A $1 Billion Deal to Secure the Software Bots That Run Behind the Scenes

Israeli data security company Cyera has signed a letter of intent to acquire Oasis Security for approximately $1 billion, the companies announced on July 28, 2026. The deal is expected to be paid mostly in cash, with the remainder in Cyera shares. TechCrunch
Oasis Security, also Israeli, was founded in 2022 and focuses on securing non-human identities, primarily AI agents. The startup has raised approximately $195 million from investors including Accel, Craft Ventures, and Cyberstarts. TechCrunch Oasis confirmed the agreement in a first-party blog post titled "Oasis and Cyera to Build Next-Gen AI Security Platform." Oasis Security
Cyera, a five-year-old company led by CEO Yotam Segev, recently raised $600 million at a $12 billion valuation and has brought in roughly $2.3 billion in total funding. It surpassed $150 million in annual recurring revenue but is not profitable as of the acquisition announcement. TechCrunch Globes
The two companies share overlapping investors in Accel and Cyberstarts, a common feature in Israeli cybersecurity consolidation where shared backers can reduce friction in deal-making. Cyera has been acquisitive: it previously bought Ryft, backed by Index Ventures, and Genie Security, which was less than a year old at the time of its acquisition. TechCrunch
Post-acquisition, Cyera plans to integrate Oasis's non-human identity capabilities into a unified identity and data security platform. The strategic logic is straightforward: Cyera's core competency is data security posture management, which means it helps organizations find, classify, and protect sensitive data across their systems. Oasis extends that protection to cover the machine identities that AI agents create and use when they access enterprise systems on their own. TechCrunch Oasis Security
Cyera has been building toward this convergence. On June 2, 2026, the company announced a partnership with Snowflake to advance secure AI agent adoption in the enterprise. It added Steffan Tomlinson to its board of directors in May, and CRN recognized the company in its 2026 Channel Chiefs List in February. Cyera Newsroom
The broader context here is that non-human identity management is becoming a distinct security discipline. To understand why this matters, think of it this way: in the past, security was mostly about people logging into systems with usernames and passwords. AI agents are different. They are software programs that act on their own, calling up other software, pulling data from databases, and performing sensitive operations, each time using their own credentials. The more of these agents a company deploys, the more digital identities it has to manage and protect. Oasis was built specifically for this problem, and Cyera is paying a premium to own it rather than build it.
Whether $1 billion for a four-year-old startup that raised under $200 million represents a fair price depends on execution risk that remains unresolved. Cyera is funding the deal from a capital base that includes a recent $600 million raise and a $12 billion valuation, but the company is not profitable. The deal structure, weighted toward cash, means Cyera is deploying real liquidity rather than relying primarily on equity dilution.
The acquisition also reflects a pattern visible in Israeli cybersecurity, where fast-growing security companies use aggressive M&A to assemble broader platforms ahead of an IPO or strategic exit. Cyera's acquisition of Genie Security when it was less than a year old, and now Oasis at a roughly 5x multiple over total funding, suggests a company willing to pay for category coverage rather than organic development cycles.
For practitioners, the practical question is integration depth. Cyera's stated plan to fold Oasis into a unified identity and data security platform is the right architectural ambition, but the track record of post-acquisition integration in cybersecurity is mixed. Identity tooling that was built as a standalone product often loses fidelity when absorbed into a broader platform, particularly when the acquiring company's primary discipline sits in an adjacent domain. How Cyera preserves Oasis's agent-focused capabilities while integrating them into a data-security-centric platform will determine whether this deal delivers on its premise.


