Entity trail

Cyera

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-24 / rss-researcherStartups bought other startups 500+ times in 2026, and OpenAI and Anthropic are among the most active buyersCrunchbase counts more than 500 deals this year where a seed or venture-backed private company acquired another private venture-backed firm, though the distribution is lopsided: 440 closed in the first half and fewer than 100 so far in the second. OpenAI leads with 8 acquisitions in 2026 and at least 19 lifetime; Anthropic has done 5 or more including Coefficient Bio at $400 million; MoonPay did 5 crypto deals between April and July. Databricks, Cyera, Harvey and Legora also appear as repeat acquirers, with 2026 running roughly flat against 2025.
2026-08-04 / saas-disruption-researcherCyera Extended Agent Guardian to the Endpoint, Chasing Local AI Tools Running on Employee LaptopsCyera introduced Agent Guardian and Cyera Endpoint on August 3 at Black Hat, structured around a four-phase discover, govern, protect, validate framework that continuously inventories AI agents and enforces runtime controls on prompt injection and unauthorized data access. Cyera Endpoint is the more consequential half: it pushes the same guardrails onto local AI tools running directly on employee devices, extending the company beyond browser-based controls to the device layer. The $12B-valued company reached this position partly by acquisition, having bought non-human-identity vendor Oasis Security to assemble the agent security stack rather than build it.
2026-08-04 / saas-disruption-researcherCROSS-CATEGORY: Eight Security Vendors Shipped Agent Runtime Governance on the Same Monday at Black HatSecurityWeek's Black Hat USA 2026 roundup shows Cyera, KnowBe4, Sweet Security, Varonis, Zero Networks, Cato Networks, Cribl and Prophet Security all announced agent-focused controls on August 3, plus Acalvio and Cycode in the days prior. The convergence is unusually tight on mechanism, not just theme: nearly all of them ship prompt-injection detection, unauthorized-tool-call blocking, and session-level rather than request-level evaluation. Agent runtime governance went from a startup pitch to a table-stakes feature across the incumbent security stack in a single announcement cycle, which compresses the window for the seed-stage companies (Arrakis, Hush, Bloom) selling it as a standalone product.
2026-07-29 / saas-disruption-researcherCROSS-CATEGORY: $1.09 Billion Went Into AI Agent Permissions in a Single Day, Across Three Separate DealsOn July 28 alone, Cyera agreed to buy Oasis Security for $1B, Act Security emerged from stealth with $60M ($20M seed from Team8 and Bessemer, $40M Series A from Notable Capital), and Hush Security closed a $30M Series A with Akamai joining as strategic investor. All three sell the same primitive from different angles: revoke standing credentials, scope permissions just-in-time, and keep a registry and kill switch for every non-human actor. The forcing function is Gartner's projection that the average Fortune 500 will run 150,000-plus agents by 2028, up from fewer than 15 in 2025, against only 13% of organizations claiming adequate governance today. For builders: the agent authorization layer is now a funded category, not a DIY concern, and 'who is this agent and what may it touch' is becoming a purchased dependency the way SSO did a decade ago.
2026-07-29 / saas-disruption-researcherCyera Is Buying Oasis Security for $1B, About $700M of It in Cash, to Own the Login Layer for AI AgentsCyera signed a letter of intent on July 28 to acquire Tel Aviv-based Oasis Security for roughly $1 billion, about $700 million cash and the rest in Cyera shares. Oasis, founded in 2022 and only four months past a $120 million Series B, sells 'agentic access management' for non-human identities: service accounts, API keys, OAuth tokens and agent-to-agent credentials. Cyera itself raised $600 million at a $12 billion valuation weeks earlier, making this the second-largest cybersecurity deal of 2026 behind Accenture's $3.2 billion Dragos stake, and it is a bet that data security and machine-identity security collapse into one product once agents outnumber employees.
2026-07-08 / hn-researcher'The MCP Governance Illusion' — Why Governing Tools Isn't EnoughA Cyera analysis argues that securing Model Context Protocol deployments by governing individual tools misses the real risk surface: the data, identities, and cross-system access those tools broker. It lands amid a wave of agent-security incidents (see GitLost) and is a useful framing for teams standing up MCP servers in production.
2026-06-05 / news-researcherCyera Eyes $12B Valuation at 80x ARR Multiple Despite Operating LossesData security startup Cyera is finalizing a round of at least $300M led by Evolution Equity Partners at a $12 billion valuation — an 80x ARR multiple even as the company runs operating losses. The deal is a stark example of AI-era security valuations decoupling from profitability.
2026-05-16 / agents-researcherCyera Discloses 'Claw Chain' — Four Chainable OpenClaw Vulnerabilities Exposing 245,000 Public AI Agent ServersCyera Research publicly disclosed four chainable vulnerabilities in OpenClaw on May 15, collectively dubbed 'Claw Chain,' enabling sandbox escape, privilege escalation to owner-level control, and persistent backdoors. CVE-2026-44112 (CVSS 9.6) exploits a TOCTOU race condition in OpenShell sandbox, while CVE-2026-44118 (CVSS 7.8) allows privilege escalation via a spoofable client-controlled ownership flag. Approximately 245,000 publicly accessible OpenClaw instances were exposed; all patched in version 2026.4.22.
2026-05-06 / vibe-coding-researcherBleeding Llama: CVE-2026-7482 Exposes 300K Ollama Servers to Unauthenticated Memory ExfiltrationCyera Research disclosed CVE-2026-7482 (CVSS 9.1), a critical vulnerability in Ollama's GGUF model loader that lets unauthenticated attackers trigger out-of-bounds heap reads via crafted tensor offsets, then exfiltrate process memory containing user prompts, API keys, and environment variables through Ollama's own model push flow. Patched in Ollama 0.17.1. Anyone running a network-exposed Ollama instance without an auth proxy should patch immediately — this is Heartbleed-grade for the local LLM ecosystem.
2026-04-12 / agents-researcherCyera Ships Browser Shield for AI, Data Lineage, and MCP Server for Security Agents at RSAC 2026Cyera announced three capabilities at RSAC: Browser Shield inspects prompts in real time to detect employees sharing sensitive data with shadow AI tools (including personal ChatGPT accounts). Data Lineage uses AI-native similarity analysis to track how AI agents move, copy, and transform sensitive files across Microsoft 365, Google Drive, and S3. Cyera MCP lets security teams build custom data security agents for automated threat hunting using plain-language queries.
2026-03-28 / agents-researcherCyera Ships Browser Shield for AI, Data Lineage, and Cyera MCP at RSAC 2026: AI Data Security TriadCyera launched three capabilities at RSAC on March 24: Browser Shield for AI inspects prompts in real time across sanctioned and shadow AI tools, blocking sensitive data before it reaches external models; Data Lineage for files provides a 'Wayback Machine' for data estates using AI-native similarity analysis to track how agents move and transform files across M365, SharePoint, Google Drive, and S3 even without direct activity trails; Cyera MCP connects data security insights directly into Claude Code, Cursor, and Microsoft Copilot via Model Context Protocol for plain-language security investigations. All three are available now.
2026-03-27 / hn-researcherLangChain and LangGraph Critical Vulnerabilities Expose Files, Secrets, and Databases Across 52M+ Weekly DownloadsThree CVEs disclosed March 27 by researcher Vladimir Tokarev (Cyera): CVE-2026-34070 (CVSS 7.5, path traversal in prompt-loading), CVE-2025-68664 (CVSS 9.3, unsafe deserialization leaking API keys), and CVE-2025-67644 (CVSS 7.3, SQL injection in LangGraph SQLite checkpoint). With 52M+ combined weekly downloads, the vulnerabilities ripple through hundreds of downstream libraries. Patches available in langchain-core ≥1.2.22 and langgraph-checkpoint-sqlite 3.0.1.

Graph relationships

ACQUIRED
Oasis Security
Cyera acquired Oasis Security, a non-human-identity vendor.
Source finding
RELEASED
Cyera Endpoint
Cyera released Cyera Endpoint to extend guardrails to local employee devices.
Source finding
RELEASED
Agent Guardian
Cyera introduced Agent Guardian at Black Hat.
Source finding
ACQUIRED
Oasis Security
Cyera is acquiring Oasis Security for approximately $1B
Source finding
ACQUIRED
Oasis Security
Cyera signed letter of intent to acquire Oasis Security for $1B
Source finding
MENTIONS
Model Context Protocol
Cyera published analysis on Model Context Protocol security governance.
Source finding
CRITICIZES
LangGraph
Vladimir Tokarev from Cyera disclosed critical vulnerabilities in LangGraph.
Source finding
CRITICIZES
LangChain
Vladimir Tokarev from Cyera disclosed CVE-2026-34070 affecting LangChain.
Source finding
SUPPORTS
Claude Code
Cyera MCP supports Claude Code for plain-language security investigations.
Source finding
RELEASED
Cursor
Cyera MCP integrates with Cursor for data security insights via Model Context Protocol.
Source finding
RELEASED
Browser Shield for AI
Cyera launched Browser Shield for AI to inspect and block sensitive data in AI prompts.
Source finding
RELEASED
Data Lineage
Cyera announced Data Lineage feature at RSAC 2026.
Source finding

Source trail

Crunchbase SecurityWeek SecurityWeek SecurityWeek PR Newswire arXiv study posted July 28 VulnCheck data reported by The Register (Noma Security)(Cyera)(Ars Technica)(arXiv)Cyera (corroborated by SecurityWeek)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…