Article: Cyera announced a $1 billion purchase of Oasis Security, a startup built to police AI agents that act as non-human users inside corporate networks. The deal, part cash and part Cyera stock, puts a clear price on protecting machine identities as enterprises hand more decision-making to autonomous software.
The shift from people to programs
Enterprise security has long focused on human logins, passwords and role-based access. That model is cracking under the weight of autonomous AI agents that fetch data, trigger workflows and even negotiate contracts without a person typing a command. Oasis’s platform watches each agent’s behavior in real time, curtails permissions to the narrowest possible set and raises alerts when an AI strays from its expected path.
Cyera bought Oasis to address what analysts call “agentic risk”: the danger that an unchecked AI could open a backdoor to sensitive systems or become a conduit for a breach. By folding Oasis’s tooling into its own suite, Cyera aims to give security teams a single pane of glass that sees both the data they protect and the software entities that touch it.
How the deal fits Cyera’s playbook
Cyera entered the conversation with a $12 billion valuation after a $600 million funding round that lifted its total capital to roughly $2.3 billion. The company already runs a unified identity and data security platform and has been on an acquisition binge, snapping up Ryft and Genie Security in the past year. Those moves stitched together the various layers of a modern security stack—identity, data, and now machine-identity—into one offering.
The Oasis purchase is the latest piece of that puzzle.
Money, market and the venture-capital echo chamber
Cyera’s own financials show annual recurring revenue (ARR) north of $150 million.
Bottom line
Cyera’s billion-dollar bet makes machine-identity protection the next frontier of corporate security, turning autonomous AI agents from a productivity boost into a liability that must be managed. Whether the acquisition translates into a defensible market position will hinge on how quickly enterprises adopt agentic workflows and how smoothly the two companies fuse their technologies.