Cybersecurity giant Cyera makes a bold move in the latest consolidation trend, announcing plans to acquire Oasis Security for approximately $1 billion. The deal aims to converge data security and identity into a single control plane for agents, addressing the growing concern of non-human identities (NHI) and AI agent management.
The acquisition is part of a broader industry shift towards acknowledging that traditional privilege access management (PAM) and identity access management (IAM) methods are no longer sufficient in an era where machines and software automate business processes. According to Jason Clark, Cyera’s chief strategy officer, “data and identity are two sides of the same coin,” and current legacy systems are fragmented and outdated.
Oasis Security specializes in managing non-human identities and AI agents, including service accounts, API keys, and other machine identities. By combining its expertise with Cyera’s data security platform, the merged company will redefine privileged access management around business context rather than static roles. This means that instead of relying on job titles or roles to determine an agent’s level of access, the new system will assess an agent’s actual intent and the sensitivity of the data it interacts with.
The integration is crucial because agents use 100% of their permissions, whereas humans typically only use a small fraction of theirs. This means that without proper management, agents can pose significant security risks. Danny Brickman, co-founder and CEO of Oasis Security, emphasizes that “agents are not humans” and therefore cannot be managed using traditional IAM/PAM methods. They operate differently, are greedy for access, and don’t have job titles or roles.
The combined company will focus on developing a five-stage model for managing NHI and AI agents: data discovery, identity data, authorization based on intent versus action, enforcement in real-time, and human oversight through audit/forensics. This approach aims to provide fine-grained control over agent access and prevent unauthorized actions.
While the acquisition is still pending, it’s clear that Cyera and Oasis are poised to revolutionize how organizations manage their NHI and AI agents. As Clark notes, “identity is the most important control” – and with this deal, they’re taking a significant step towards ensuring that sensitive data remains protected in an increasingly agent-driven world.
As a result of this acquisition, organizations should take note of the need to rethink their privilege access management strategies. With the rise of agents, traditional methods are no longer sufficient. It’s essential for companies to assess their current systems and consider implementing more advanced, context-aware solutions that can effectively manage NHI and AI agent access. By doing so, they can mitigate potential security risks and ensure the integrity of their sensitive data.
Source: Dark Reading — 2026-08-14