Cyera and Oasis: Stronger Together
Sequoia By Bogomil Balkansky and Doug Leone ● Covered by 3 sources
Oasis is joining Cyera. Together they’re trying to cover the full AI-security path: data, identities, and the agents in between.
Based on reporting by Sequoia, By Bogomil Balkansky and Doug Leone — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
Sequoia says Oasis is joining Cyera, turning two portfolio companies into one bet on AI security. The hook is simple: Cyera knows where sensitive data sits, while Oasis knows which human or non-human identity is allowed to touch it.
That pairing matters because AI agents have pushed non-human identities from a niche problem into the middle of security conversations. API keys, service accounts, OAuth tokens and agent-to-agent credentials all act with real permissions. They don’t behave like people, and the old identity tools were built for people.
Oasis was built for that gap. Co-founders Danny Brickman and Amit Zimerman called it agentic access management, and Sequoia backs the company’s view that enterprises now need a way to manage machine identities at scale. Cyera came at the same problem from the data side, asking where sensitive data actually lives, who can reach it, and what is at risk when AI starts reading and writing that data.
Put together, the companies cover more of the path an AI agent takes through an enterprise. Cyera handles the data. Oasis handles the identities and whether they’re behaving as they should. Sequoia also points to a practical benefit: Cyera’s enterprise go-to-market machine is already built, so Oasis can reach accounts much faster than it could on its own.
The timing is the real tell. Sequoia argues the first company to offer something close to a complete AI security stack — data, identity and agents — has a shot at becoming the layer enterprises standardize on. That sounds less like a merger of equals and more like a race to own the category before everyone else wakes up.
My take — AI-written commentary, not fact-checked reporting
This is the sort of consolidation that usually happens right after a category stops being a whiteboard exercise and starts getting budget. The neat part is that it isn’t just financial engineering; data security and identity security really do look like two halves of the same mess. Still, the bigger pattern is obvious: once AI security becomes a platform story, the market starts rewarding bundles, not purity tests.
Read more about this at: Sequoia