Cyera is closing in on a $300 million funding round at a $12 billion valuation, according to reports. That’s 80 times its annual recurring revenue. The company is still operating at a loss.

Those numbers would normally raise eyebrows. But in the current market, they make perfect sense. Cyera sells data security posture management software, which helps companies figure out where their sensitive data lives, who has access to it, and whether AI systems might leak it. As enterprises rush to deploy AI agents and language models across their operations, that’s become a critical problem.

Evolution Equity Partners is leading the round. The valuation represents a significant step up from Cyera’s last raise in 2024, when Sequoia and Accel led a $300 million Series C at a reported $3 billion valuation.

The AI security premium

The valuation multiple is eye-popping, but it reflects a broader trend. Security companies that can demonstrate they’re solving AI-specific problems are commanding significant premiums right now.

Anthropic is scaling up its own security efforts. The company announced this week it’s expanding Project Glasswing, its vulnerability detection program, to 150 organizations across 15 countries. The focus is on critical infrastructure in power, water, healthcare, and communications, sectors where a successful cyberattack could affect 100 million people. Anthropic’s Claude Mythos model is now being deployed to hunt for security vulnerabilities in systems where AI-powered threats pose the biggest risks.

Microsoft and Google are both shipping new security features aimed at AI-specific threats. Google rolled out fake call detection to protect against deepfake impersonation scams, where attackers use AI voice synthesis to spoof trusted contacts. Amazon is facing a class action lawsuit over Ring’s Familiar Faces feature, which allegedly stores facial recognition data without consent.

The pattern is clear. As AI systems get more powerful and more widely deployed, the security risks multiply. Cyera’s valuation reflects investor belief that data security posture management will be essential infrastructure in that world.

What Cyera actually does

The company’s software continuously scans an organization’s data stores, cloud environments, and SaaS applications to build a real-time map of where sensitive information lives. It classifies data automatically, tracks access patterns, and flags potential exposures before they become breaches.

That’s valuable in any environment. But it’s especially valuable when you’re feeding corporate data into large language models. Companies need to know what data their AI systems can access, how those systems might use or leak it, and whether they’re complying with regulations like GDPR or industry-specific data handling requirements.

Cyera isn’t the only player in this space. Competitors include Normalyze, Dig Security, and larger incumbents like Varonis and BigID. But Cyera has moved aggressively to position itself as the AI-native option, with specific features for monitoring how AI models interact with sensitive data.

The operating losses don’t matter yet

The company is still unprofitable, but that’s not unusual for enterprise security startups at this stage. They’re investing heavily in sales and engineering to grab market share while the category is still forming. Evolution Equity Partners clearly believes Cyera can reach profitability at scale.

The bigger question is whether the AI security market will be as large as the valuation implies. If every company deploying AI needs robust data security posture management, then Cyera’s valuation makes sense. If most companies decide they can manage these risks with existing tools and processes, the multiple looks harder to justify.

Right now, the evidence points toward the former. Microsoft just launched Scout, an AI assistant that lives inside Teams and can access corporate data to automate office tasks. OpenAI released six new Codex plugins for specific white-collar jobs, each designed to plug into existing enterprise systems. These aren’t experimental features anymore. They’re shipping products that companies are actually deploying.

And every one of them represents a potential data security problem that Cyera is positioning itself to solve.

What it means

The Cyera round is part of a larger shift in enterprise software. AI capabilities are moving from nice-to-have features to core infrastructure. That creates new security requirements, and investors are betting heavily on companies that can meet them.

It’s also a reminder that not all AI investment is going directly into model development or consumer applications. A significant amount is flowing into the infrastructure and security layers that make AI deployment possible at scale.

Cyera’s 80x multiple might look aggressive, but it reflects a simple calculation. If AI agents are going to have access to corporate data systems, someone needs to make sure they don’t leak trade secrets, customer information, or regulated data. That’s not a hypothetical future problem. It’s happening right now, and companies are willing to pay for solutions.