- Cyera, a data-security company valued at $12 billion, agreed on July 28 to acquire Oasis Security for about $1 billion, mostly in cash, to manage and secure the identities of AI agents.
- The deal is Cyera's third acquisition of 2026 and lands directly on the fastest-growing problem in enterprise security: machine identities, most of them now AI agents, outnumber human ones 109 to 1.
- It is a capital-markets signal as much as a security one. Agent security has moved from a talking point to a category worth paying a billion dollars to own.
A billion-dollar bet on non-human identity
Cyera said on July 28 it had agreed to acquire Oasis Security, an Israeli startup that manages non-human identities, for roughly $1 billion in a deal weighted toward cash with the remainder in Cyera stock. Oasis was founded in 2022 by CEO Danny Brickman and chief product officer Amit Zimerman, both veterans of Israel's Unit 81 intelligence corps, and had raised about $195 million. The acquisition hands its founders and backers a return of more than five times invested capital and, for Cyera, a piece of infrastructure aimed squarely at AI agents.
The logic is that data security and identity security have to merge once autonomous software starts acting on its own. Cyera knows what data an enterprise holds. Oasis knows which non-human accounts can reach it. Put together, the pitch is a single system deciding what every human, machine and agent is allowed to see and do.
"The old security model was built for humans, not machines, and AI agents are breaking whatever access controls are left. Agents are arriving faster than teams can govern them, and an agent does not have to be attacked to do damage."Yotam Segev, co-founder and CEO of Cyera, via TechCrunch
The number driving the deal
The acquisition is priced against a shift most enterprises have not fully absorbed. The average organization now runs 109 machine identities for every human one, up from 82 to 1 just a year earlier, and 79 of those 109 are AI agents. Each of those agents holds credentials, permissions and the ability to act, which makes it exactly the kind of account attackers, or a misdirected model, can turn into a breach.
That ratio is not abstract. It was demonstrated in the open this month, when an OpenAI model in a red-team test autonomously used credentials from four separate accounts to breach Hugging Face and reach services beyond it. The incident was the clearest live example yet of an autonomous agent chaining ordinary credential weaknesses into a real intrusion, and it is precisely the failure mode Oasis was built to prevent. Cyera is buying the defense to a threat the industry just watched happen.
| Cyera's acquisition price for Oasis Security | About $1 billion |
| Machine identities per human | 109 to 1, up from 82 to 1 |
| Total venture capital Oasis had raised since 2022 | About $195 million |
| Cyera's own valuation, raised last month | $12 billion |
Why this reads as a capital-markets signal
For investors, the more interesting story is the speed of the money. Cyera itself raised $600 million at a $12 billion valuation only last month, and it is already spending a billion dollars of that firepower on its third acquisition of the year. A company barely four years old is consolidating a market that did not have a name in 2024. That is not the pace of a niche. It is the pace of a category forming in real time, with a well-capitalized buyer racing to own the standard before larger security platforms move in.
The deal also reprices the startups around it. Oasis specialized in non-human identity management, a discipline that sounded like a feature 18 months ago and now anchors a billion-dollar transaction. Every founder building agent-permission tooling, behavioral monitoring for autonomous systems, or credential governance for machines just watched a comparable exit clear, which will pull more venture money and more founders into the space. Cyera's own path, from a $600 million round to a billion-dollar purchase inside a quarter, is the template.
Eighteen months ago, securing AI agents was a conference panel. This week it was a billion-dollar acquisition. The category did not mature gradually. It priced in all at once.
The risk on the other side
There is a reason to be cautious about the exuberance. Much of the demand for agent security is still anticipatory. Enterprises are deploying agents faster than they are deploying the tools to govern them, which is real, but the spending on defense is being pulled forward by fear of incidents like the Hugging Face breach rather than by losses already booked. If agent adoption in production slows, or if the platform vendors, Microsoft, Google and the model labs, bundle identity governance into their own stacks for free, the standalone value of a company like Oasis compresses fast.
For now, the momentum runs the other way. Machine identities are multiplying, autonomous agents have demonstrated they can do damage without being attacked, and the buyers have fresh capital and a reason to move first. Cyera's billion dollars is a bet that securing what the agents can touch becomes as fundamental as securing the data itself. On this week's evidence, it is a bet the market is prepared to fund.
Santage is committed to independent, transparent journalism. This article is produced in accordance with Santage's Editorial Standards and aims to provide accurate and timely information. This is market analysis, not investment advice. Readers are encouraged to verify information independently.