Cyera Buys Oasis Security for $1 Billion to Lock Down AI Agents
Data security firm Cyera is acquiring Oasis Security in a deal worth $1 billion, combining two tools that track what AI agents and software bots are allowed to see and do inside company systems.
Key points
- Cyera agreed to acquire Oasis Security for $1 billion, with roughly $700 million paid in cash and the rest in shares.
- The deal is the second-largest cybersecurity acquisition of 2026, behind Accenture's $3.2 billion majority stake in Dragos.
- Oasis built a platform to govern non-human identities, meaning software bots and AI agents that access company systems without a human logging in.
- Cyera raised $600 million at a $12 billion valuation just weeks before announcing the acquisition.
- The combined company aims to give businesses a single view of both their data and everything that can touch it.
Cyera, a company that helps businesses track and protect their sensitive data, announced Tuesday it will acquire Oasis Security in a deal confirmed at $1 billion. SecurityWeek first reported the figure after Cyera confirmed it directly.
About $700 million of that will be cash. The remaining sum comes as shares in the combined business.
What does Oasis Security actually do?
Oasis built software to manage non-human identities, which is a term for the accounts used by software programs, automated bots, and AI agents rather than by real people. Think of every automated process inside a company's network that logs in, reads files, or moves data without a human typing a password. Those accounts need access rules just as much as employee accounts do, and Oasis specialised in setting and enforcing those rules.
That problem is growing fast. Companies are deploying more AI agents, which are software programs that carry out tasks on their own, such as reading customer records, sending emails, or approving transactions. Each agent needs to access systems, and each one represents a potential door for criminals if the permissions aren't locked down tightly.
Why does this deal matter to ordinary people?
When a business stores your personal details, a payroll record, or a medical file, dozens of automated processes may interact with that data every day. If one of those software agents has more access than it needs, a criminal who hijacks it can reach far more information than they should.
Combining Cyera's data-mapping tools with Oasis's agent-access controls means companies get one platform that answers two questions at once: what data exists, and exactly which humans, machines, or AI agents are allowed to see it.
Cyera co-founder and CEO Yotam Segev put it plainly: "Knowing your data isn't enough if you can't govern who or what touches it."
| Item | Figure |
|---|---|
| Deal value | $1 billion |
| Cash portion | ~$700 million |
| Cyera's most recent valuation | $12 billion (June 2026) |
| Oasis Series B funding (March 2026) | $120 million |
| 2026 cybersecurity deals tracked so far | 230 |
| Largest 2026 deal (Accenture / Dragos) | ~$3.2 billion |
The timing is notable. Cyera closed a $600 million funding round just weeks ago. Oasis had raised $120 million in a Series B round in March 2026. Both companies were well-funded before the deal; together, they are pitching a combined platform to enterprises trying to stay ahead of AI-related security risks.
For customers of businesses using either product, no immediate action is needed. The practical upside, if the integration delivers what both companies promise, is that their personal data held by those businesses should be harder to reach through a hijacked AI agent or rogue automated process.
