Capital

Cyera's $1bn Oasis Deal Prices Agent Identity Risk

Cyera signed a letter of intent to buy Oasis Security for about $1 billion, signaling that non-human identity - securing AI agents, API keys and service accounts - is now its own enterprise security budget line.

CapitalBy Servola Tech Desk2026-08-084 min read

AI-assisted, edited by humans. | Editor-in-Chief: Leon Soliman | Editorial standards

Cyera's $1bn Oasis Deal Prices Agent Identity Risk

Key takeaways

Cyera has signed a letter of intent to acquire Oasis Security for roughly $1 billion, a price tag that turns non-human identity - the credentials and permissions held by AI agents, API keys and service accounts - into a distinct enterprise security budget line rather than a footnote inside identity and access management.
The deal is weighted toward cash, roughly $700 million in cash and the remainder in Cyera shares, and is structured as a signed letter of intent moving toward a binding agreement rather than a closed transaction.
Cyera itself only closed a $600 million round at a $12 billion valuation weeks earlier, taking its own total raised to about $2.3 billion since chief executive Yotam Segev and chief technology officer Tamar Bar-Ilan, both veterans of Israel's Unit 8200 and Talpiot programme, founded the company in 2021.
Any enterprise already running coding agents, customer-service agents or internal automation almost certainly has no dedicated tool auditing what those agents can access, which makes non-human identity governance a line item to add to the next security budget cycle, not a task to bundle into general IAM spend built for humans who log in.

A Billion-Dollar Deal for Machines That Log In Without a Password

Cyera, the Israeli-founded data-security company that closed a $600 million round at a $12 billion valuation only weeks earlier, has signed a letter of intent to acquire Oasis Security, an Israeli startup that has raised about $195 million since its founding in 2022. Cyera itself, founded in 2021 by chief executive Yotam Segev and chief technology officer Tamar Bar-Ilan, both veterans of Israel's Unit 8200 signals-intelligence unit and the Talpiot military technology programme, has now raised roughly $2.3 billion in total. TechCrunch first reported the agreement, and SecurityWeek, Globes, Calcalist's CTech, the Times of Israel and BankInfoSecurity have each corroborated the terms independently.

The value put on the deal is approximately $1 billion, weighted toward cash: roughly $700 million in cash, with the remainder paid in Cyera shares. It is worth being precise about what has actually happened so far - the companies have signed a letter of intent, a serious step toward a binding agreement but not yet a closed acquisition. Once completed, Oasis is set to operate as an independent unit inside Cyera, continuing to focus specifically on securing non-human identities rather than being folded into Cyera's broader data-security product line.

The Budget Line That Barely Existed Eighteen Months Ago

Oasis specializes in a problem that has grown up fast: securing 'non-human identities' - the API keys, service accounts, machine credentials and, increasingly, autonomous AI agents that now request access, chain permissions and act inside enterprise systems without a person clicking anything. Traditional identity and access management and privileged access management tooling was built to govern people logging in with a username and password, then stepping through multi-factor authentication. It was never designed to notice that a coding agent has quietly accumulated write access to a production database, or that a customer-service agent's credentials have been reused across three systems it was never meant to touch.

That gap is what makes this a Capital story worth reading as a pricing signal, not just an acquisition. A category that barely existed as a distinct budget line 18 to 24 months ago has just been priced at roughly $1 billion by one of its own leading vendors. For any enterprise currently deploying AI agents - coding agents, internal automation, customer-facing assistants - the practical takeaway is direct: if there is no tool in the stack specifically auditing what those agents can reach, whether they are over-permissioned, or whether their credentials have been silently escalated, that gap now has a name and, as of this deal, a price.

A Warning for Anyone Shopping the Point-Solution Market

There is a second lesson here for enterprise security buyers already evaluating standalone non-human-identity vendors, separate from Cyera's own thesis. Oasis was an independent, well-funded point solution in a hot, thinly populated category, and it took eighteen months from its Series A tier funding to becoming the centerpiece of a billion-dollar acquisition. Pure-play vendors in an early, fast-consolidating category get bought quickly, often before a multi-year enterprise contract has run its course.

The practical implication for a buyer signing a contract with a standalone non-human-identity vendor today is to evaluate the roadmap of its likely eventual owner, not only the current product. Ask who is circling the category, what a large data-security or identity platform would do with the tool post-acquisition, and whether the vendor's product would survive being absorbed into someone else's platform on someone else's timeline. Oasis is set to keep operating as an independent unit inside Cyera, which is the outcome procurement teams should hope for and should explicitly ask about before signing with any similarly-sized rival.

Frequently asked questions

Has Cyera actually completed its acquisition of Oasis Security?

Not yet. The companies have signed a letter of intent, a formal step toward a binding agreement, but the deal has not closed. TechCrunch first reported the signed letter of intent, and SecurityWeek, Globes, Calcalist's CTech, the Times of Israel and BankInfoSecurity have each corroborated the reported terms.

What is 'non-human identity' security and why does it matter now?

It covers securing the credentials and permissions held by things rather than people - API keys, service accounts, and increasingly autonomous AI agents that can request access, hold their own permissions and act inside enterprise systems on their own. Traditional identity and access management tooling was built for human logins, not for auditing what an AI agent can reach or whether its credentials have been silently escalated.

How much is the Cyera-Oasis deal worth and how is it structured?

Reports put the value at approximately $1 billion, weighted toward cash - roughly $700 million in cash with the remainder in Cyera shares. Cyera itself had just raised $600 million at a $12 billion valuation, taking its total funding to about $2.3 billion, while Oasis had raised about $195 million since its 2022 founding.

A category that did not have a name as a budget line two years ago has just been priced by its own leading vendor at roughly $1 billion, and that is the number enterprise security leaders should sit with, not the deal mechanics. Every enterprise running an AI agent with real permissions inside its systems already has this exposure whether or not it has a line item for it yet, and Cyera's letter of intent for Oasis is the market telling procurement teams the line item is now overdue.

CyeraOasis SecurityAI agent identitynon-human identitycybersecurity M&A

Edinburgh's Wordsmith Hits $114M as Legal AI Matures

Edinburgh-founded legal AI firm Wordsmith closed a $14M Series B extension led by Intact Private Capital and is expanding into regulated financial services and insurance legal work.

4 min read

Capital

Only 6% of Finance Leaders Want Full AI Autonomy

Moss raised EUR30m at a EUR1bn valuation, but the real news is a survey where 48% of finance leaders want AI control and just 6% want autonomy.

5 min read

Decisions

The Codename Worked. The Trading Controls Did Not

An indictment unsealed on 24 July says two Volkswagen engineers traded on a joint venture known internally as Project Climb. The control that failed is a common one.