Cyera in Advanced Talks to Acquire Oasis Security for ~$1B

Cyera, the data security posture management (DSPM) vendor that recently raised $600M at a $12B valuation (roughly $2.3B raised to date), is reportedly in advanced negotiations to acquire fellow Israeli firm Oasis Security in a deal that could exceed $1B. Per Globes — corroborated by Calcalist/Ctech and Ynetnews — the transaction would be structured as a minority in cash (~30%) with the remainder in Cyera stock.

The read for DSPM buyers: Oasis is a non-human identity (NHI) management platform that raised $120M in March 2026. Acquiring it would extend Cyera beyond data discovery and posture toward governing who and what can touch that data — a direct play at the AI-agent identity problem, where service accounts, tokens, and autonomous agents increasingly dwarf human identities in count and blast radius.

This continues Cyera’s platform-consolidation pattern seen in its Trail and Genie acquisitions, and it pressures the DSPM-vs-identity boundary that most enterprises still procure and operate as separate stacks. If it closes, expect the combined pitch to be “understand the data, then govern every identity — human and machine — that reaches it.”

Caveats matter here. This is a reported, unclosed deal described as “advanced talks”: terms and even completion are unconfirmed. It is also fundamentally an identity acquisition rather than a pure DLP/DSPM asset, so treat it as a signal of platform direction — the collapsing seam between data posture and identity governance — rather than a done deal. Practitioners evaluating DSPM roadmaps should note the trajectory regardless of whether this specific transaction lands.