Cyera Just Hit a $12 Billion Valuation Selling Companies the One Thing AI Can't Have Without Permission

A cybersecurity startup quadrupled its valuation in 18 months because every company racing to deploy AI agents has the same terrifying blind spot.

Cyera has raised $600 million at a $12 billion valuation, doubling its value in roughly one year as investors bet that controlling enterprise data will become one of the most valuable layers of the AI boom. That’s not a typo. The valuation has gone up fourfold in 18 months, from $3 billion in late 2024 to $12 billion today. Mannpublication

The round was led by Evolution Equity Partners, with participation from Accel, AT&T Ventures, Blackstone, Coatue, Spark Capital, Cyberstarts, and Temasek. Total funding now exceeds $2 billion, making it one of the most valuable privately held cybersecurity firms in the world. Yahoo!

Here’s the number that actually explains why investors are throwing this much money at a data security company: 68% of organizations cannot tell the difference between human activity and AI agent activity inside their own systems. Read that again. Most companies racing to deploy AI agents have no idea what those agents can see, touch, or do once they’re turned loose on internal data. FinSMEs

The AI industry built out chips, models, and compute. What’s still missing is the layer that governs what AI can actually see and do, and how to handle the risk that creates. Cyera is betting the entire $12 billion valuation on being that layer. FinSMEs

The growth numbers back up the bet. Annual recurring revenue has tripled for three consecutive years, and the company has expanded to more than 1,500 employees across 18 countries in the past 18 months, completing five acquisitions along the way. Customers reportedly include Paramount, Chipotle, and Valvoline, using Cyera to control exactly what data their AI systems can reach. PR Newswire

I want to apply constraint identification here, one of the models in my book. Every founder eventually has to answer one question correctly: what’s actually blocking growth in this market? Most AI infrastructure plays have chased compute, chips, or model performance. Cyera’s bet is that none of that matters if a company doesn’t trust its own data enough to let AI near it. They identified the real constraint wasn’t capability. It was permission.

That’s a sharper read than it sounds. A lot of founders solve impressive technical problems nobody was blocked on. Cyera found the boring, unglamorous gate that every single enterprise has to walk through before AI adoption becomes real, and they built the gatekeeper.

Here’s my contrarian take: a $12 billion valuation for a company at this stage isn’t really a bet on Cyera’s product. It’s a bet that data security posture management becomes one of the most valuable layers of the entire AI economy, and right now Cyera is simply the company furthest along in claiming that territory. That’s a real opportunity, but it’s also a crowded one. The company competes with established security vendors and startups spanning cloud security, data discovery, access governance, and AI protection, and a premium valuation increases the pressure to expand revenue and prove the products work together as one system, not just a pile of acquisitions. MannpublicationsMannpublications

I’ve spent my career building inside regulated markets, first at Robinhood, now at /mkt, where every product decision runs through a layer of compliance and trust before it ever reaches a user. The companies that win in regulated spaces aren’t the ones with the flashiest tech. They’re the ones customers trust enough to hand over the keys. Cyera is making the same wager at enterprise scale: trust is the actual product, and everything else is just the delivery mechanism.

If this was useful, share it with someone who builds things. And if you want the full toolkit of 50 mental models, my book is coming soon.