Cyera Buys Oasis Security For $1B As AI Agents Create New Identity Risks

Cyera is buying Oasis Security for about $1 billion, a deal that says a lot about where enterprise cybersecurity is moving. The target is not an ordinary security startup. Oasis focuses on non-human identities, the machine accounts, API keys, service accounts and agent credentials that increasingly sit behind modern software systems.

TechCrunch reported that Cyera has signed a letter of intent to acquire Oasis in a deal expected to be paid mostly in cash, with the rest in shares. Cyera recently raised $600 million at a $12 billion valuation, so the acquisition is also a sign that well-funded security companies are moving quickly to consolidate the parts of the market they think AI will make more important.

The AI angle is straightforward. As companies deploy more AI agents, more software will act on behalf of humans. Those agents will need access to apps, databases, documents, cloud accounts and internal workflows. That access will usually be controlled through credentials and permissions. If those identities are poorly managed, an AI agent can become a new route into sensitive systems.

This is why non-human identity has moved from a backend security topic to a boardroom problem. Human users already create enough risk through weak passwords, phishing and over-permissioned accounts. AI agents add another layer because they can operate continuously, chain tasks together and interact with multiple systems. A compromised agent identity could move faster than a normal employee account and touch more data.

TechBooky’s recent piece on Microsoft’s MAI-Cyber-1-Flash security model looked at the defensive side of this shift. Microsoft is building specialised AI models to find and fix vulnerabilities. Cyera’s Oasis deal points to the identity side. Securing AI agents will require both: smarter defensive systems and tighter control over what agents are allowed to access.

The timing also connects to the OpenAI rogue-agent incident. That case involved publicly available credentials and an AI system that reached services outside its intended testing path. Enterprises looking at that story will ask a simple question. If an agent inside our company gets access to the wrong credential, how far can it go before someone notices?

Cyera already sells data security tools, so Oasis gives it a way to link sensitive data discovery with identity and access controls. That combination matters because knowing where data sits is only half the job. Companies also need to know which humans, machines and agents can reach it. In the AI era, that access map is going to get more complicated very quickly.

The deal is expensive, but the logic is clear. AI agents are turning identity into one of the most important security layers in enterprise technology. Cyera is paying now because it expects that layer to become much more valuable.