Cyera to Buy Oasis Security for $1 Billion, Its Third Acquisition This Year

Cyera, a data security company recently valued at $12 billion, signed a letter of intent Tuesday to acquire Oasis Security for approximately $1 billion, according to TechCrunch. The deal is expected to be paid mostly in cash, with the remainder in Cyera shares.

Oasis Security, founded in 2022, builds software that tracks and secures "non-human identities" — mainly AI agents that now run loose across corporate networks doing tasks humans used to do. As companies deploy more of these autonomous agents, someone has to monitor what they're touching, what data they can see, and whether they've been hijacked. That's Oasis's business.

The company has raised about $195 million from investors including Accel, Craft Ventures, and Cyberstarts, according to TechCrunch. Notably, Cyera shares two of those same backers, Accel and Cyberstarts, a detail that shows how tightly connected the venture capital money behind this acquisition spree really is.

A Pattern, Not a One-Off

This isn't Cyera's first purchase this year. TechCrunch reports the company has also acquired Ryft, which was backed by Index Ventures, and Genie Security, a startup less than a year old. Three acquisitions in quick succession is aggressive by any startup's standard, let alone one that isn't yet turning a profit.

Cyera surpassed $150 million in annual recurring revenue last month, per TechCrunch's earlier reporting, which sounds impressive until you remember the company has raised roughly $2.3 billion in total funding and just raised another $600 million at that $12 billion valuation. Revenue is real. Profitability is not. Spending nine figures to acquire a company while burning cash is a bet that market share now matters more than margins later.

Why AI Agents Are the New Attack Surface

The logic behind the deal is straightforward. As companies hand more work to AI agents, autonomous software that can log into systems, move data, and make decisions without a human clicking approve, the attack surface for hackers grows. An AI agent with broad permissions and no oversight is a gift to anyone trying to break into a corporate network.

Oasis's pitch is that somebody needs to police these agents the same way IT departments police human employees: verify identity, limit access, watch for weird behavior. Cyera plans to integrate Oasis's technology into what it calls a unified identity and data security platform, combining data protection with agent oversight in one product instead of forcing enterprises to buy separate tools from separate vendors.

That consolidation pitch is common in cybersecurity right now. Big platforms are buying up point solutions because enterprise customers are tired of managing a dozen security vendors. Whether Cyera can actually integrate Oasis's technology cleanly, rather than just bolting it on, is the real test. Plenty of acquisitions in this space have ended up as shelved product lines rather than seamless platforms.

What's Actually Unproven Here

This is a letter of intent, not a closed transaction. Letters of intent can and do fall apart before closing, particularly on valuation or integration terms. TechCrunch's report does not indicate this deal has cleared any regulatory or antitrust review, and no closing date has been announced.

The question of whether a $12 billion valuation for a five-year-old, unprofitable company reflects genuine enterprise demand or another round of AI-adjacent hype inflating private valuations deserves scrutiny. Cybersecurity has real demand behind it, unlike some AI ventures riding pure speculation, but $2.3 billion raised against $150 million in revenue is a steep multiple that assumes years of future growth investors haven't yet seen proven out.

What Happens Next

If the deal closes as described, Cyera will have absorbed three companies in under a year while still not profitable, a strategy that works only if the combined platform actually lands more enterprise contracts than the pieces did separately. Oasis's technology will need to be folded into Cyera's existing stack, a process that has derailed plenty of past cybersecurity roll-ups. Watch for whether Cyera discloses actual integration timelines or customer wins tied to the Oasis technology in the months following the close, since that's the evidence that would separate a real strategic bet from an expensive land grab.