Cyera signed a letter of intent to acquire Oasis Security for roughly $1 billion, the data-security company announced Tuesday, in a deal expected to be paid mostly in cash with the remainder in Cyera shares. The acquisition targets a narrow but fast-growing problem: policing the behavior of AI agents inside enterprises. Cyera itself raised $600 million at a $12 billion valuation earlier this year and has now surpassed $150 million in annual recurring revenue.
Oasis, founded in 2022, focuses on non-human identities — the service accounts, API keys, and increasingly the autonomous AI agents that log into corporate software without a human at the keyboard. It has raised about $195 million from Accel, Craft Ventures, Cyberstarts, and others. Cyera and Oasis share Accel and Cyberstarts on their cap tables, which likely smoothed the transaction.
The rationale is straightforward. Every enterprise deploying agentic AI is creating a new class of user that needs credentials, permissions, and audit trails — but at a scale and speed that traditional identity tools were not designed to handle. Oasis's platform is aimed squarely at that gap, and Cyera plans to fold it into a unified identity and data security offering.
“As the number of AI agents proliferates, companies must deploy cybersecurity software that monitors these agents' behavior and grants them permission to access other software.”— Marina Temkin, TechCrunch reporter
Key facts
- 01Cyera signed a letter of intent to acquire Oasis Security for approximately $1B, mostly cash with the remainder in Cyera shares.
- 02Oasis, founded in 2022, has raised about $195M from Accel, Craft Ventures, and Cyberstarts to secure non-human identities including AI agents.
- 03Cyera recently raised $600M at a $12B valuation and has raised about $2.3B in total funding across its five-year history.
- 04Cyera has surpassed $150M in annual recurring revenue but remains unprofitable, per prior TechCrunch reporting.
- 05The Oasis deal follows Cyera's recent acquisitions of Ryft and Genie Security.
This is Cyera's third acquisition in a compressed stretch. It recently bought Ryft, an Index Ventures-backed company, and Genie Security, which was less than a year old. The Oasis price tag dwarfs both and signals that Cyera is willing to spend aggressively to lock down the non-human identity category before larger security incumbents like CrowdStrike, Palo Alto Networks, or Okta build or buy their way in.
The five-year-old Cyera has now raised about $2.3 billion in total funding. That capital stack, combined with a $12 billion valuation, gives it the balance sheet to keep buying — but also the pressure to grow into the price. Reaching $150 million in ARR is a real milestone, though the company is not yet profitable, TechCrunch reported last month. A $1 billion cash-heavy acquisition tightens that math further.
For Oasis's investors, the outcome is a clean exit at roughly five times invested capital over four years, in a market where late-stage cybersecurity exits have been scarce. Accel and Cyberstarts end up on both sides of the transaction, absorbing Oasis's equity return while retaining exposure through their Cyera stake.
The broader context is a market repricing around AI-weaponized threats and AI-native defenses. Enterprises are simultaneously deploying autonomous agents that need to be secured and confronting attackers who are deploying agents of their own. Vendors that can credibly cover both sides — data at rest, identities in motion, human and non-human alike — are commanding premium valuations. Microsoft launched its first cybersecurity model this week, and Spur Intelligence raised $200 million from Insight Partners as bot traffic overtook human traffic on the web.
Skeptics will note that the non-human identity category is crowded and still defining itself. Startups like Astrix, Entro, and Clutch are competing for the same enterprise budgets, and identity incumbents Okta and CyberArk have both signaled ambitions here. Cyera is paying $1 billion for a company with roughly $195 million in venture funding and undisclosed revenue, which implies confidence in the roadmap more than the current book of business.
The deal also assumes that agentic AI adoption in the enterprise follows the trajectory vendors are pricing in. Google's own data, which we covered earlier this month, showed Gemini has not yet meaningfully automated white-collar tasks. If agent deployment stalls, so does the addressable market Cyera is now paying to own.
For the AI security market, the acquisition sets a reference price. A $1 billion outcome for a four-year-old non-human identity company tells every other founder in the category what their business could be worth if they can survive to a strategic buyer, and it tells every larger security vendor that the window to build organically is closing. Expect Okta, CyberArk, and Palo Alto Networks to respond with acquisitions of their own within the next two quarters.
Working on something we should cover, or seeing a story we missed? Send leads, documents, or feedback to hello@aichatdaily.com. For sensitive tips, see our secure tips page for Signal and PGP options.
Spotted an error? Email hello@aichatdaily.com with the URL and the issue, or read our full corrections policy.
