Data security posture management gets another mega signal
Category and buyer: large enterprises are paying for data security posture management (DSPM) to continuously discover where sensitive data lives, who can access it, and how it is being used for analytics and AI workloads. The pain being removed is practical and urgent: sprawling cloud data estates and fast-moving AI projects create blind spots that traditional security stacks struggle to keep current.
Cyera has raised EUR 380 million (reported as $400 million) in a Series F funding round at a $9 billion valuation, according to TechCrunch. The round was led by Blackstone, with participation from investors including Sequoia Capital and Accel. Total funding now exceeds $1.7 billion.
The financing is the latest proof point that DSPM has moved from an emerging category into a core budget line for CISOs and data leaders, especially as organisations push more data into AI pipelines.
Why this round matters
Cyera’s valuation has accelerated quickly. The Series F triples the company’s valuation from a year ago and follows a valuation of $6 billion six months earlier, signalling sustained investor appetite for platforms that sit close to the data layer.
The company is also showing traction that buyers care about: Cyera says it serves 20% of the Fortune 500 and has tripled revenue in the last year. Named customers include AT&T and Chipotle.
For enterprise software, those metrics point to a few durable go-to-market advantages:
- High switching costs: once a DSPM tool is embedded across cloud accounts, data stores, and identity systems, replacing it is operationally risky and time-consuming.
- Expansion dynamics: DSPM typically starts as a security project, then expands as data teams and AI initiatives require broader visibility and governance.
- Implementation depth: integrations into cloud and data ecosystems create stickiness and can anchor multi-year renewals.
Strategic read: DSPM as an AI-enabler, not just a control
Cyera positions itself as an AI-native data security platform aimed at addressing AI-related security risks, with management emphasising the need to protect AI transformation while enabling secure use of data for AI applications.
This positioning matters commercially because DSPM increasingly sells as an “unlock” product: organisations are not only trying to reduce breach risk, they also want to use data more aggressively across LLM and analytics workflows without losing control. The more DSPM is tied to enabling AI projects, the more resilient the spend can be.
Where the money goes
Cyera said the funds will be used to accelerate product innovation, expand globally and deepen ecosystem partnerships. The company plans expansion across 15 countries spanning North America, EMEA (including Europe) and APAC, and highlighted partnerships such as Microsoft Purview and AWS.
It also plans to continue hiring, building on a headcount of about 1,100 employees.
From an execution standpoint, these are the levers that typically determine whether a fast-growing security vendor can keep conversion and retention strong at scale:
- Field capacity and enterprise coverage: scaling sales teams without lengthening sales cycles or diluting deal quality.
- Partner-led distribution: making cloud and data platform alliances more repeatable in procurement and implementation.
- R&D velocity: staying ahead as hyperscalers and incumbent security vendors add adjacent features.
Competitive context
DSPM sits at the intersection of security, data governance, and cloud operations. That creates opportunity, but also competitive pressure: platform vendors can bundle adjacent capabilities, and large enterprises often prefer fewer tools.
Cyera’s bet is that a dedicated, AI-native DSPM platform can deliver faster time-to-value and deeper data-layer visibility than broader suites. The company’s reported enterprise penetration suggests this message is landing in complex environments where data estates span multiple clouds and teams.
What this enables
- Faster product build-out to address AI-driven data risk and policy needs
- More direct enterprise coverage across EMEA and APAC
- Deeper integrations with cloud and data ecosystems such as Microsoft and AWS
- Continued hiring to support deployment and customer expansion
What to watch
- Whether valuation momentum translates into sustained net retention as deployments broaden
- How quickly Cyera can scale internationally without creating services-heavy delivery
- Competitive responses from major cloud and security platforms that can bundle DSPM-adjacent features
- Proof points that DSPM is becoming a standard prerequisite for enterprise AI rollouts