Cyera Acquires Oasis Security: What It Means for the Cybersecurity Market

Cyera, the AI and data security platform, has completed its acquisition of Oasis Security, a non-human identity (NHI) and agentic access management vendor, in a deal valued at $1 billion. The companies signed a letter of intent on July 28, 2026, and confirmed the deal had closed on September 3, 2026. The move folds one of the more established NHI-focused vendors into a data security platform that has been expanding aggressively into identity and AI governance — and it's a signal of where the broader market for securing machine and agent identities is headed.

What happened?

Cyera and Oasis Security announced a letter of intent on July 28, 2026, with Cyera CEO Yotam Segev and Oasis CEO Danny Brickman each publishing posts framing the deal as a step toward what they're calling the "agentic enterprise" — an environment where autonomous AI agents operate at scale alongside human employees. Cyera confirmed the transaction had closed just over five weeks later, on September 3, 2026. The deal is valued at $1 billion. Neither company has disclosed whether the transaction was structured as cash, stock, or a combination of the two. The stated rationale centers on identity sprawl driven by AI. Cyera's announcement cites non-human identities inside Fortune 500 companies growing by nearly 500% over the prior six months, and frames NHIs as the fastest-growing identity type inside the enterprise — on pace to outnumber human identities. Cyera's pitch is that pairing its data visibility and classification capabilities with Oasis's identity inventory and governance capabilities closes a gap that neither data security nor identity tooling alone was built to handle: knowing not just what an agent can access, but why it should be trusted with that access in the first place.

What was acquired?

Oasis Security built its platform around discovering, governing, and securing non-human identities — service accounts, API keys, secrets, and now AI agents — across cloud, SaaS, and on-premises environments. Its capabilities span inventory (finding every NHI across IaaS, SaaS, PaaS, and on-prem systems), ownership mapping, lifecycle management from creation to deprovisioning, and what it calls Agentic Access Management, which is aimed specifically at understanding agent intent and enforcing time-bound access. The platform also handles threat detection for anomalous identity behavior and automated remediation, including secret rotation. Oasis's customer base skews toward large, regulated enterprises — the company has cited outcomes like preventing a potential HIPAA-related exposure, a 35% reduction in secret-rotation effort, and up to a 60% cut in attack surface during pilot deployments across sectors including healthcare, finance, logistics, insurance, and manufacturing. Cyera itself has built out a broader "AI Security Platform" positioned around what it calls 360 Data Intelligence: agentless data discovery and classification (its DSPM offering), access and DLP tooling, and a newer "Agent Guardian" capability for discovering and authorizing AI applications. Oasis slots directly into the identity gap in that stack.

What happens next?

This is the part buyers should pay closest attention to, and here the two companies have been fairly direct. The Oasis platform is being rebranded as Cyera Identity, positioned as the dedicated identity pillar of Cyera's broader platform, with a direct integration into Cyera's data intelligence layer. This is not a standalone-operation outcome — Oasis's product is being absorbed into Cyera's naming and architecture rather than continuing to operate under its own brand. On leadership, Cyera has named Amit Zimerman as CTO of Cyera Identity. Danny Brickman, Oasis's co-founder and CEO, has publicly committed to the team continuing its work, but neither company has specified his formal title or role within Cyera going forward. On continuity, both CEOs have been explicit in their messaging to customers. Brickman wrote that "the Oasis Platform continues" and that "nothing you depend on stops" — same team, same product roadmap, now backed by more resources. Segev's post echoes this, framing the acquisition as unifying data and identity into "a single platform to deliver the continuous trust system enterprises need," rather than a wind-down or forced migration. What's not yet answered: neither company has published specifics on pricing changes, contract terms for existing Oasis customers, or a timeline for deeper technical integration between the Oasis identity engine and Cyera's data layer. Those are reasonable questions for any current or prospective Oasis customer to ask directly in renewal or onboarding conversations.

How does the acquisition change the cybersecurity landscape?

This deal is best read as consolidation around a category that's still forming: non-human identity security, sometimes grouped under the broader "machine identity" or "NHI governance" umbrella. Oasis was one of the more visible independent vendors in that space, and its absorption into a larger, better-capitalized data security platform mirrors a pattern that's played out repeatedly in adjacent categories (CSPM into CNAPP, DSPM into broader data platforms) — a point-solution category matures, then gets bundled into a platform play. For Cyera, the acquisition is a direct extension into identity — a category it didn't previously own — and a bet that data security and identity security need to be sold and operated as one system, not two. That's a meaningful platform expansion move, and it puts Cyera in more direct competition with vendors that already combine data and identity governance, as well as with standalone identity security and PAM (privileged access management) vendors that are now facing a better-resourced, platform-level competitor in the NHI space specifically. For the broader market, this raises the bar for other point solutions in the NHI category. A vendor that was competing head-to-head with Oasis now effectively competes with Cyera's full platform, which changes the sales conversation from "identity tool vs. identity tool" to "identity tool vs. platform." That's a harder position for smaller, undifferentiated NHI vendors, and it's likely to accelerate further consolidation or fundraising pressure across the category.

What should security teams watch?

Security teams evaluating vendors in this space, or currently running Oasis, have a few practical things worth tracking as this integration plays out: whether the promised roadmap continuity actually holds once Cyera Identity is fully integrated into Cyera's architecture; whether pricing and packaging change once Oasis is sold as part of a bundled platform rather than standalone; how deep the technical integration between identity governance and data classification actually goes, versus remaining two products under one brand; and whether support and account teams stay consistent through the transition, since "same team" commitments from an acquired company don't always hold a year or two out. For teams currently evaluating NHI or agentic access management vendors more broadly, this is also a useful moment to reassess the competitive set — some vendors that looked comparable to Oasis six months ago are now competing against a combined platform with a different resource base and a different pitch.

The takeaway

Cyera's $1 billion acquisition of Oasis Security is a confirmed, completed deal that folds a well-regarded NHI vendor into a larger data security platform, rebranded as Cyera Identity. What's solid: the deal value, the completion date, the rebrand, and clear public commitments to product and team continuity for existing customers. What's still open: deal structure, the specifics of Brickman's ongoing role, and how pricing or contracts change for Oasis's existing base. Teams with a stake in either product, or evaluating vendors in the non-human identity space, should treat the reassurances at face value for now but ask direct questions about roadmap and contract terms before renewing or onboarding.

Sources

• Cyera Completes Acquisition of Oasis Security — Cyera press release, Sept 3, 2026
• One Platform to Secure the Agentic Enterprise — Yotam Segev, Cyera blog, Jul 28, 2026
• Building The Next-Generation AI Security Platform — Danny Brickman, Oasis Security blog, Jul 28, 2026
• Cyera platform pages (cyera.com/platform, cyera.com/about) and Oasis Security homepage (oasis.security) — product and company background