Cyera.
A Unit 8200 pedigree built a unified data-and-identity security platform — now positioning as the trust layer for the agentic enterprise
We view Cyera as a 2021-vintage, AI-native data and identity security company built out of New York and Tel Aviv by co-founders Yotam Segev (CEO) and Tamar Bar-Ilan (CTO), both alumni of Israel’s elite Unit 8200 military intelligence corps. The two built and ran Unit 8200’s cloud security division together before founding the company, and first connected years earlier through Talpiot, the IDF’s selective leadership-and-technology academy, where Segev went on to serve as a senior class commander.
Co-founder Bar-Ilan has framed the company’s premise around the idea that identity and data are “two sides of the same coin” and simultaneously the two fastest-growing attack surfaces in the enterprise. That view shaped Cyera’s product sequencing from the outset: establish where sensitive data lives, then determine who — or what — can reach it. We read this sequencing as having quietly set up the logic for the 2026 Oasis Security acquisition years in advance, which in our view lends the founding thesis an unusual degree of internal consistency.
Former Head of the Cyber Department within Israeli military intelligence; co-built Unit 8200’s cloud security division. Holds a degree in computer science and physics from the Hebrew University of Jerusalem. Has led Cyera as CEO since its 2021 founding, based in New York and driving customer acquisition and capital-markets strategy.
Co-ran Unit 8200’s cloud security division alongside Segev, building deep technical grounding in data and identity management. Leads Cyera’s data classification engine and overall AI/ML architecture as chief technology officer.
Israeli trade press (CTech) has referenced a third founding partner, Yonatan Itay, overseeing engineering and Israel operations; this is a single-source attribution, and the company’s own English-language materials consistently describe a two-person founding team (Segev and Bar-Ilan). We would treat any third-party equity or title claim as unverified pending independent confirmation.
The board includes Douglas Leone, Sequoia Capital’s former “senior steward,” while Cyberstarts general partner Lior Simon has advised the company since inception. Jason Clark — formerly chief security officer at Netskope and a Cyberstarts advisor to Cyera pre-founding — joined formally as chief strategy officer alongside the 2024 Series C. We read the recurring presence of Sequoia- and Cyberstarts-linked operators across the board and executive bench as a structural accelerant for both fundraising velocity and enterprise sales credibility.
We characterize Cyera’s business model as an expansion from data security posture management (DSPM) into a broader “data plus identity” trust layer. The core platform is agentless: security teams grant read-only access at the cloud-organization or account level, and Cyera scans hybrid cloud, SaaS, database, and on-premises environments without deploying software agents or hardware. An AI/ML classification engine auto-tags sensitive data — PII, PHI, financial records, and the like — against business context and regulatory requirements, establishing what sensitive data exists, where it sits, and who or what can reach it.
| Product / Asset | Function | Notes |
|---|---|---|
| Cyera Core (DSPM) | Automated discovery, classification, and risk visibility for sensitive data across cloud, SaaS, database, and on-prem environments | Original flagship product; agentless deployment is the primary differentiator versus legacy DSPM peers |
| Agent Guardian | Tracks AI agent tool calls, database queries, and end-to-end actions — not just prompts and responses | Launched August 2026; extends coverage to local coding agents such as Claude Code and Cursor |
| Cyera Endpoint | Extends agent visibility from cloud workloads down to endpoint devices running local AI agents | Deployed alongside Agent Guardian as the core of the 2026 AI-security roadmap |
| Oasis Security (acquisition) | Non-human identity (NHI) management — governs access for service accounts, API keys, and AI agent identities | Announced July 2026, closed September 3, 2026; deal size $1B. The linchpin deal binding the data layer to the identity layer |
The $150M+ ARR figure and the “more than 3x” 2025 revenue growth claim originate from TechCrunch, Calcalist, and Sacra citing unnamed sources rather than audited company disclosure; a Cyera spokesperson has directly disputed the figures as “factually and significantly inaccurate.” As a private company, Cyera does not publish audited financial statements, and we would treat these metrics as unverified reference points rather than confirmed fundamentals. Separately, TechCrunch reported that the company is spending cash faster than it is generating revenue — we see no confirmed evidence of a path to profitability at this stage.
Disclosed customer references include Paramount, Chipotle, and Valvoline, with LifeLabs and Mercury Financial cited among earlier-stage financial services and healthcare logos. In our view, Cyera’s customer concentration in large enterprises with complex hybrid data estates, combined with mid-six- to low-seven-figure annual contract values, points to a land-and-expand motion — moving from single-product DSPM sales toward a broader data, identity, and AI-governance platform sale designed to lift net revenue retention and, by extension, the valuation case.
We would summarize Cyera’s fundraising trajectory as roughly a 2,500x-plus step-up in valuation in under five years. From a December 2020 seed round through the $400M Goldman Sachs Alternatives investment in September 2026, cumulative capital raised exceeds $2.7 billion, and reported valuation has moved from well under $1 billion at the Series A stage to more than $12 billion. Round cadence has also compressed to five-to-seven-month intervals since 2024, which we read as a signal of unusually strong conviction in the AI-security category rather than routine growth financing.
Early backing from Cyberstarts (Lior Simon) and Lightspeed Venture Partners. No public marketing push at this stage — the founders were still defining the data-visibility problem and building the initial product.
⚑ Reported post-money valuation for this round ranges from $62M to $200M across sources and warrants cross-referencing.
Co-led by Accel, Sequoia Capital, and Cyberstarts. Sequoia’s Douglas Leone, then the firm’s “senior steward,” led the deal on Sequoia’s behalf and subsequently joined the board. Proceeds funded early product-market fit work and initial go-to-market hiring.
Led by Accel, with Redpoint Ventures joining as a new investor. Cumulative funding reached roughly $160M. Capital was directed at scaling the enterprise sales organization and broadening cloud-connector coverage.
Led by Coatue, roughly a 2.8x step-up from the Series B valuation. Spark Capital, Georgian, and AT&T Ventures joined as new investors, broadening the cap table into telecom and growth-equity capital. Jason Clark, former Netskope CSO, joined formally as chief strategy officer.
Sapphire Ventures joined as a new investor. Valuation more than doubled in seven months, coinciding with a broader surge of capital into the data-security category as enterprise AI adoption accelerated.
Co-led by Georgian, Greenoaks, and Lightspeed Venture Partners. Roughly $100M of proceeds were earmarked for secondary sales by early employees and founders — a retention-oriented structure typical of growth-stage rounds of this size.
A Blackstone-managed fund led the round, marking the first entry of large-scale private equity capital. Cyera disclosed at the time that roughly one-fifth of its customer base was Fortune 500. Cumulative funding surpassed $1.7 billion.
Cyera acquired Oasis Security, an access-management platform for the agentic enterprise, in a deal valued at $1 billion. Announced July 2026 and closed September 3, 2026. The acquisition welds Cyera’s data layer to Oasis’s non-human identity (NHI) layer into a single platform and became the central thesis behind the subsequent Goldman Sachs investment.
Led by Evolution Equity Partners, with Temasek Holdings joining as a new investor. A further 33% valuation step-up just five months after Series F. Reported at roughly 80x the company’s estimated $150M+ ARR at the time — an unusually rich multiple even by growth-stage cybersecurity standards.
Growth Equity at Goldman Sachs Alternatives joined as an extension to the existing Series G (led by Evolution Equity Partners). Management has characterized this as a non-priced extension, stating the valuation remains “more than $12 billion” — meaning no incremental markup versus the June round has been formally confirmed. Proceeds are earmarked for continued AI-security product development, federal-market expansion, and international growth across EMEA and APAC.
The Goldman Sachs round is structured as a non-priced extension, and the market has not been given a clear confirmation of whether the June Series G’s $12 billion valuation has been held flat or marked up. We view this as a familiar pattern of declining pricing transparency in late-stage up-rounds, and would flag the need to reconcile actual mark-to-market valuation at the next priced round or, ultimately, at an IPO.
The data security posture management (DSPM) market remains fragmented, with BigID, Varonis, Wiz (via its broader CNAPP), Sentra, Microsoft Purview, and Securiti all competing for enterprise budget. In our assessment, Cyera has built structural differentiation across three axes: product architecture, M&A strategy, and the composition of its capital base.
Most peers — BigID, Varonis, Wiz — specialize in either data discovery/classification or access governance, not both. The Oasis Security acquisition positions Cyera among the few vendors connecting “where the sensitive data is” to “who or what can reach it” inside a single platform — a scope even Forrester co-leader BigID has not yet matched.
Agent Guardian and Cyera Endpoint track AI agent tool calls, database queries, and actions — not just prompts and responses. With Fortune 500 non-human identities growing roughly 5x in six months, we see Cyera capturing first-mover advantage in a category most rivals have yet to enter in earnest.
Scanning via read-only cloud permissions, with no software agents or hardware to install, compresses time-to-value to days rather than the weeks typical of on-prem-legacy competitors such as BigID and Varonis — a structural edge in urgent, board-driven procurement cycles following a competitor breach or a compliance deadline.
The investor roster has progressed from early venture backers (Sequoia, Accel) to Blackstone (Series F), Temasek (Series G), and now Growth Equity at Goldman Sachs Alternatives (Series G extension) — a strong credibility signal to enterprise security buyers, and Goldman’s participation in particular hints at potential distribution through its own client network.
Paramount, Chipotle, and Valvoline anchor a marquee reference base as the company shifts from single-product DSPM sales toward a broader data, identity, and AI-governance platform sale — a motion aimed squarely at lifting net revenue retention to justify the valuation multiple.
A founding team drawn from the same elite Israeli intelligence pipeline that produced Check Point, Palo Alto Networks, and Wiz carries structural advantages in early engineering recruitment, VC network access, and follow-on M&A deal sourcing within the same ecosystem — as illustrated by the Oasis Security acquisition.
Varonis (NASDAQ: VRNS) is the only publicly traded pure-play in DSPM and discloses audited quarterly financials, while Cyera, BigID, and most other direct competitors remain private with no equivalent transparency. We would factor this information asymmetry into any relative-value comparison, and would flag Microsoft Purview’s deep bundling into Microsoft 365, Azure, and Copilot as arguably the most durable structural competitive threat over the long run.