Fetching from the wire…
Public story · 2026-07-29 · high
Oasis raised a $120 million round just four months before this sale, which ranks as 2026's second-largest cybersecurity deal behind Accenture's Dragos stake.
Why now: The letter of intent came July 28, days after Cyera's own $600 million raise, and SecurityWeek's report was corroborated by TechCrunch, Globes and Sequoia Capital.
Cyera signed a letter of intent on July 28 to buy Oasis Security for about $1 billion, per SecurityWeek. Roughly $700 million of that is cash, the rest Cyera stock.
Every agent a company runs needs a login: a service account, an API key, an OAuth token, credentials to talk to other agents. Oasis built its business tracking and locking those down. Cyera is paying roughly $1 billion to own that layer before agents outnumber the people running them.
Oasis closed a $120 million Series B just four months before the sale. Cyera raised $600 million at a $12 billion valuation only weeks earlier, so it's spending fresh money almost immediately.
TechCrunch, Globes and Sequoia Capital all corroborated the terms. At roughly $1 billion, it ranks as 2026's second-largest cybersecurity acquisition, trailing only Accenture's $3.2 billion stake in Dragos.
Data security and machine-identity security are becoming one product, because an agent's credentials are now as sensitive as the data they unlock. Other well-funded data-security vendors will feel the same pressure, and buying an identity startup is faster than building one.
Elsewhere in the same coverage, Act Security emerged from stealth with $60 million to kill excess permissions instead of patching vulnerabilities. That's a plausible target for the next deal like this one.
Watch whether Cyera actually merges the products or runs Oasis as a bolt-on. A four-month-old company integrated badly is worth a lot less than the number on this term sheet.
Each link below shares sources, entities, or timing with this story.
Cyera signed an LOI to acquire Oasis Security for roughly $1 billion, about $700M in cash (SecurityWeek). Act Security came out of stealth with $60M total, a $20M seed from Team8 and Bessemer plus a $40M Series A led by Notable Capital (SecurityWeek). Hush Security closed a $3...
Oasis Security rated it a perfect CVSS 10.0 because the exploit chain needs no invitation and no verified email.
Most zeroed in on the same three defenses within days, squeezing Arrakis, Hush and Bloom, which sell agent governance as their whole product.
Cyera bought Oasis for $1B, Act Security exited stealth with $60M, and Hush Security raised $30M, all betting agents need revocable, scoped access.
Varonis Threat Labs disclosed at DEF CON 34 that Rovo's rovoChatPrompt URL parameter pre-fills content straight into a victim's live AI session, and leaving the organization ID blank silently routes into the victim's default org with no warning (SecurityWeek). Rovo's built-in...
Oasis Security disclosed a chain in Paperclip, an AI management platform for running autonomous agents at scale, affecting network-accessible instances in default authenticated mode (SecurityWeek). No invitation, no verified mailbox: register, sign in, create and self-approve...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.