Oasis Joins Cyera to Combine Data Security and Non-Human Identity Protection

Oasis Joins Cyera to Combine Data Security and Non-Human Identity Protection Sequoia Capital announced that non-human identity security startup Oasis is joining data security company Cyera, uniting data tracking with agentic access management to address AI security risks. Oasis is merging with Cyera, combining two Sequoia-backed cybersecurity startups founded by Israeli IDF Talpiot alumni. Oasis focuses on managing non-human identities such as API keys, service accounts, and agent credentials, while Cyera locates and protects sensitive enterprise data. The combined platform targets agentic AI workflows by securing both the data at risk and the identities accessing it. The acquisition integrates Oasis's technology into Cyera's established enterprise go-to-market engine. Complementary Technical Approaches to AI Security Oasis was founded by Danny Brickman and Amit Zimerman to address agentic access management, securing machine identities—such as API keys, OAuth tokens, and agent-to-agent credentials—that have surged with enterprise AI adoption. Meanwhile, Cyera, founded by Yotam Segev, Tamar Bar-Ilan, and Yonatan Itai, focuses on identifying where sensitive data lives and evaluating exposure risks. Pairing Oasis's identity security with Cyera's data tracking creates an integrated platform capable of monitoring the full path an AI agent takes across enterprise environments. Commercial Scale and Shared Origins The transaction leverages Cyera's rapid-scale enterprise go-to-market engine to accelerate distribution of Oasis's technology, aiming to establish an early standard platform spanning data, identity, and AI agents. Both founding teams trace their backgrounds to the IDF's Talpiot leadership program, reflecting a shared foundation among Israeli cybersecurity founders independently backed by Sequoia since their Series A rounds.

红杉资本投资企业Oasis加入Cyera，联手打造AI时代完整安全防护平台 红杉资本宣布旗下两家从A轮便支持的以色列网络安全企业走向联合，非人类身份安全公司Oasis Security正式加入数据安全公司Cyera，旨在应对AI智能体激增带来的全新安全挑战。 Oasis Security加入Cyera，两家公司的创始团队均出自以色列国防军Talpiot领袖培养项目，且均在A轮获得红杉资本支持。 Oasis专注于管理和保护AI Agent产生的API密钥、服务账户等非人类身份与凭证，Cyera则专注于厘清敏感数据的存放位置与潜在风险。 两家产品实现能力互补，覆盖AI Agent在企业环境中触达数据到身份凭据的完整路径，并依托Cyera的GTM渠道加速落地。 技术互补：贯通数据安全与机器身份管理 随着AI智能体的普及，企业内部由机器创建或使用的非人类身份（如API密钥、服务账户、OAuth令牌等）大幅超越人类身份，成为安全防护的核心。Cyera专注于查明敏感数据分布、访问权限及实际风险；Oasis则负责识别接触数据的具体机器凭据并监控其行为规范。二者结合如同为企业金库同时配齐内容物盘点与出入者审查，完整覆盖了AI Agent在企业系统内的运行路径。 商业协同：借助成熟渠道抢占AI安全标准 在商业层面，Cyera已建立起大规模的企业级市场拓展（GTM）团队。此次合并使Oasis的产品能够直接接入Cyera成熟的销售网络，加速进入大型企业客户。红杉资本认为，率先构建出涵盖数据、身份和智能体的一体化AI安全平台的团队，将有机会成为AI Agent时代企业的默认安全标准，合并使得双方兼具产品完整度与落地速度。

In 2021, before Oasis Security was even founded, I sat down with co-founder Danny Brickman and came away thinking he had something familiar. He showed the same drive we’d seen in the founders of two other Sequoia companies, Wiz and Cyera, whose founders, like Danny, had come up through Talpiot, the leadership program of the IDF. I wrote about that meeting a couple of years later in my investment memo, when we backed Oasis Security, at the Series A. I didn’t realize at the time how literally connected that comparison would turn out to be. Today, Oasis is joining Cyera — and it turns out the founders’ stories make the case for this combination almost as well as the technology does. Three years ago, the pitch for Oasis was simple: enterprises were about to have far more machine identities than human ones, and almost nobody had a real way to manage or secure them. That was true then. It’s far more true now. Every AI agent creates or uses non-human identities — API keys, service accounts, OAuth tokens, agent-to-agent credentials — that act with real permissions and real blast radius, and that don’t behave anything like the human identities the last generation of identity tooling was built around. AI drove non-human identity from a niche IAM subcategory to a board-level CISO conversation. Danny Brickman and his co-founder Amit Zimerman built Oasis, which they call agentic access management, for exactly that world. Cyera arrived at the same shift from a different direction. Yotam Segev, Tamar Bar-Ilan, and Yonatan Itai built the company to answer a deceptively simple question: where does an organization’s sensitive data actually live, who can reach it, and what’s really at risk? As AI agents started reading, writing and acting on that data, they reached a conclusion that now looks obvious: securing AI means securing the data, the identities acting on it (human and non-human), and the agents themselves. Put the two products side by side, and they complement each other perfectly. Cyera knows where the sensitive data is. Oasis knows who or what can actually touch it — every service account, API key and agent credential, and whether it’s behaving the way it should. It’s a bit like a bank vault: the best way to protect it is by knowing both what’s inside and who’s approaching. Data security tells you what’s actually at stake. Identity security tells you whether the thing touching your data is legitimate. Together, the two products cover the entire path an AI agent takes through a company’s environment, from the data it touches to the identity it uses to touch it. There’s a practical case here too. Cyera has built one of the most powerful enterprise GTM teams, with the kind of scale that usually takes a startup a decade to reach. Oasis’s product now gets to run through that engine, into enterprise accounts it would otherwise have taken years to earn on its own. And the market isn’t waiting: Whoever builds the first genuinely complete AI security platform, spanning data, identity and agents, has a real shot at becoming the default layer enterprises standardize on as agentic AI rolls out. Speed and completeness both matter, and the combination of Cyera and Oasis creates both. The founders’ backgrounds make the fit feel almost inevitable in hindsight. It’s a small world: two teams we’d backed independently, drawn from the same pool of Israeli technical talent, ended up building the two halves of the same answer to AI security. Talpiot and Unit 8200 alumni have produced a disproportionate share of the last decade’s big cybersecurity companies, so the coincidence is smaller than it looks, but it’s still a good sign when it plays out this cleanly. Danny, Amit and the Oasis team built the category-defining company in non-human identity in under three years, from a standing start to a product enterprises trust with agentic access at scale. That doesn’t happen without genuinely hard technical work, and a founder team that saw the shift to agentic AI before almost anyone else in security did. We at Sequoia have backed both Cyera and Oasis since their Series A rounds, and we’re proud to keep backing this team as they take on the next chapter together — a bigger stage, and an opportunity sized to match.