Every UK enterprise that deployed an AI agent in 2026 created a security problem they had not fully planned for. The agent needed data access. It got it. And unlike a human employee who exercises judgement about what they look at, the AI agent accessed everything it was technically permitted to reach — customer records, financial documents, legal contracts, HR files — whether or not that access was necessary for the task. Follow every UK startup and tech story at BestStartup UK.
On September 22 2026, Cyera raised $400 million from Growth Equity at Goldman Sachs Alternatives — at nearly a $2 billion post-money valuation. This is one of the largest single cybersecurity financing rounds of 2026, and it is entirely focused on one problem: stopping AI agents from seeing everything they should not.
Why AI Agent Security Is the Biggest UK Enterprise Risk in 2026
UK enterprises have adopted AI agents faster than their security teams have been able to govern them. According to NCSC guidance updated in early 2026, AI agent deployments now represent one of the fastest-growing categories of unmanaged access risk in British organisations — particularly in financial services, legal, healthcare and government-adjacent sectors where data classification requirements are strict and the consequences of unauthorised access are severe.
The problem is structural. The permission frameworks that UK enterprises built for human employees — role-based access controls, data classification policies, audit trails — do not translate cleanly to AI agents. A human employee has a defined job function, a line manager who approves access requests, and an HR record documenting what they are permitted to do. An AI agent has a system prompt, a set of tool permissions, and the ability to execute hundreds of data access operations per minute across dozens of connected systems simultaneously. Without deliberate, AI-native access controls, that agent will access far more than it needs. Read more UK tech and cybersecurity stories at BestStartup UK.
What Cyera Builds
Cyera is an AI-native data and identity security platform. It controls what every person, machine and AI agent inside an enterprise is permitted to see and do — and monitors for violations in real time. Through its acquisition of Oasis Security earlier in 2026, Cyera combined AI agent monitoring with non-human identity management into one integrated platform.
That combination matters for UK enterprises specifically. The fastest-growing category of enterprise identity in British organisations is not new human employees — it is non-human accounts. Service accounts, API integrations, automation scripts, AI agents. Most large UK organisations already have more non-human identities than human ones in their systems, and that ratio is widening rapidly as AI adoption accelerates. A security platform that manages human identity without managing non-human identity is already incomplete for the 2026 enterprise environment. Cyera manages both. Follow UK startup and enterprise tech news at BestStartup UK.
Why Goldman Sachs Led This Round
Goldman Sachs Alternatives does not lead $400 million growth equity rounds on sentiment. It leads them on commercial metrics. Cyera’s total capital raised now exceeds $1.9 billion — making it one of the best-funded cybersecurity companies in the world. Evolution Equity led the original Series G. Goldman Sachs led the extension. Two separate institutional-quality investors choosing to lead the same round at different moments is the strongest possible commercial validation signal in private markets.
For UK enterprises evaluating AI security vendors, the Goldman Sachs financing is a signal worth noting. It means Cyera has the capital runway to build enterprise-grade products at scale, to expand its EMEA operations — which include a growing UK customer base — and to continue its M&A strategy to add capabilities through acquisition rather than waiting for organic development timelines. Also read: Xapien raises $56M Series B for AI due diligence and Nexeon raises £100M from the National Wealth Fund. Follow every UK startup story at BestStartup UK.
Key Takeaways
Cyera raised $400 million from Goldman Sachs Alternatives on September 22 2026 at nearly $2 billion valuation. Total capital raised exceeds $1.9 billion. AI-native data and identity security platform controlling access for people, machines and AI agents. Acquired Oasis Security combining agent monitoring with non-human identity management. UK enterprises face identical AI agent governance challenges — financial services, legal, healthcare and government sectors most exposed. Goldman Sachs financing delays IPO while funding product and M&A expansion including EMEA growth.
Frequently Asked Questions
What is Cyera and what does it do?
Cyera is an AI-native data and identity security company that controls what every person, machine and AI agent inside an enterprise can access. It combines AI agent monitoring with non-human identity management through its acquisition of Oasis Security.
How much did Cyera raise in September 2026?
Cyera raised $400 million from Growth Equity at Goldman Sachs Alternatives on September 22 2026, at nearly a $2 billion post-money valuation. Total capital raised now exceeds $1.9 billion.
Why is AI agent security a major risk for UK enterprises?
AI agents access data automatically and at scale without the judgement a human employee exercises. UK enterprises in financial services, legal, healthcare and government-adjacent sectors face particular risk as existing access control frameworks were built for human employees and do not translate to AI agent behaviour.
Where can I follow UK startup and tech news?
Follow every UK startup funding round and tech story at BestStartup UK — updated every week.
