Cyera to buy Oasis Security for $1B to police AI agents
The data-security firm signed a letter of intent for the non-human identity startup, its third acquisition this year, as enterprises scramble to govern agent access.
What happened
Cyera has signed a letter of intent to acquire Oasis Security for approximately $1 billion, mostly in cash with the balance in Cyera shares. Founded in 2022, Oasis specialises in securing non-human identities — the service accounts, API keys, tokens and, increasingly, AI agents that act inside corporate systems without a human at the keyboard. Its platform monitors agent behaviour and manages what each identity is permitted to reach across connected software. The startup had raised about $195 million from investors including Accel, Craft Ventures and Cyberstarts.
For Cyera the deal is the third of 2026, after Ryft and Genie Security. The five-year-old company recently raised $600 million at a $12 billion valuation, has passed $150 million in annual recurring revenue and has taken $2.3 billion in total funding while remaining unprofitable. It plans to fold Oasis into a combined identity-and-data security platform for enterprise customers.
Why it matters
Agent deployments have created an identity problem enterprises were not provisioned for. A coding agent, a support agent and a workflow agent each need credentials, each accumulate permissions, and none of them can be governed by the human-centric identity tooling that most large organisations still run on. The result is a fast-growing population of privileged actors that nobody can fully enumerate — and the recent run of agent-related incidents, including the Hugging Face intrusion and the Claude sandbox escape disclosed this month, has made that abstract risk concrete for boards.
A $1 billion price for a four-year-old company with roughly $195 million raised prices that anxiety directly. It also signals where agent infrastructure value is settling: not in the frameworks that build agents, which are commoditising fast, but in the control planes that decide what a running agent is allowed to touch. Expect identity incumbents to respond, either by buying comparable assets or by rebranding privileged-access products around agents. The transaction is still a letter of intent, so terms could shift before close.