agents creates a new category of identity: entities that act, request access, and make decisions, but that are not human and do not respond to a conventional identity governance framework. That gap has existed for years in the form of service accounts; AI agents have made it harder to ignore and faster to exploit.
Post-close, KuppingerCole reports that Oasis is expected to operate as an independent unit within Cyera rather than being fully absorbed. Whether that autonomy survives the integration pressure that follows any acquisition of this size is the question that will define whether the platform thesis holds.
The letter of intent is signed. What closes is what matters.
