The acquisition of Oasis Security by Cyera for approximately $1 billion marks the first major M&A transaction to explicitly price agent identity as a billion-dollar security category. The deal, signed via a letter of intent on July 28, 2026, involves a mix of cash and stock, with roughly $700 million in cash. The $1 billion price reflects what enterprise security budgets are already prioritizing: the governance layer for non-human identities, which legacy perimeter defenses were not built to handle.
Oasis Security, founded in 2022 by Danny Brickman and Amit Zimerman, specializes in non-human identity (NHI) and agentic access management. The company provides discovery and governance for service accounts, API keys, tokens, and AI agents across IaaS, SaaS, PaaS, and on-premise environments. By securing the credentials that allow AI agents to operate, Oasis addresses a critical vulnerability in the modern stack. The company had previously raised $195 million, including a $120 million Series B round in November 2025 led by Craft Ventures, with participation from Sequoia, Accel, and Cyberstarts.
The market for this technology is driven by a significant governance gap. According to Cloud Security Alliance (CSA) data, non-human identities now outnumber human identities by a ratio of 45:1 in the average enterprise, a figure that climbs to 144:1 in cloud-native environments. Despite this proliferation, only 15% of CISOs report high confidence in their ability to prevent attacks targeting these identities. Furthermore, only 8% of security leaders express high confidence that legacy identity and access management (IAM) systems are capable of managing the risks introduced by AI and NHIs. This data highlights the disconnect between current security infrastructure and the reality of modern, agent-driven workflows.
Cyera is executing an aggressive consolidation strategy, with Oasis representing its sixth acquisition. Since 2024, the company has spent approximately $1.3 billion in roughly three months on a series of acquisitions, including Trail Security for $162 million, Ryft for an estimated $100-130 million, and Genie Security for approximately $50 million, alongside undisclosed deals for Otterize and Shape AI. The expansion follows a $600 million Series G round in June 2026 that valued Cyera at $12 billion.
Yotam Segev, Cyera’s co-founder and CEO, wrote that the combined platform will decide “what every human, machine, and agent can see and do” — a direct claim about the scope of the governance layer the company is building. Danny Brickman, co-founder and CEO of Oasis, stated that his team recognized early on that non-human identities would become a primary security challenge of the AI era. While Cyera has focused on redefining data security, Oasis has concentrated on redefining identity security for the same period.
This acquisition intersects with several ongoing security trends previously identified in our coverage. The NHI governance gap, detailed in post 127997, remains the fastest-growing attack surface without a dedicated governance layer. This is further complicated by the dynamics of the Nvidia Open Secure AI Alliance, which includes 37 members building defensive tools, though notably missing four frontier labs, as discussed in post 128401. Additionally, the issue of vulnerability inflation, where AI-discovered CVEs are doubling year over year, is directly contributing to the identity sprawl that Oasis aims to manage, as noted in post 128431.
The $1 billion price tag for Oasis Security serves as a concrete market observation regarding the cost of securing the agentic layer. It confirms that the industry is no longer treating NHI governance as a secondary concern or a feature of existing IAM platforms. Instead, the deal prices the necessity of a dedicated, specialized layer to manage the proliferation of machine-to-machine and agent-to-data interactions. As enterprises continue to deploy AI agents, the ability to govern these identities has become a prerequisite for operational security, effectively establishing agent identity as a standalone, high-value category in the security market.