What Happened

On September 22, 2026, cybersecurity startup Cyera announced it had secured $400 million in additional funding from Goldman Sachs. The capital extends a Series G round that initially closed in June 2026 at a $12 billion valuation. Cyera confirmed its current valuation is "over $12 billion" but did not disclose a precise figure.

The funding news comes amid a strategic shift for the company. Following the June Series G close, Cyera expanded from its core data security platform — which helps enterprises locate and secure sensitive records across dozens of storage systems — into the emerging AI agent security market. The company launched two products: Agent Guardian, which inventories AI agents interacting with corporate data, scans them for vulnerabilities like over-privileged access, and can block or quarantine agents that violate security policies; and Cyera Endpoint, which monitors AI agents running on employee devices and prevents unauthorized data movement to non-work agents.

Earlier in September 2026, Cyera also completed its $1 billion acquisition of Oasis Security, a startup specializing in securing nonhuman identities (NHIs) — the accounts AI agents use to authenticate into enterprise applications. Oasis maps NHIs across corporate networks, identifies which agents use them, and flags risks such as overly broad access permissions.

Cyera CEO Yotam Segev framed the investment as accelerating the company's mission to "bring data and identity together, so enterprises can give agents access with confidence and keep that access aligned with business intent." The new capital will fund additional AI security feature development and market expansion into federal government and international sectors.

Why It Matters

Cyera's move into AI agent security is not a minor product extension — it represents a fundamental repositioning of a $12 billion company around one of the fastest-growing enterprise pain points in 2026. As organizations deploy autonomous agents across business workflows, security teams are confronting problems that traditional cybersecurity tools were never designed to handle: agents with unscoped data access, nonhuman identities proliferating without oversight, and AI tools running on employee endpoints outside the reach of conventional enterprise controls.

The fact that Goldman Sachs chose to extend the Series G rather than wait for a new round signals institutional confidence that AI agent security is a durable category. This is reinforced by broader market activity: Kontext recently raised $4M for AI agent policy control, and Socure secured $156M at a $5.2B valuation partly focused on AI-driven identity security. The funding pattern suggests investors see agent security as a multi-billion-dollar opportunity, not a feature.

For operators, Cyera's product roadmap provides a useful blueprint for what enterprise security buyers will expect. Agent inventory, access scoping, policy enforcement, endpoint monitoring, and NHI management are becoming the minimum viable capability set for any AI security stack.

Who Is Affected

Enterprise security teams deploying AI agents at scale are the most directly impacted. If your organization is running agents that access corporate data, tools like Agent Guardian and Cyera Endpoint address risks that existing DLP and IAM solutions don't cover — specifically, the ability to see what agents are doing, restrict their access to only what they need, and prevent data exfiltration through non-work AI tools on employee devices.

AI startup founders building agent platforms or agent-adjacent infrastructure should pay close attention. Cyera's product set is effectively becoming the enterprise procurement checklist for agent security. If your platform can't demonstrate controlled data access, identity management, and behavior monitoring, you'll face integration friction or outright rejection from security-conscious buyers.

CISOs and IT leaders at large enterprises need to decide whether to invest in dedicated agent security tooling now or wait for incumbents to add these capabilities. Given the pace of agent deployment, waiting carries real risk — unmonitored agents with broad data access are already a top attack vector.

Strategic Implications

For AI startup founders: Cyera's Agent Guardian creates a de facto standard for what enterprise buyers expect from agent security: agent inventory, vulnerability scanning, policy-based access control, and the ability to block or quarantine agents. If you're building agent infrastructure, build these controls natively or ensure your platform integrates cleanly with tools like Cyera's. The $1B Oasis acquisition also signals that nonhuman identity management is now table stakes — don't ship agents without a coherent NHI strategy.

For developers/operators building with AI APIs: Audit your agents' data access patterns before enterprise security teams do it for you. Agent Guardian's approach — flagging agents with access to more data than they require — is exactly the kind of scrutiny your deployments will face. Implement least-privilege access now, log agent actions comprehensively, and ensure your MCP servers and agent tools don't have unnecessary permissions.

For non-technical business owners evaluating AI tools: Ask vendors how they handle agent identity management, data access scoping, and endpoint protection. Cyera Endpoint's ability to prevent employees from loading business data into non-work agents is becoming a standard requirement. Your security team will likely mandate this capability before approving any agent deployment.

What to Watch Next

Monitor whether other major cybersecurity incumbents (CrowdStrike, Palo Alto Networks, Zscaler) respond with their own agent security products, which would validate the category further. Also watch for Cyera's federal government contract wins — public sector adoption would signal that agent security has moved from early-adopter enterprises to mainstream institutional buyers.

Frequently Asked Questions

Q: What does Cyera's Agent Guardian do?

A: Agent Guardian inventories AI agents that interact with a company's data, scans them for vulnerabilities like over-privileged access, and enforces security policies. It can block specific risky agent actions or quarantine agents entirely if they pose a broader cybersecurity threat.

Q: Why did Cyera acquire Oasis Security for $1 billion?

A: Oasis Security specializes in securing nonhuman identities (NHIs) — the accounts AI agents use to log into enterprise applications. By acquiring Oasis, Cyera added the ability to map NHIs across corporate networks, identify which agents use them, and flag security risks like overly broad access permissions, complementing its data security and agent monitoring capabilities.

Q: How much has Cyera raised in total?

A: Cyera's most recent raise is $400 million from Goldman Sachs as an extension to its Series G round. The original Series G closed in June 2026 at a $12 billion valuation. The company has not disclosed its total cumulative funding, but this latest extension brings the Series G total significantly higher.