Oasis Security, the non-human identity security company founded in 2022, has signed a letter of intent to be acquired by data security firm Cyera, with the deal now moving towards completion.
The two companies plan to combine identity and data security into a single next-generation platform, designed to let enterprises deploy AI agents across critical systems while retaining oversight of what those agents can access and do.
The rationale is that AI adoption, regardless of where agents originate, always passes through two control points: access and data. Cyera specialises in the latter, while Oasis has built its business around the former.
The companies argue that the traditional identity model, designed for human users with slowly changing standing permissions, cannot cope with autonomous agents that appear in seconds, act independently and disappear within an hour.
An agent holding valid credentials can leak sensitive information or halt operations through one flawed decision, without any attacker involved. Gartner forecasts that a typical global Fortune 500 business will run more than 150,000 agents by 2028, compared with fewer than 15 in 2025.
Oasis Security was established in 2022 by co-founders including Amit, on the belief that non-human identities represented the most dangerous unmanaged exposure in enterprise security.
Over three years, the company shifted large enterprises away from static permissions towards continuous, policy-driven control over which workloads and agents receive access, in what context and for how long.
Following the acquisition, the Oasis Platform will continue operating, the existing team will remain focused on non-human identity and agentic access, and the product roadmap will carry on with additional resources. The companies say the change for customers will be faster development and richer business context behind every access decision.
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
