Cyera to acquire Oasis Security for ~$1B. The data-security unicorn moves into non-human identity, four months after Oasis raised a $120M Series B. This week's Company Spotlight.

Non-human identity is everywhere. Hush Security raised $30M from Akamai, Way Security took $30.5M, and Keyfactor agreed to buy Cofide, all in one week.

Glow raises $100M at a $1.2B valuation, the week's biggest round, for endpoint security, led by Redpoint, Sequoia and CyberStarts.

AI security operations heats up. Mate Security raised $35M with Microsoft's M12 in the round, and AegisAI took $36M for autonomous email defence.

This week's Trident View: see you in Vegas!!

This week's Insider Insight: the machine-identity land grab, and why the giants are buying rather than building. A common theme this year…

Fourteen of us are flying to Las Vegas next week. If you are going too, this one is simple: come and say hello.

We will not be the people shoving a flyer into your hand on the way past a booth. That is not how we work, and it is not why we go.

Here is what we are actually there to do. We want to meet the people behind the companies we write about every week, the founders scaling a team, the operators weighing their next move, the leaders trying to work out who to hire and when. Not to pitch anyone. To understand what they are building and what they need, so that when the moment comes, we already know the person, not just the role.

That is the whole Trident approach in one sentence. We do the work of knowing people before there is anything in it for us, because a hire that lands is almost never the result of a good week of searching. It is the result of a relationship that was already there. Black Hat is where a lot of those relationships start, over a coffee, at a party, in the two minutes you spend waiting for the same lift.

So if you see us, come over. If you are a founder trying to figure out your first commercial hire, we will happily talk it through with no expectation attached. If you are thinking about your own next step, even quietly, that is a conversation we are always glad to have, in complete confidence. And if you just want to compare notes on where this strange, fast market is heading, we are good for that too.

We will be around all week, in the halls, at a few of the parties, and yes, on a golf course at one point. We are the ones who would rather have a real conversation than a transaction. Reply to this email before next week and we will make sure our paths cross in Vegas.

The best hires in this industry come from actually knowing people. There is no better week for it, and we intend to make the most of every day.

Glow
Series B and B-1, $100M (Redpoint Ventures, Sequoia Capital, CyberStarts)
Endpoint security for the modern workspace, using specialised agents to build a single source of truth across devices, at a $1.1 billion pre-money valuation. Other investors: Index Ventures, Lux Capital, Greenoaks, Operator Collective and Holly Ventures.

Category: Endpoint Security
HQ: Palo Alto, CA

AegisAI
Series A, $36M (Battery Ventures)
Autonomous AI email security, deploying a fleet of agents to inspect and neutralise phishing and other inbox threats. Other investors: Accel and Foundation Capital.

Category: Email Security / AI
HQ: New York, NY

Mate Security
Series A, $35M (Canaan Partners)
AI-native security operations built on a context layer, so AI agents investigate alerts against how the business actually runs rather than in isolation. Adoption is expanding across the Fortune 500, with revenue up more than 500% since Q3 2025. Other investors: Insight Partners, Team8, and M12, Microsoft's venture fund.

Category: Security Operations / AI
HQ: Tel Aviv, Israel

Way Security
Series A, $30.5M (Insight Partners, Glilot Capital)
An identity security platform helping large enterprises manage overwhelming identity operations at scale. Other investors: Flex Capital.

Category: Identity
HQ: San Francisco, CA

Hush Security
Series A, $30M (Akamai Technologies, Battery Ventures, YL Ventures)
Non-human identity and AI-agent governance, eliminating standing access by enrolling every agent in a central registry and granting scoped, just-in-time permissions at runtime. The round brings total funding to $41 million and funds a US engineering and sales push.

Category: Non-Human Identity
HQ: Tel Aviv, Israel

Abstract Security
Series A, $25M (Cheyenne Partners, AVP)
A data security operations platform that optimises security data without trading off compliance, widening its in-stream detection capabilities. Other investors: Olive Hill Group, Crosslink Capital and Rally Ventures.

Category: Security Data / SecOps
HQ: Palo Alto, CA

Frenos
Seed, $6.4M (DataTribe, Momenta Ventures, Exposition Ventures)
Zero-impact security assessments that help teams focus on the risk mitigations that actually work, at an $11.1 million pre-money valuation. Other investors: XPS Venture Syndicate, Aspiron Search and Riptide Ventures.

Category: Risk Assessment
HQ: Charlotte, NC

StrongestLayer
Seed, $4.1M (Inovia Capital)
Integrated email security and human-risk tooling that protects employees from zero-day phishing inside the inbox and through browser isolation. Other investors: Launchpod, Alumni Ventures and Sorenson Ventures.

Category: Email Security
HQ: San Francisco, CA

Beelzebub
Seed, $3.4M (United Ventures)
An AI-native platform that continuously validates defences, deceives intruders and extracts threat intelligence.

Category: Deception / Validation
HQ: Milan, Italy

Oasis Security → Acquired by Cyera
Deal Type: Acquisition (letter of intent)
Deal Date: July 2026
Deal Size: ~$1B (reported)

The week's defining deal, and the clearest signal yet of where cyber's money is going. Cyera, the data-security unicorn valued at $12 billion after its recent $600 million raise, has signed a letter of intent to acquire the Israeli non-human identity firm Oasis Security for around a billion dollars, roughly $700 million of it in cash and the rest in stock. Oasis, founded in 2022, had raised about $195 million and closed a $120 million Series B led by Craft Ventures just four months ago. It is Cyera's largest move in an aggressive acquisition run, and it is covered in full in this week's Company Spotlight.

Cofide → Acquired by Keyfactor
Deal Type: Acquisition (definitive agreement)
Deal Date: July 27, 2026
Deal Size: Undisclosed

More non-human identity consolidation. Cofide builds a zero-trust identity platform for securing non-human identities across cloud environments. Keyfactor, backed by Insight Partners, Sixth Street and Summit Partners, is acquiring it through an LBO, adding to the machine-identity capability that a billion dollars of growth capital this month is clearly meant to fund.

Safehouse VPN → Acquired by TAC Security (NSE: TAC). The Israeli multi-device security platform joins a listed Indian vulnerability-management vendor.
Secturion Systems → Acquired by The Carlyle Group (NASDAQ: CG) through an LBO. Hardware data-encryption appliances, a defence and government mainstay, taken by one of the largest names in private equity.
Workstreet → Acquired by Coalesce Capital through an LBO. AI-powered compliance and virtual CISO services for technology companies.
Aleph-Networks → Acquired by Verdoso through an LBO. The French open-source intelligence specialist.
Layer27 → Acquired by Katalyst Network Group. Managed IT and security services for smaller businesses.

The through-line barely needs stating: two of the week's headline deals were non-human identity, and Carlyle taking an encryption-hardware business shows private equity is still working the defence-grade end of the market as hard as the venture crowd is working the AI end.

Six cybersecurity companies ceased operations this week, and the category mix tells its own story:

Three of the six were compliance or authentication tooling, exactly the layer our recent Trident View flagged as the most exposed to consolidation and to AI-native replacement.

We have been banging this drum all year, so let us be honest about that up front: if you read this newsletter, none of this week should surprise you. What is worth your time is not that it happened, but how fast it is now moving.

Count one week. Cyera agreed to buy Oasis Security for around a billion dollars. Keyfactor, itself flush with a billion dollars of fresh growth capital, acquired the non-human identity firm Cofide. Hush Security raised $30 million from Akamai. Way Security raised $30.5 million on enterprise identity.

Four non-human identity deals in seven days. We flagged this category when SailPoint bought Entro in June, built a Bold Call around the machine-identity thesis, and named non-human identity as one of the reasons the acquirers were circling. The thesis is no longer a thesis. It is the single most active consolidation theme in cyber, and it is accelerating.

So rather than re-explain why machine identities matter, which we have done, here is what has actually changed, and what we think happens next.

The price has detached from the fundamentals. Oasis raised a $120 million Series B in March and agreed to sell for roughly a billion four months later. Entro went for a reported $200 million on $24 million of funding. When a category reprices this fast, buyers stop paying for revenue and start paying for position, because the fear of being locked out is now greater than the fear of overpaying. That is a specific, and slightly dangerous, phase of a market.

The buyer list has widened past the usual names. Early identity consolidation was the identity specialists buying each other. Now it is a data-security company in Cyera, a certificate-management company in Keyfactor, and an infrastructure company in Akamai writing the cheques. Non-human identity has stopped being an identity sub-category and become a feature that every adjacent platform now believes it has to own. That is a much larger pool of acquirers than the category had even six months ago.

The shelf is emptying. This is the part that matters most for what comes next. We named Oasis and Token Security as the obvious independent targets back in June. Oasis is now gone. Every week of deals like this one removes another credible independent, and there are not many left. The scarcity is the story now, not the demand.

So here is our updated call, building on the one we have been making. The interesting question is no longer whether non-human identity consolidates, because it plainly is. It is what the remaining independents get bid up to as the shelf empties, and which category gets this exact treatment next. Our money is on AI agent security proper, the layer that governs what agents do rather than who they are, following the identical path over the next year: niche, then funded, then a bidding war. We will, no doubt, be writing that we told you so.

The Trident Take: none of this changes the advice we gave when we first flagged the category, it sharpens it. Where the acquisitions cluster is where the durable jobs are, and the people who understood non-human identity early are now among the most sought-after in the market. The lesson for anyone building a career is not to chase this wave, which is already cresting, but to read the next one the way the smart money is reading this one. If you want the tell, watch where the platforms start quietly acqui-hiring before they start publicly acquiring. That is usually where we are pointing clients six months before the headlines catch up.

Website - oasis.security

Four months ago, Oasis Security raised $120 million. This week it agreed to sell for roughly a billion dollars. That is the pace of the category it helped create.

The Company. Oasis was founded in 2022 by Danny Brickman and Amit Zimerman, and it builds what it calls agentic access management: a framework for a computing environment in which machine identities, service accounts, workloads and AI agents vastly outnumber human users. The core argument, which sounded early in 2022 and looks prescient now, is that non-human identities are the security problem of the AI era, because every agent and workload needs credentials, and every credential is a way in.

The Deal. Cyera has signed a letter of intent to acquire Oasis for approximately $1 billion, with about $700 million in cash and the balance in Cyera shares. For Cyera, a company that has redefined itself around securing data, the logic is direct: data is reached through identities, increasingly non-human ones, so owning that layer extends its platform into the fastest-moving corner of the market. In Brickman's own words, Cyera redefined data security while Oasis focused on redefining identity security for the AI era, and the combination lets both happen faster.

The Backers. Oasis had raised approximately $195 million since 2022, most recently a $120 million Series B led by Craft Ventures in March, with existing investors Cyberstarts, Sequoia Capital and Accel following on. A Series B to a billion-dollar exit in roughly four months is extraordinary by any historical standard, and only makes sense in a market repricing non-human identity in real time.

The Acquirer. Cyera is on a tear. It has raised around $2.3 billion to date, reportedly triples its recurring revenue every year, and has grown past 1,500 employees across 18 countries in eighteen months. Oasis is the largest in a string of acquisitions that already includes Genie Security and Ryft this year, and Trail Security, Otterize and Shape AI before them. This is what a category leader looks like when it decides to buy the whole stack rather than build it.

The Takeaway. If you needed a single data point to prove that non-human identity has arrived, this is it. A four-year-old company, securing the machine identities that now outnumber humans many times over, selling for a billion dollars to a data-security giant that concluded it could not afford not to own the category. For founders and operators in identity, the message is that this is where the value and the urgency now sit. Our Insider Insight this week digs into why.

Ready to make your next move? These roles won't stay open long.

One prediction per month.

July 2026 Prediction: A private-equity firm takes a public cybersecurity company private this quarter, in a deal worth $3 billion or more, and Thoma Bravo is the likeliest name on it.

The Logic: Last quarter set it up. Private equity ran 115 cyber deals between April and June, more than any strategic buyer, as the market tipped from building companies to buying them. Consolidation at that scale is Thoma Bravo's home ground. The firm is sitting on a record fund of more than $24 billion, has just pulled back from growth equity to concentrate on buyouts, and has spent twenty years proving that more or less any cyber company valued under about ten billion dollars is fair game, from Proofpoint at $12.3 billion to SailPoint at $6.9 billion to Darktrace at $5 billion. Public cyber valuations have slid well off their peaks, which is exactly the setup private equity waits for: profitable businesses the market has stopped rewarding, cheaper to buy and easier to fix out of the public eye. Keyfactor taking a billion dollars from Summit Partners this month is the same thesis at work in the private markets. What could prove us wrong is timing, since take-privates take months to line up and the next one could just as easily slip into Q4, which is exactly what makes calling it for this quarter bold.

Prediction Tracker

Note on the June call: we named Oasis Security and Token Security as the obvious independent targets. Cyera bought Oasis this month. The thesis holds, the shelf is just emptying faster than expected.

Have market intelligence to share? Our network sees deals before they're announced, hiring freezes before they're public, and technology shifts before they hit the headlines.

Send us your tips:

Email: [email protected]
All sources protected. We verify before we publish.