Cyera - Experts & Thought Leaders

Cyera announces the completion of its acquisition of Oasis Security, the access management platform for the agentic enterprise. The acquisition, valued at $1 billion, unites Cyera's AI and Data Security Platform with Oasis's non-human identity (NHI) management capabilities, creating a single platform that determines what every human, machine, and AI agent can see and do. Non-human identities inside Fortune 500 companies grew nearly 500% in the last six months alone, making them the fastest-growing identity type. Agents operate at machine speed, act on valid credentials, and don't need to be compromised to cause damage, yet most organisations have no idea what those agents can access or whether any of it was ever meant to be accessible in the first place. Access management platform The old security model survived on human accountability, where users could coach a person, manage them, and hold them responsible. However, they can't threaten an agent, prosecute an API, or discipline a workload. Once an autonomous system has permission, it acts continuously and without hesitation. That's why a permission granted six months ago can no longer be treated as reliable. That trust needs to be evaluated fresh before every action, not set once and forgotten. Together, Cyera and Oasis are building a new model: one that unifies data and identity into a single system, so every agent is trusted with exactly the data it should reach. Non-human identity “The speed of this deal reflects a shared conviction that AI has changed the game, and the infrastructure to secure it has to move just as fast,” said Yotam Segev, cofounder and CEO at Cyera. “We’ve spent years solving data at enterprise scale, and Oasis has done the same for non-human identity. Put those two things together and you get one system that decides what every agent can see and do, and that's exactly what we’re building.” Oasis Security was founded in 2022 to address non-human identity, one of the fastest-growing and least governed areas of enterprise security. The company built continuous, policy-driven control over which workloads and agents can access which systems, in what context, and for how long. Over three years, Oasis moved the world's largest companies off static, standing permissions and onto a dynamic model built for the speed and scale of agents. Going forward, the Oasis platform will operate as Cyera Identity, the dedicated identity pillar within Cyera's platform, connecting directly to Cyera's data intelligence layer to bring governance of data and identity together for the first time. Most important systems “Joining Cyera marks a new chapter for Oasis and for the customers we've built for. We built Oasis so enterprises could put AI to work on their most important systems and trust every decision it makes,” added Danny Brickman, cofounder and CEO of Oasis. “Cyera shares that same goal and together, we're positioned to deliver a single platform that governs identity and data as one. That's a win for every customer who has been forced to stitch those two things together until now.” For more on what this means for the future of the agentic enterprise, check out the blog post from Cyera Chief Strategy Officer, Jason Clark, and CTO of Cyera Identity, Amit Zimerman.

Non-human identities in Fortune 500 companies grew 480% in the last six months alone, and enterprises have no visibility into most of them. The moment an AI agent is deployed, it inherits elevated human permissions and moves at machine speed, touching data in seconds that would take a human a career to reach. This invisible layer of the new autonomous workforce is rapidly becoming the fastest-growing attack surface in enterprise security. Until now, there's been no infrastructure purpose-built to govern what agents can see and do, leaving sensitive data, critical systems, and regulatory obligations increasingly at risk. Black Hat 2026 Today at Black Hat 2026, Cyera launched Agent Guardian, built to make every AI agent as visible and accountable as a human employee. Agent Guardian goes beyond the prompt and the response, monitoring every tool call, database query, and reasoning step in between. Alongside Agent Guardian, Cyera also introduced Cyera Endpoint, bringing AI guardrails directly to employee devices for local agents that operate outside corporate network controls, where they are increasingly doing their most sensitive work. Together, they extend the trust layer Cyera is building for the agentic enterprise, answering what an agent can reach and what it should be allowed to do with it.  Accelerate AI adoption “AI agents have become a new class of enterprise identity. But the fundamental shift isn't that organisations have more identities; it's that the gap between permission and execution has disappeared," said Tamar Bar-Ilan, cofounder and CTO of Cyera. “Agent Guardian and Cyera Endpoint give organisations the visibility and runtime control to govern this new reality, enabling them to accelerate AI adoption without putting sensitive data at risk.” Built to secure the agentic enterprise, from the device to the cloud Agent Guardian fills the critical gap between rapid agentic adoption and operational control, organising the agent security journey around a continuous, systematic operational lifecycle:  Discover—Account for every agent: Automatically inventories every AI application and agent running across endpoints, SaaS platforms, and cloud environments, including shadow agents and MCP servers security teams didn't know existed, and maps exactly what data each one can reach. Govern—Set the rules: Defines what each agent is allowed to do, flags when it drifts from its intended purpose, and continuously audits for overprivileged access and risky configurations. Protect—Stop threats in real time: Operates inline within the execution path and uses AI-driven policy and content evaluations to intercept dangerous tool calls, block unauthorised data transfers, and quarantine compromised agents before execution. Validate—Prove the guardrails hold: Continuously red-teams defenses against prompt injection, jailbreaking, and privilege escalation, and generates audit-ready compliance reports to satisfy frameworks like the EU AI Act. Whether enterprises are deploying agents built on AWS Bedrock, or managing developer agents running on employee devices or rolling out Microsoft 365 Copilot, Agent Guardian secures the entire agentic surface from one platform, giving security teams the visibility to see every agent, the precision to govern what it touches, and the runtime control to stop it before it causes harm. AI Guardrails: where agents work Agent Guardian enforces policy wherever AI interacts with enterprise data, including through platform APIs, AI gateways, browser extension, agent framework hooks, and remote scans of employee devices. That last control point has become increasingly important as developers adopt local agents such as Claude Code and Cursor, where activity never crosses a network boundary and traditional security tools have little or no visibility. To add runtime protection to where local activity happens, Cyera today also introduced Cyera Endpoint, a lightweight endpoint control that brings Agent Guardian's policies directly to the device. It provides live visibility into sanctioned and shadow local agent activity, classifies and protects sensitive files before they're accessed or leave the machine, and blocks data from reaching unauthorised personal AI accounts, enabling consistent governance across cloud, SaaS, and endpoint environments. Built for every agent, across every platform Cyera covers the full agentic surface, from desktop agents like Claude Code and Cursor to enterprise platforms like Microsoft Copilot Studio, Salesforce Agentforce, and Snowflake Cortex AI, to custom cloud deployments on AWS Bedrock, Microsoft Foundry, and Vertex AI.“AI is only as trustworthy as the data behind it,” added Mayank Upadhyay, Chief Security & Trust Officer at Snowflake. “Working with Cyera lets Snowflake customers see every Cortex AI agent in use and understand exactly what data it can reach, so they can adopt agentic AI with the same confidence they place in their data.” To see Agent Guardian and Cyera Endpoint in action, visit Cyera at Black Hat 2026, Booth #4152.

Cohesity, a pioneer in AI-powered data security and management announced it is expanding its Data Security Alliance ecosystem with six pioneering Data Security Posture Management (DSPM) vendors, including long-standing partner BigID, as well as Cyera, Dig Security, Normalyze, Sentra, and Securiti. Challenges with cloud Cloud adoption continues to increase, but copies of data are often shared between clouds without oversight by IT or security, resulting in the growth of shadow data. Because of this, data security, cyber recovery, and compliance are at risk, as evidenced by 82% of breaches involving data stored in the cloud.  Need for DSPM capabilities DSPM gives customers a deep understanding of where their sensitive data is, who has access to it The need for DSPM capabilities, coupled with modern data security and management services, has never been greater. DSPM gives customers a deep understanding of where their sensitive data is, who has access to it, how it is being used, and where it is stored. When combined with Cohesity’s modern data security and management technology, customers are building a strong cyber resilience posture.  Flexibility  With these partnerships, Cohesity expects to integrate with the broadest and most comprehensive selection of DSPM solutions in the industry. Collectively, this newly formed group represents the majority of the DSPM market, providing Cohesity customers with the flexibility to choose the solution that best fits their needs.  Data visibility challenge Organisations face a significant challenge when it comes to the visibility of critical data across a growing multitude of repositories. Accelerating cloud adoption, compounded by an explosion of microservices, and a high rate of change (driven by modern DevOps practices) put customers at risk of significant data sprawl. Addressing visibility gaps Joint customers maintain visibility and help assure all their stakeholders that their sensitive data is protected Due to these visibility gaps, critical and sensitive data becomes hidden from IT teams and oftentimes goes unprotected. Cohesity is working to solve this issue by partnering with the pioneering DSPM vendors and members of the Cohesity Data Security Alliance. With this unique collaboration, joint customers maintain visibility and help assure all their stakeholders, including employees, customers, and shareholders that their sensitive data is protected. Sensitive data assessment Cohesity’s pioneering data security and management technology, coupled with the benefits of DSPM, will deliver instant discovery of all data workloads, both sanctioned and unsanctioned, while also providing assessments of which data workloads have sensitive data that are often targeted by bad actors. These capabilities enable enterprises to be even more proactive in the fight against cyberattacks and provide the following cyber resilience benefits: Backup admins can easily see which objects have sensitive data. IT and security can instantly identify protection gaps for critical workloads. Actionable Cyber Recovery risk reports go directly to compliance teams. Identify and protect data As organisations rapidly expand their hybrid cloud footprint, their data risk and exposure increase in lockstep" “As organisations rapidly expand their hybrid cloud footprint, their data risk and exposure increase in lockstep,” said Elad Horn, group vice president, of Product, Cohesity. “We look forward to continuing our partnership with pioneering DSPM vendors to help our joint customers rapidly identify and protect their most sensitive and business-critical data across both public cloud and private cloud environments.”  Cyber attack and ransomware protection “Cohesity is helping some of the largest enterprises in the world protect their data against ransomware and cyber threats in hybrid cloud environments,“ said Amer Deeba, CEO and Co-founder of Normalyze. “Now with the integration with Normalyze DSPM platform, customers get full visibility into their data across all clouds, SaaS, and on-prem." "The joint solution gives security teams unprecedented visibility into their sensitive data locations and types; identifies and prioritises risks based on the highest monetary impact to the organisation in case of a data breach, and proactively protects the data from ransomware and cyber attacks.”  DSPM solutions “Cohesity’s Data Security Alliance ecosystem offers customers the opportunity to implement security on their terms, making it easy to integrate with vendors in adjacent technology spaces,” said Jennifer Glenn, research director for the IDC Security and Trust Group. “The expansion of the program to include DSPM solutions such as BigID and Normalyze, as well as other pending integrations, gives customers more insight and visibility into their data and more confidence that it will be protected appropriately.”  Data Security Alliance Cohesity’s Data Security Alliance offers a unique and comprehensive approach to security The Cohesity Data Security Alliance was founded in November 2022 and contains 15 members including BigID, Cisco, CyberArk, Mandiant, Netskope, Okta, Palo Alto Networks, PwC UK, Qualys, Securonix, ServiceNow, Splunk, TCS, Zscaler. The addition of the six DSPM security vendors brings the total membership to 21. Cohesity’s Data Security Alliance offers a unique and comprehensive approach to security.  Security and data management Through this one-of-a-kind alliance, pioneering cyber security, data security and management, and services vendors partner to seamlessly bridge enterprise IT and security by sharing context and enabling new workflows. This collaboration can help customers detect threats and respond to attacks faster, improve remediation, and advance cyber resilience, all while utilising their existing security and data management investments. Remediate data risks “It’s more important than ever for organisations of all sizes to proactively identify and remediate risk across their entire data landscape – including dark data, shadow data, and critical data,” said Tyler Young, CISO at BigID. BigID’s market-pioneering DSPM capabilities enable companies to accelerate their security strategies" “BigID’s market-leading DSPM capabilities enable companies to accelerate their security strategies and improve their security posture with differentiated actionability, risk remediation, and unmatched data discovery and classification built for the enterprise. Our partnership with Cohesity is a natural fit to extend DSPM capabilities to help customers better manage, reduce, and remediate risk.” Availability The integration with Normalyze, Cohesity’s initial design partner, is expected to be available within 30 days. The company’s partnership with BigID on enterprise-grade, AI-powered data classification grows through this new integration with SmallID (BigID’s DSPM product) and is expected to be available in 60 days. Additional DSPM partner integrations will be available in the coming months.