Data security platform Cyera is in advanced talks to acquire non-human identity management startup Oasis Security in a deal valued at approximately $1 billion, according to Globes reporting. If the transaction closes, it would rank among the largest cybersecurity acquisitions of the year and signal a decisive convergence between data security and the fast-growing discipline of machine identity protection.
The deal is not yet finalized, but negotiations are described as advanced. Both companies operate in adjacent corners of the enterprise security market — Cyera maps and classifies sensitive data across cloud environments, while Oasis focuses on securing the non-human identities (service accounts, API keys, machine tokens) that increasingly outnumber human users inside corporate infrastructure. Together, the combined platform would offer organizations a single pane of glass over both their data exposure and the automated identities that touch it.
Why Non-Human Identity Is Worth a Billion Dollars Right Now
The timing of this potential deal is not accidental. Non-human identities — the machine accounts, bots, and automated service credentials that proliferate inside modern cloud architectures — have become one of the most exploited attack surfaces in enterprise security. High-profile breaches in recent years repeatedly traced back to compromised service tokens or over-privileged API keys rather than stolen human passwords. Oasis built its platform specifically to discover, monitor, and govern these credentials at scale, a problem set that was niche two years ago and is now a boardroom priority.
Cyera, which has raised substantial venture backing and reached a multi-billion-dollar valuation in prior funding rounds, would gain an immediately deployable capability in the identity layer without having to build it from scratch. From a product architecture standpoint, the logic is tight: knowing where your sensitive data lives is only half the equation if you cannot also track which machine identities have access to it. Combining the two closes that gap in a way that neither company could match independently.
Consolidation Pressure Is Reshaping the Security Market
This potential acquisition reflects broader consolidation pressure across the cybersecurity landscape. Buyers — whether enterprise customers or acquiring companies — are increasingly fatigued by point solutions and willing to pay a premium for platforms that eliminate tool sprawl. A $1 billion price tag for Oasis, a relatively young startup, suggests that acquirers are pricing in not just current revenue but the strategic optionality that a mature non-human identity capability provides against a field of larger competitors including CyberArk and SailPoint.
The deal also arrives against a backdrop of surging investment in the sector. first half 2026, the fastest pace in years, with cybersecurity capturing a meaningful share of that capital. Oasis benefited from that wave, and a $1 billion exit would validate the thesis that identity security — particularly for machines — commands premium multiples in the current environment.
For a deeper look at the strategic rationale Cyera has publicly articulated around this deal, Future Wire’s earlier coverage of the machine identity protection angle breaks down the product and market context in detail. Neither Cyera nor Oasis has issued an official statement confirming the negotiations, and terms could still change before any announcement.
