Public cyber platforms have spent 2026 buying identity. Palo Alto closed CyberArk. Okta tucked in Permiso. The private side just tried the same move — at a price that would have been a headline acquisition for a listed buyer.
On July 28, TechCrunch reported that Cyera signed a letter of intent to acquire Oasis Security for approximately $1 billion, mostly cash with the rest in Cyera shares. Ctech’s English edition put the cash portion around $700 million. Cyera had just raised $600 million at a $12 billion valuation and, per TechCrunch, has surpassed $150 million in ARR while remaining unprofitable. Total capital raised sits near $2.3 billion. Oasis, founded in 2022, has raised about $195 million from Accel, Craft, Cyberstarts, and others. The two companies share Accel and Cyberstarts.
Read that carefully. This is not a completed acquisition. It is an LOI. Dark Reading, covering the strategic logic in mid-August, said the companies expected to close in the then-current quarter. Until a definitive agreement and closing conditions print, the honest label is “proposed,” not “bought.” That distinction matters when you are allocating or advising. A $1 billion LOI moves category narrative. It does not move Oasis’s equity into Cyera’s entity.
The strategic story is still the interesting part. Cyera started as data security. Oasis sells lifecycle and security for non-human identities — service accounts, API keys, service principals, and now AI agents. The pitch after close is a unified identity-and-data control plane for agents: who the agent is, what data it can touch, what it is allowed to do. Dark Reading framed it against a wave of NHI deals (Cisco/Astrix, CrowdStrike/SGNL, Palo Alto/CyberArk). Cyera is attempting the same consolidation without a public ticker.
That is the provocation. Platformization is no longer only a public-company game. A private data-security unicorn is paying roughly five times Oasis’s disclosed funding to own the agent identity layer. If the LOI becomes a close, Cyera is telling CISOs that DSPM without NHI is incomplete once agents hold keys. If the LOI stalls, the $1 billion figure becomes a ceiling that other NHI startups will quote in their next raise — without Cyera actually owning the asset.
There is a valuation tension worth sitting with. Cyera at $12 billion on just over $150 million of ARR is already a rich private mark. Writing a mostly-cash $1 billion check for Oasis, after also buying Ryft and Genie Security, is a bet that ARR will compound into the thesis before public markets force a reset. TechCrunch noted Cyera is far from profitable. Buying growth with equity raised at a $12 billion mark is how private platforms keep looking like consolidators. It is also how they dig a hole if the AI-agent attach rate disappoints.
Compare the buyer set. Palo Alto paid public-company currency for CyberArk and folded privileged access into NGS ARR. Cyera is paying private currency for Oasis and folding agent identity into a data platform. Okta is still arguing the specialist case from the other side of the tape. Three different answers to the same question: who owns the identity of things that are not people?
Do not treat the LOI as closed. Do treat the price as a category signal. Non-human and agent identity is no longer a seed-stage curiosity when a $12 billion private company will put roughly a billion dollars of reported consideration on the table. Watch for the definitive agreement. Until then, the story is intent — and intent, in M&A, is cheap until the wire clears.