Cyera Acquires Oasis for $1B: The Agent-Security Landgrab
Cyera's $1 billion purchase of Oasis targets the fastest-growing security problem — non-human identities and agent sprawl — as budgets pivot toward machines.
Cyera acquired Oasis for $1 billion in August 2026 — the year’s loudest signal yet that non-human identities are the security market’s next battleground. Oasis brings automated identity-entitlement management for machine identities; Cyera brings the data-security platform layer. Together they’re building the control plane for an enterprise in which agents outnumber people.
Key facts
- The deal: Cyera-Oasis, $1B acquisition, announced August 2026.
- The problem space: managing agent sprawl and non-human identities (NHIs) — service accounts, API keys, agent identities, and their permissions.
- Why it matters now: agents increasingly carry production credentials; every escaped-agent incident (OpenAI’s disclosures this year) runs on compromised or over-permissioned machine identities.
- Market signal: this is the first nine-figure anchor deal in the NHI category — expect follow-on consolidations within quarters.
- The trend behind it: security budgets are pivoting from human-user identity (IAM) to machine-identity governance.
Why it matters
- Agents changed the identity model. When software has agency — and credentials — identity security becomes about machines: what they can access, who granted it, and whether it’s still needed.
- The $1B price anchors the category. Valuations for NHI/agent-security startups just got a reference point; enterprises get a “which vendor will survive” signal.
- It’s the enforcement side of permission debates. The Warner agent-disclosure bill and enterprise YOLO-mode sandboxes (Docker, this week) are the rules — Cyera+Oasis is the enforcement layer.
What to watch
- Integration speed — whether Oasis becomes a standalone suite or folds into Cyera’s DSPM roadmaps.
- Competitor reactions — CrowdStrike, Palo Alto, and Microsoft all hold NHI ambitions; expect counter-moves.
- The agent-identity attack surface by year-end — if the acquisition is the market’s big bet, the incident reports will tell us if it’s the right bet.
Official source
Updated August 10, 2026.
#Security
#Agents
#Acquisitions
#Enterprise