Data security startup Cyera, founded in 2021, agrees to acquire Oasis Security, which was founded in 2022 and provides non-human identity security, for $1B
Context & Ripple Effects
Cyera had already expanded beyond its core data-security footing with its 2024 purchase of data-loss startup Trail Security. The company’s subsequent financing at a $12B valuation gave that expansion strategy a far larger capital base.
Oasis had recently raised $120M to secure non-human identities, including AI bots and automated work tools. Bringing that capability into Cyera connects data protection with a fast-growing category of machine-operated access.
First-order effects
- Cyera adds Oasis’s non-human identity security product and team, extending its security portfolio into controls for AI bots and automated tools.
- Oasis moves from a standalone vendor into Cyera’s platform, while its customers and partners face product, support, and go-to-market integration with the acquirer.
Second-order effects
- Data-security vendors will face stronger pressure to show how they protect both sensitive data and the automated identities that can access it, rather than treating those as separate products.
- Identity-security specialists may become more attractive partners or acquisition targets as larger security platforms seek coverage for non-human access.
Third-order effects
- If similar combinations continue, enterprise security buying could consolidate around platforms that join data discovery, data-loss controls, and identity governance for automated workloads.
- The transaction points toward non-human identity becoming a standard security control plane as AI bots and automation are embedded more broadly in enterprise operations, though product integration will determine whether platforms can deliver that promise.
The trend: Cybersecurity platforms are converging data protection and identity controls around the expanding use of AI agents and other non-human identities.