Cyera completes its Oasis Security acquisition

What happened?

Cyera, a data security company, completed its acquisition of Oasis Security. The deal was valued at $1 billion. The Oasis platform now operates as Cyera Identity.

Oasis built its name on non-human identity. Earlier this year it introduced Agentic Access Management, which carries into Cyera Identity.

What does the product do?

Cyera Identity sits between agents and the systems they reach. It evaluates access in real time, per action and per purpose.

Policy is deterministic. A team can block destructive actions, allow read-only ones and require escalation for writes in CRMs. Those rules give a clear model for what an agent may do.

Credentials are just-in-time and ephemeral. An identity is created for a task and decommissioned when the task ends. That is close to zero standing privilege.

The product also keeps a chain of custody from human to agent to actions. A prompt-level audit trail gives what the company calls regulator-ready evidence.

How does it score?

Cyera Identity scores 7.05 overall and shares fifth place with Astrix Security. Its strongest criterion is credentials, at nine out of ten. Delegation and runtime control both score eight.

The weak spot is standards. We found no named standards in the public material, so it scores three. Discovery of unregistered agents is not detailed, which holds discovery at five.

Why would a data security company buy an identity company?

Agents reach data through identities. A data security product that can see sensitive data but not who is reaching it has half the picture. Adding identity gives Cyera the other half.

For buyers, this may mean Cyera Identity is sold alongside data security posture tools. Ask how pricing works now. We found no public price.

What should buyers check?

Ask for a demo of escalation on a write to a CRM. See who receives the escalation and how they respond.

Ask which standards the product supports today. The public material we read named none. That does not mean there are none, but it is worth asking directly.

Ask how agents are found. Posture checks are described; discovery of agents nobody registered is not detailed.

How does it compare?

Against Aembit, Cyera Identity is weaker on standards and buying clarity, and stronger on ownership. See Cyera Identity vs Aembit.

Against NewCore, it trails on ownership, runtime control and discovery. See NewCore vs Cyera Identity.

Our read

Consolidation is the theme of 2026. Palo Alto Networks bought CyberArk. Cisco bought Astrix. SailPoint bought Entro. Now Cyera has Oasis.

For buyers, consolidation has a cost. Products inside larger suites often lose a clear price. Roadmaps bend toward the parent's priorities. It is worth asking each acquired vendor what will stay standalone.

See the full Cyera Identity profile.