Cyera

Overview

Cyera is a data security platform, not an identity platform, and it appears here because of what it bought. Founded in 2021 by Yotam Segev and Tamar Bar-Ilan, it classifies and protects data across cloud, SaaS, and on-premises systems, and has extended from data security posture management into data loss prevention, privacy, and what it markets as agentic security. It raised 600 million dollars in June 2026 at a reported 12 billion dollar valuation.

On 28 July 2026 Cyera signed a letter of intent to acquire Oasis Security for roughly 1 billion dollars, about 700 million of it cash, with Oasis to continue as a dedicated unit owning the non-human identity line. Until that closes, treat Cyera's identity capability as the access-visibility layer over data, plus a stated roadmap.

What it is good at

Answering the question that identity tooling answers badly: not who holds an entitlement, but what sensitive data that entitlement actually reaches. Classification is the strength, and pairing it with access mapping is what makes a finding actionable, because "this service account can read the customer PII store" is a different conversation than "this service account has a broad role." Governance and audit evidence for data access is the strongest dimension here.

Where it falls short

It is not an IAM platform and does not pretend to be. There is no authentication, no SSO, no MFA, and no joiner-mover-leaver provisioning, so it sits beside Okta or Microsoft Entra rather than near them. The non-human identity capability that makes it interesting to identity teams is an announced acquisition rather than a shipped product, and a letter of intent can still move. Buyers should also weigh integration risk: two large platforms merging rarely produce a joined-up product in the first year.

Pricing

No public pricing. Enterprise subscription, quote-based, typically scoped by data volume and connected environments. Expect a sales-led evaluation. Model the cost with the TCO calculator.

Best for, and who should look elsewhere

A fit for enterprises that already have identity governance and need the data half of the picture, or that want one vendor across data classification and non-human identity once Oasis closes. If your problem is machine identity itself, evaluate Oasis Security directly, or Astrix Security, Entro Security, and Token Security in the non-human identity ranking. If you need access governance across applications, look at Veza or the IGA category.

Bottom line

A data security leader with a credible route into non-human identity, bought rather than built. Evaluate it for data-aware access findings today, and revisit the identity claim once the Oasis acquisition closes.