Skip to content

Funding Brief|Cyera Adds $400M to Its Series G, Pushing 2026 Funding Past $1.4B to Control What AI Agents Can Touch

Sep 26, 20261 min
TL;DRCyera secured a $400M investment from Goldman Sachs Alternatives as an extension of its Series G, holding its valuation flat above $12B, with 2026 funding to date now at $1.4B. The signal here is that data security and identity governance are merging into one problem: AI agents don't need login approval the way human employees do — a valid identity is enough for them to access data, call tools, and take action on their own, and the security architecture built for people and applications simply can't keep up.

🌏 中文版

Funding Details

FieldValue
CompanyCyera (Israel)
RoundSeries G (extension)
Amount$400M
Lead investorGrowth Equity at Goldman Sachs Alternatives
Follow-on(original Series G participants) Evolution Equity Partners, Cyberstarts, Temasek; (existing investors) Accel, AT&T Ventures, Blackstone, Coatue, Georgian, Lightspeed, Sequoia, Spark Capital
ValuationAbove $12B (unchanged from the original June 2026 Series G)
Total raisedMore than $2B (2026 alone: $400M in January + $600M in June + $400M this round = $1.4B)
Founded2021
HeadcountMore than 1,500 people across 18 countries

What the company does

Cyera started as a data security posture management company — automatically finding sensitive data scattered across an enterprise's cloud and SaaS environments, then checking it against access permissions and protection status to surface the gap between what exists and who can reach it.

This year, the company extended that same logic to "non-human identities." Its Agent Guardian product inventories every AI agent inside an enterprise that touches data, flags agents with excessive permissions, detects vulnerabilities in the tools and MCP servers those agents call, and can halt dangerous operations or quarantine a misbehaving agent in real time. Cyera Endpoint, meanwhile, stops employees from feeding company data to external AI agents. Earlier this year the company acquired Oasis Security for roughly $1B, folding non-human identity management — the credentials machines and agents use, as opposed to human logins — into the platform, so "where sensitive data lives" and "which machine identity can reach it" become one governance system instead of two.

Customers include Paramount, Chipotle, and Valvoline, and in April 2026 the company achieved FedRAMP High "In Process" status ahead of a push into the US federal market.

What this round signals

What it means for the agent ecosystem

CEO Yotam Segev put it plainly: "Global 2000 enterprises are telling us the same thing — they need to trust what AI agents can see and do before they can scale them." That points to a structural problem: unlike human employees, AI agents don't need manual approval for every action — they log in with an identity, call tools, query databases, and act autonomously, and the security architecture most enterprises run was built for people and applications, not for millions of autonomous actors. The new capital will fund Cyera's AI security roadmap, its federal push, and expansion across EMEA and APAC.

What investors are betting on

Goldman Sachs is a new name in this round — Evolution Equity Partners led the original Series G in June without Goldman's involvement, and this is Goldman's first check into the company, coming in at the same price as June's round rather than a fresh markup. Irit Kahan of Growth Equity at Goldman Sachs Alternatives laid out the thesis directly: "Securing AI will be one of the defining categories in enterprise technology over the next decade." That's not a bet on a disclosed revenue number — Cyera has never published one, only that annual recurring revenue has tripled for three straight years — it's a bet that "data security plus identity governance" consolidates into a single control layer, and that Cyera currently has the strongest execution and customer base to own it.

Numbers worth watching

  • Valuation climbed from $3B in 2024 to $12B as of mid-2026, a 4x jump in two years, but this extension didn't push the valuation higher — a sign of "doubling down on a winning position" rather than a fresh repricing
  • 2026 funding alone has hit $1.4B ($400M in January, $600M in June, $400M in September) — roughly one large round every quarter, a faster pace than most peers at this stage
  • The Oasis Security acquisition cost about $1B, 2.5x the size of this round — showing the company is putting significant capital directly into M&A rather than building in-house, buying time-to-market for non-human identity management

Watchlist status

Cyera is not yet tracked in the watchlist. Recommend adding it to section B7 (Agent Security / Governance / Security Technology), with tracking focus on the combined data security and non-human identity governance platform — $1.4B raised in 2026 alone, $12B valuation — approaching the same "agent security" battleground from the data/identity layer, complementing Island's browser-layer approach in the same funding cycle.

Today's takeaway

I used to treat "data security" and "identity management" as two separate corners of the security world, but Cyera just merged them with a single $1B acquisition, and the logic is simple: when an AI agent doesn't need an attacker — just a valid credential and a goal — to break a process or expose data on its own, "where the data lives" and "who can reach it" were always the same map. Managing them separately was the real gap.

References