Cyera - Experts & Thought Leaders

Reco, the pioneer in Agent Security, announces an integration with Cyera, the AI Security Platform, that helps enterprises identify which AI agents can reach sensitive data and prioritise remediation based on the business impact of that access. As AI agents gain access to the same repositories, records and workflows employees use, security teams need to understand what resources an agent can touch, whether they contain sensitive data and which connected systems, applications and workflows may also be exposed. Meaningful business risk Cyera identifies where sensitive data lives, Reco maps the agents, identities, permissions and application connections around it. Together, the integration helps teams distinguish routine access from agent activity that could create meaningful business risk. With this integration, Reco ingests Cyera's data classification labels, including business IP, financial, health and regulated records, and feeds them into the Reco Graph. Reco then uses that sensitivity context to show which agents can reach sensitive data, how that access was granted, what other systems they can connect to and whether their activity deviates from normal behaviour. Security teams can use that combined context to identify high-risk agent access paths and focus remediation where the potential business impact is greatest. Over-permissioned agent Not every over-permissioned agent presents the same level of risk. An agent with broad access to low-sensitivity content may warrant a different response than one that can reach regulated records, customer data or intellectual property. The integration helps security teams make that distinction and prioritise remediation based on both access and data sensitivity. “As agents gain access to more business systems, security teams need to know what those agents can reach and which access represents the greatest risk,” said Zoe Hillenmeyer, chief operating officer at Reco. “By combining Cyera’s data sensitivity context with Reco’s view of agent identities, permissions, connections and activity, customers can identify the access paths that matter most and remediate them with much greater precision.”

Cyera announces the completion of its acquisition of Oasis Security, the access management platform for the agentic enterprise. The acquisition, valued at $1 billion, unites Cyera's AI and Data Security Platform with Oasis's non-human identity (NHI) management capabilities, creating a single platform that determines what every human, machine, and AI agent can see and do. Non-human identities inside Fortune 500 companies grew nearly 500% in the last six months alone, making them the fastest-growing identity type. Agents operate at machine speed, act on valid credentials, and don't need to be compromised to cause damage, yet most organisations have no idea what those agents can access or whether any of it was ever meant to be accessible in the first place. Access management platform The old security model survived on human accountability, where users could coach a person, manage them, and hold them responsible. However, they can't threaten an agent, prosecute an API, or discipline a workload. Once an autonomous system has permission, it acts continuously and without hesitation. That's why a permission granted six months ago can no longer be treated as reliable. That trust needs to be evaluated fresh before every action, not set once and forgotten. Together, Cyera and Oasis are building a new model: one that unifies data and identity into a single system, so every agent is trusted with exactly the data it should reach. Non-human identity “The speed of this deal reflects a shared conviction that AI has changed the game, and the infrastructure to secure it has to move just as fast,” said Yotam Segev, cofounder and CEO at Cyera. “We’ve spent years solving data at enterprise scale, and Oasis has done the same for non-human identity. Put those two things together and you get one system that decides what every agent can see and do, and that's exactly what we’re building.” Oasis Security was founded in 2022 to address non-human identity, one of the fastest-growing and least governed areas of enterprise security. The company built continuous, policy-driven control over which workloads and agents can access which systems, in what context, and for how long. Over three years, Oasis moved the world's largest companies off static, standing permissions and onto a dynamic model built for the speed and scale of agents. Going forward, the Oasis platform will operate as Cyera Identity, the dedicated identity pillar within Cyera's platform, connecting directly to Cyera's data intelligence layer to bring governance of data and identity together for the first time. Most important systems “Joining Cyera marks a new chapter for Oasis and for the customers we've built for. We built Oasis so enterprises could put AI to work on their most important systems and trust every decision it makes,” added Danny Brickman, cofounder and CEO of Oasis. “Cyera shares that same goal and together, we're positioned to deliver a single platform that governs identity and data as one. That's a win for every customer who has been forced to stitch those two things together until now.” For more on what this means for the future of the agentic enterprise, check out the blog post from Cyera Chief Strategy Officer, Jason Clark, and CTO of Cyera Identity, Amit Zimerman.

Non-human identities in Fortune 500 companies grew 480% in the last six months alone, and enterprises have no visibility into most of them. The moment an AI agent is deployed, it inherits elevated human permissions and moves at machine speed, touching data in seconds that would take a human a career to reach. This invisible layer of the new autonomous workforce is rapidly becoming the fastest-growing attack surface in enterprise security. Until now, there's been no infrastructure purpose-built to govern what agents can see and do, leaving sensitive data, critical systems, and regulatory obligations increasingly at risk. Black Hat 2026 Today at Black Hat 2026, Cyera launched Agent Guardian, built to make every AI agent as visible and accountable as a human employee. Agent Guardian goes beyond the prompt and the response, monitoring every tool call, database query, and reasoning step in between. Alongside Agent Guardian, Cyera also introduced Cyera Endpoint, bringing AI guardrails directly to employee devices for local agents that operate outside corporate network controls, where they are increasingly doing their most sensitive work. Together, they extend the trust layer Cyera is building for the agentic enterprise, answering what an agent can reach and what it should be allowed to do with it.  Accelerate AI adoption “AI agents have become a new class of enterprise identity. But the fundamental shift isn't that organisations have more identities; it's that the gap between permission and execution has disappeared," said Tamar Bar-Ilan, cofounder and CTO of Cyera. “Agent Guardian and Cyera Endpoint give organisations the visibility and runtime control to govern this new reality, enabling them to accelerate AI adoption without putting sensitive data at risk.” Built to secure the agentic enterprise, from the device to the cloud Agent Guardian fills the critical gap between rapid agentic adoption and operational control, organising the agent security journey around a continuous, systematic operational lifecycle:  Discover—Account for every agent: Automatically inventories every AI application and agent running across endpoints, SaaS platforms, and cloud environments, including shadow agents and MCP servers security teams didn't know existed, and maps exactly what data each one can reach. Govern—Set the rules: Defines what each agent is allowed to do, flags when it drifts from its intended purpose, and continuously audits for overprivileged access and risky configurations. Protect—Stop threats in real time: Operates inline within the execution path and uses AI-driven policy and content evaluations to intercept dangerous tool calls, block unauthorised data transfers, and quarantine compromised agents before execution. Validate—Prove the guardrails hold: Continuously red-teams defenses against prompt injection, jailbreaking, and privilege escalation, and generates audit-ready compliance reports to satisfy frameworks like the EU AI Act. Whether enterprises are deploying agents built on AWS Bedrock, or managing developer agents running on employee devices or rolling out Microsoft 365 Copilot, Agent Guardian secures the entire agentic surface from one platform, giving security teams the visibility to see every agent, the precision to govern what it touches, and the runtime control to stop it before it causes harm. AI Guardrails: where agents work Agent Guardian enforces policy wherever AI interacts with enterprise data, including through platform APIs, AI gateways, browser extension, agent framework hooks, and remote scans of employee devices. That last control point has become increasingly important as developers adopt local agents such as Claude Code and Cursor, where activity never crosses a network boundary and traditional security tools have little or no visibility. To add runtime protection to where local activity happens, Cyera today also introduced Cyera Endpoint, a lightweight endpoint control that brings Agent Guardian's policies directly to the device. It provides live visibility into sanctioned and shadow local agent activity, classifies and protects sensitive files before they're accessed or leave the machine, and blocks data from reaching unauthorised personal AI accounts, enabling consistent governance across cloud, SaaS, and endpoint environments. Built for every agent, across every platform Cyera covers the full agentic surface, from desktop agents like Claude Code and Cursor to enterprise platforms like Microsoft Copilot Studio, Salesforce Agentforce, and Snowflake Cortex AI, to custom cloud deployments on AWS Bedrock, Microsoft Foundry, and Vertex AI.“AI is only as trustworthy as the data behind it,” added Mayank Upadhyay, Chief Security & Trust Officer at Snowflake. “Working with Cyera lets Snowflake customers see every Cortex AI agent in use and understand exactly what data it can reach, so they can adopt agentic AI with the same confidence they place in their data.” To see Agent Guardian and Cyera Endpoint in action, visit Cyera at Black Hat 2026, Booth #4152.