Cyera agreed to acquire Oasis Security for $1 billion, combining identity management with data security to create a unified platform governing what AI agents can see and do. The Wall Street Journal reported the deal on July 29, with closing expected later this year.
The acquisition targets a specific problem: as companies deploy autonomous AI agents to handle critical workflows, those agents inherit the same data-access risks as human employees, but at machine speed and scale. A misconfigured agent can expose sensitive records or disrupt operations before anyone notices.
What each company brings to the deal
Oasis Security built an access management platform designed for what the industry calls "agentic enterprises," organizations where AI agents autonomously execute business processes. Cyera's existing platform maps what data exists across an organization, classifies its sensitivity, and tracks who authorized access to it.
"Every identity, human, machine or agent, is a point of exposure, which is why every identity has to be tracked, understood and controlled," Cyera co-founder and CEO Yotam Segev said in a company blog post. "We're building a new model, one that unifies data and identity into a single system, so every agent is trusted with exactly the data it should reach."
Oasis Security co-founder and CEO Danny Brickman framed the deal around preventing autonomous systems from making costly mistakes. "Our joint vision goes beyond keeping an agent away from the wrong data," Brickman said. "We want enterprises to automate their most critical work without letting a single wrong decision interrupt the business."
Cyera's rapid valuation climb
The acquisition comes after Cyera's valuation jumped sharply over the past year. In January, the company raised $400 million at a $9 billion valuation. Six months later, in June, it raised another $600 million at a $12 billion valuation. That $1 billion total raised in 2026 alone signals strong investor appetite for data security infrastructure.
The funding trajectory reflects broader market interest in tools that govern AI systems. As enterprises scale production deployments of AI agents, investors see near-term demand for platforms managing compute constraints, governing sensitive data, and applying AI directly to revenue-generating workflows.
The agentic security gap
Traditional identity and access management systems were built for human users logging in with credentials and requesting resources. AI agents operate differently. They run continuously, make decisions without human approval, and often need access to data across multiple systems to complete a single task.
This creates what Oasis calls "a new kind of risk." An agent authorized to process customer refunds might, through a poorly defined permission scope, also gain read access to payment credentials. The agent itself is not malicious. Its access simply was not constrained to match its intended function.
Related identity and access security threat impacting enterprise authentication
The combined Cyera-Oasis platform aims to solve this by linking identity controls directly to data classification. Instead of managing agent permissions in isolation, security teams would see a unified view: this agent has this identity, authorized by this person, with access to these specific data categories.
Logicity's Take
This deal signals that identity and data security are converging into a single discipline for AI-native organizations. For fintech teams evaluating security vendors, the question shifts from "who manages our identities" and "who classifies our data" to "who does both, because we cannot govern agents without linking the two." Competitors like CrowdStrike, Palo Alto Networks, and Microsoft Security will likely face pressure to show similar integration stories, or find themselves selling only half a solution.
What the deal does not answer
Neither company disclosed integration timelines, pricing changes, or whether existing Oasis Security customers will migrate to a combined platform. The $1 billion price represents roughly 8% of Cyera's current valuation, a significant but not dilutive bet.
Financial services firms, which face strict regulatory requirements around data access and would benefit most from agent guardrails, will want to know whether the combined product meets existing compliance frameworks or requires new certification cycles.
Need Help Implementing This?
If your team is evaluating AI agent security or identity management platforms, Logicity can help you map requirements and compare vendors. Contact us for a consultation.
Source: PYMNTS | / PYMNTS
Huma Shazia
Senior AI & Tech Writer
Produced with AI assistance and reviewed by the Logicity editorial team. Learn more in our Editorial Policy.
