Cyera Buys Oasis Security for $1 Billion to Lock Down AI Agents
Data security firm Cyera is acquiring Oasis Security in a deal worth $1 billion, combining two platforms that track what AI agents and software bots are permitted to see and do inside company systems.
Key points
- Cyera agreed to acquire Oasis Security for $1 billion, with roughly $700 million paid in cash and the rest in shares.
- The deal is the second-largest cybersecurity acquisition of 2026, behind Accenture's roughly $3.2 billion majority stake in Dragos.
- Oasis built a platform to govern non-human identities: software bots and AI agents that access company systems without a human logging in.
- Cyera raised $600 million at a $12 billion valuation just weeks before announcing the acquisition.
- The combined company aims to give businesses a single view of both their data and everything permitted to touch it.
Cyera, a company that helps businesses track and protect sensitive data, announced Tuesday it will acquire Oasis Security for $1 billion. SecurityWeek confirmed the figure after Cyera acknowledged it directly. About $700 million will be cash; the remainder comes as shares in the combined business.
What does Oasis Security actually do?
Oasis built software to manage non-human identities, the accounts used by automated programs and AI agents rather than people. Every automated process inside a company's network that logs in or reads data without a human typing a password needs access rules, and Oasis specialised in setting and enforcing them.
The problem is growing. Companies are deploying more AI agents, software that carries out tasks on its own: reading customer records, approving transactions, moving files. Each one needs system access, and each one is a potential entry point for attackers if its permissions aren't locked down. We've tracked this pressure closely; our 9 July piece "AI Agents Are Taking Over Enterprise Systems. Nobody Knows Who They Are." described a six-stage model explaining why autonomous agents are breaking conventional identity security.
Why does this deal matter to ordinary people?
When a business holds your personal details or a medical file, dozens of automated processes may interact with that data daily. A software agent with more access than it needs is an open door. A criminal who hijacks it can reach far more than they should.
Combining Cyera's data-mapping tools with Oasis's agent-access controls means companies get one platform that answers two questions: what data exists, and which humans or agents are permitted to see it. Segev, co-founder and CEO of Cyera, said it to SecurityWeek directly: "Knowing your data isn't enough if you can't govern who or what touches it. Knowing your identities isn't enough if you don't know what they can see."
| Item | Figure |
|---|---|
| Deal value | $1 billion |
| Cash portion | ~$700 million |
| Cyera's most recent valuation | $12 billion (June 2026) |
| Oasis Series B funding (March 2026) | $120 million |
| 2026 cybersecurity deals tracked so far | 230 |
| Largest 2026 deal (Accenture / Dragos) | ~$3.2 billion |
The timing is deliberate. Cyera closed a $600 million round just weeks ago. Oasis had raised $120 million in March 2026. This is the kind of consolidation we flagged in June: our 37-deal M&A roundup showed the pace of security industry buyouts accelerating sharply. Cyera's move fits that pattern, and it's a direct bet that owning both the data layer and the identity layer is worth more than selling each separately.
For customers of businesses using either product, no immediate action is needed. The real test is whether the integration delivers. If it does, personal data held by those businesses becomes meaningfully harder to reach through a hijacked agent or rogue automated process.
