As businesses race to deploy artificial intelligence across their operations, cybersecurity firm Cyera announced Tuesday that it will acquire fellow Israeli-founded startup Oasis Security in a $1 billion cash-and-stock deal, combining data security with technology designed to give AI agents their own secure digital identities. The transaction, first reported by The Wall Street Journal, is expected to close later this year. 

For most people, the easiest way to understand the technology is to think of it as issuing an employee ID card or passport for AI.

Before an AI agent is allowed to access a company’s emails, customer records, financial systems, cloud storage, or internal databases, it first receives a unique digital identity proving exactly which AI system it is. That identity authenticates the AI, defines what information it is allowed to access, records every action it performs, and enables security teams to trace those actions back to that specific AI agent if questions arise. 

The need has grown rapidly as businesses move beyond simple chatbots and begin deploying autonomous AI agents capable of retrieving confidential information, approving workflows, writing software, analyzing contracts, communicating with customers, and performing tasks with minimal human oversight. While those capabilities improve productivity, they also create new security risks if an AI agent gains excessive permissions or is compromised by attackers. 

Cyera’s platform has traditionally focused on protecting sensitive corporate data. Oasis Security specializes in securing what the cybersecurity industry calls non-human identities—AI agents, bots, service accounts, and automated software processes that increasingly outnumber human users inside many enterprise networks. By combining the two platforms, organizations will be able to see both what data requires protection and who—or what—is attempting to access it from a single security platform. 

For businesses, the practical benefit is straightforward. Every AI agent can receive its own digital identity, have clearly defined permissions, generate a complete audit trail of every action it performs, and lose access immediately if suspicious behavior is detected. That provides companies with the accountability regulators, auditors, and security teams increasingly expect as AI systems become more autonomous. 

One question many executives may ask is whether AI agents are already legally required to carry this type of digital “ID card.”

The answer is no. There is currently no U.S. federal law requiring AI agents to possess digital identities. However, existing cybersecurity, financial, healthcare, and privacy regulations already require organizations to control access to sensitive information, verify who—or what—is accessing systems, and maintain audit logs. Many companies are therefore implementing AI identity management voluntarily to satisfy those obligations while preparing for what many cybersecurity experts expect will become an industry standard as AI adoption accelerates. 

The acquisition also underscores how quickly cybersecurity priorities are changing. A year ago, many companies were focused primarily on preventing AI from exposing confidential data. Today, the larger concern is ensuring that autonomous AI systems can be trusted before they are allowed to act on behalf of employees.

For Cyera, the billion-dollar acquisition is more than an expansion of its product lineup. It is a bet that, in the AI era, protecting information will require securing not only the data itself, but also every digital identity—human or artificial—that attempts to access it. 

JBizNews Desk | Wall Street

© JBizNews.com All Rights Reserved. Reproduction or distribution without written permission is prohibited.