Cyera to Acquire Oasis Security for $1 Billion, Targeting AI Agent Identity Risks

Israeli data security company Cyera has signed a letter of intent to acquire Oasis Security for approximately $1 billion, the companies announced on July 28, 2026. The deal is expected to be paid mostly in cash, with the remainder in Cyera shares. TechCrunch
Oasis Security, also Israeli, was founded in 2022 and focuses on securing non-human identities, primarily AI agents. The startup has raised approximately $195 million from investors including Accel, Craft Ventures, and Cyberstarts. TechCrunch Oasis confirmed the agreement in a first-party blog post titled "Oasis and Cyera to Build Next-Gen AI Security Platform." Oasis Security
Cyera, a five-year-old company led by CEO Yotam Segev, recently raised $600 million at a $12 billion valuation and has brought in roughly $2.3 billion in total funding. It surpassed $150 million in annual recurring revenue but is not profitable as of the acquisition announcement. TechCrunch Globes
The two companies share overlapping investors in Accel and Cyberstarts, a common feature in Israeli cybersecurity consolidation where shared backers can reduce friction in deal-making. Cyera has been acquisitive: it previously bought Ryft, backed by Index Ventures, and Genie Security, which was less than a year old at the time of its acquisition. TechCrunch
Post-acquisition, Cyera plans to integrate Oasis's non-human identity capabilities into a unified identity and data security platform. The strategic logic is straightforward: Cyera's core competency is data security posture management, which is a class of tooling that helps organizations discover, classify, and protect sensitive data across cloud and on-premises environments. Oasis extends that perimeter to cover the machine identities that AI agents create and use when they access enterprise systems autonomously. TechCrunch Oasis Security
Cyera has been building toward this convergence. On June 2, 2026, the company announced a partnership with Snowflake to advance secure AI agent adoption in the enterprise. It added Steffan Tomlinson to its board of directors in May, and CRN recognized the company in its 2026 Channel Chiefs List in February. Cyera Newsroom
The broader context here is that non-human identity management is becoming a distinct security discipline. When people think of identity and access management, they usually picture employees logging in with usernames and passwords, or service accounts running automated scripts. AI agents introduce a new category entirely: software that autonomously calls APIs, queries databases, and chains together privileged operations, each requiring its own credentials and access rights. Oasis was built specifically for this problem, and Cyera is paying a premium to own it rather than build it.
Whether $1 billion for a four-year-old startup that raised under $200 million represents a fair price depends on execution risk that remains unresolved. Cyera is funding the deal from a capital base that includes a recent $600 million raise and a $12 billion valuation, but the company is not profitable. The deal structure, weighted toward cash, means Cyera is deploying real liquidity rather than relying primarily on equity dilution.
The acquisition also reflects a pattern visible in Israeli cybersecurity, where fast-growing security companies use aggressive M&A to assemble broader platforms ahead of an IPO or strategic exit. Cyera's acquisition of Genie Security when it was less than a year old, and now Oasis at a roughly 5x multiple over total funding, suggests a company willing to pay for category coverage rather than organic development cycles.
For practitioners, the practical question is integration depth. Cyera's stated plan to fold Oasis into a unified identity and data security platform is the right architectural ambition, but the track record of post-acquisition integration in cybersecurity is mixed. Identity tooling that was built as a standalone product often loses fidelity when absorbed into a broader platform, particularly when the acquiring company's primary discipline sits in an adjacent domain. How Cyera preserves Oasis's agent-focused capabilities while integrating them into a data-security-centric platform will determine whether this deal delivers on its premise.


