Cyera Pricing 2026

Key Takeaways

• Cyera's standard AWS Marketplace packages start at $50,000 annually for up to 25TB of data and reach $250,000 annually for up to 250TB. AWS Security Hub separately publishes per-TB Cyera DSPM pricing for estates of 250TB and above and lists DataWatcher at 12% of total spend.
• The commonly cited $2,000/TB/year and $1,000/TB/year figures are effective rates only at the maximum included capacity of the applicable AWS Marketplace package. Because each package covers up to a stated capacity, effective cost per TB rises when actual usage is below the package maximum.
• Direct Cyera pricing is custom. Cyera's public pricing page currently presents DSPM and DLP as its two broad plans, with Data Subject Request Automation and DataWatcher listed as optional add-ons.
• Cyera now spans more than DSPM. Its current platform materials describe DLP, browser controls, endpoint enforcement, AI runtime protection, Agent Guardian, Cyera MCP, and related data and identity capabilities.
• The reviewed public pricing pages do not specify every billing variable. The AWS Marketplace and Cyera pricing pages do not define standard overage mechanics or explain how duplicate, replicated, archival, and multi-cloud data are treated for billing.
• Nightfall pricing uses an annual per-user model, with final pricing also affected by user count and data volume. Nightfall is the AI security platform built to control AI agents and all data they touch, with a unified control plane across supported SaaS, endpoints, browsers, email, AI applications, and MCP workflows.

Evaluating Cyera pricing in 2026 requires separating public AWS procurement options from Cyera's custom enterprise pricing. On September 22, 2026, Cyera announced a $400 million Series G extension from Goldman Sachs Alternatives at a valuation of more than $12 billion. SecurityWeek reported that the investment brought Cyera's total funding to more than $2.7 billion.

For buyers, the more practical pricing questions concern data volume, products in scope, deployment footprint, infrastructure, services, and the commercial model attached to each capability.

Public Cyera Pricing Through AWS Marketplace

AWS Marketplace currently lists three 12-month Cyera packages. These packages represent one public procurement route rather than Cyera's complete pricing model.

AWS Marketplace pricing tiers:

• Standard: up to 25TB for $50,000/year, equal to $2,000/TB/year only when the full 25TB allowance is used
• Business: up to 100TB for $100,000/year, equal to $1,000/TB/year only when the full 100TB allowance is used
• Enterprise: up to 250TB for $250,000/year, equal to $1,000/TB/year only when the full 250TB allowance is used

The effective per-TB cost depends on utilization because each package is defined as covering up to a stated capacity. A customer using 10TB under the 25TB Standard package, for example, has an effective license cost of $5,000 per TB.

For larger estates, AWS Security Hub lists Cyera DSPM at $73/TB/month for 250 to 500TB, $65/TB/month for 501 to 1,000TB, and $53/TB/month for 1,001TB and above, with a 250TB minimum. The same AWS page separately lists DataWatcher at 12% of total spend.

AWS Marketplace states that additional AWS infrastructure costs may apply beyond the Cyera contract price.

Volume-pricing considerations:

• The reviewed public pricing pages do not define standard overage mechanics for the 25TB, 100TB, and 250TB Marketplace contracts.
• The reviewed public pricing pages do not describe how copies across multiple cloud environments are metered for billing.
• The reviewed public pricing pages do not state whether duplicate or replicated data is counted more than once.
• The reviewed public pricing pages do not state whether archival and active data are measured differently for billing.

Cyera Enterprise Pricing Components

Direct Cyera contracts are custom-priced and can differ from public AWS Marketplace packages based on scope, products, term, and commercial conditions. The public pricing sources reviewed do not publish a representative median enterprise contract value.

Pricing components visible from public materials:

• Included products and add-ons. Cyera publicly presents DSPM and DLP as broad plans and lists Data Subject Request Automation and DataWatcher as optional add-ons.
• Support scope. The three standard AWS Marketplace packages include 24x7 support.
• Implementation and professional services. Public pricing does not establish a standard mandatory implementation or professional-services charge.
• Contract duration. The public AWS Marketplace listing uses 12-month package terms, while Cyera's direct pricing model is custom.
• Infrastructure. AWS states that additional AWS infrastructure costs may apply to the Marketplace product.

These factors make contract-level total cost dependent on the exact deployment rather than a single public enterprise benchmark.

How Cyera's DSPM Heritage Affects Value Assessment

Cyera built its platform around Data Security Posture Management and continues to emphasize data discovery, classification, exposure context, and access intelligence across supported environments.

Cyera capabilities relevant to value assessment include:

• Agentless data-store discovery across supported cloud, SaaS, database, and other environments
• AI-based data classification and data context
• Identity and access intelligence connected to data exposure
• Posture management and risk views
• Browser controls for supported AI and web workflows
• Endpoint DLP enforcement on Windows and macOS
• AI runtime protection and Agent Guardian controls
• Cyera MCP for MCP-compatible access to Cyera DataPort intelligence

Cyera's 2026 product expansion means it is no longer accurate to describe the platform as discovery-only. Current materials describe browser and endpoint enforcement, monitoring and blocking for selected AI activities, and runtime controls for agents and tool calls.

Nightfall approaches the problem from a different architectural starting point. Data exfiltration prevention is central to the platform, so prevention can begin without making a separate posture program a prerequisite. Data discovery and classification then complements that prevention model with data-at-rest visibility and remediation across supported environments.

Comparing Cyera's Pricing Model to Per-User Alternatives

Cyera's public AWS packages are primarily bounded by data volume. Nightfall's current pricing model is annual and per user, with final pricing also affected by user count and data volume.

Nightfall AI pricing characteristics:

• Annual per-user pricing across its core packages
• Final pricing that depends on user count and data volume
• 150GB of data-at-rest scanning included, with a paid add-on for additional data volume
• A single platform model spanning data detection and response, exfiltration prevention, SaaS, endpoint, browser, email, AI application, and AI agent security capabilities according to package scope

Cyera volume-based pricing characteristics:

• $50,000 annual public entry point for up to 25TB through the standard AWS Marketplace packages
• Public package pricing tied to data volume rather than user count
• Separate AWS Security Hub per-TB pricing for Cyera DSPM at 250TB and above, with DataWatcher listed at 12% of total spend
• No public standard overage schedule for the 25TB, 100TB, and 250TB Marketplace packages

The economic effect of these models depends on the relationship between workforce size and protected data volume. A smaller workforce with a very large data estate behaves differently under a volume-oriented model than a larger workforce with comparatively modest data volume. Nightfall's final pricing reflects both user count and data volume, so comparable economics depend on using consistent deployment assumptions across models.

Total Cost of Ownership Factors

Software licensing is only one part of total cost. A complete model can include implementation, integrations, internal labor, infrastructure, policy administration, and ongoing investigation work.

Deployment and operating factors include:

• Professional services included in a specific contract
• Integration work for SIEM, ticketing, identity, and other security systems
• Training and operational enablement for security teams
• Policy development and maintenance
• Alert investigation and incident-response labor
• Data-volume growth over the contract term
• Infrastructure and commercial administration

Nightfall is designed to reduce operational overhead through AI-native detection and automation. Its pricing page states that teams can connect a first SaaS application or deploy an endpoint quickly, with pre-trained detectors and out-of-the-box policies providing immediate protection. Nightfall also reports 95% detection precision on customer data during proof-of-value evaluations.

Nightfall's ROI model assumes an 85% reduction in manual investigation time through AI-based detection, investigation, and response. Nyx, Nightfall's autonomous DLP analyst, supports that operating model through incident investigation, policy assistance, summaries, pattern analysis, and risk insights.

Evaluating AI Agent and MCP Security Coverage

Cyera's current platform includes AI and agent-security capabilities. Cyera MCP, announced in March 2026, connects MCP-compatible AI tools to Cyera DataPort. Agent Guardian provides inventory and mapping of agents, models, tools, identities, data connections, and MCPs, together with runtime monitoring and blocking for supported activities. Cyera also describes endpoint monitoring of local AI applications and agents, plus browser and AI runtime controls.

Cyera's 2026 acquisitions expanded the broader platform as well. Ryft added capabilities related to agentic AI security, Genie Security contributed to endpoint DLP expansion, and the completed Oasis Security acquisition added non-human identity management.

Nightfall's differentiation is cross-surface policy and detection. Its MCP security capabilities cover local stdio MCP, remote MCP discovery, supported IDE and coding-agent workflows, and policy enforcement on agent activity. The same detection framework also extends across endpoints and browsers, SaaS, email, and AI applications.

That architecture is important because sensitive data can move across multiple surfaces in one workflow. An employee or agent can access a local file, interact with an IDE agent, invoke an MCP tool, and send data into a SaaS or AI application. Nightfall applies one detection and policy framework across those supported paths rather than treating each surface as an isolated security problem.

Microsoft Purview as a Pricing Baseline

Microsoft Purview is another relevant comparison point for organizations already invested in Microsoft 365. Microsoft currently lists Microsoft Purview Suite at $12/user/month, paid yearly, and Microsoft 365 E5 at $60/user/month, paid yearly. Purview Suite requires Microsoft 365 E3 or Office 365 E3 plus Enterprise Mobility + Security E3, and agreement-specific pricing can affect final amounts.

Purview includes capabilities across DLP, information protection, insider risk management, audit, eDiscovery, compliance, and related Microsoft data-security workflows. Microsoft also made its newer Data Security Posture Management experience generally available in May 2026.

The practical comparison depends on existing Microsoft licensing, required data sources, endpoint and SaaS coverage, AI workflows, and the extent to which an organization wants one policy model across Microsoft and non-Microsoft environments. Nightfall provides a dedicated Nightfall vs Microsoft Purview comparison for this decision context.

Procurement Factors That Affect Cyera Economics

A Cyera pricing model is most sensitive to several scope variables:

• Current and projected data volume, including how much of the contracted capacity is expected to be used
• Products in scope, including DSPM, DLP, privacy, DataWatcher, endpoint, browser, AI, agent, and identity capabilities
• AI and MCP workflows, including local agents, remote agents, tool calls, endpoint activity, browser activity, and supported clients
• Microsoft licensing already in place, which can materially affect the incremental cost of Purview capabilities
• Services and infrastructure, including any professional services and AWS infrastructure charges included in the deployment model
• Contract terms, including package duration, entitlement scope, and treatment of data growth

Public documentation leaves several of these commercial details unspecified, so published package prices are best treated as reference points rather than a complete enterprise TCO model.

Why Nightfall AI Stands Out for Real-Time Data Protection

Nightfall is the AI security platform built to control AI agents and all data they touch. AI moves your data. Nightfall controls it.

The platform is designed around real-time control of sensitive data movement across supported SaaS, endpoints, MCP servers, email, browsers, and AI applications. This creates a single data-security control plane for both human and agentic activity rather than separating traditional DLP from AI-agent governance.

Nightfall's core advantages include:

• Real-time inline prevention that can block, redact, quarantine, encrypt, revoke, coach, or otherwise control sensitive data movement across supported workflows
• One detection brain across surfaces, using consistent content and context signals across SaaS, endpoint, browser, email, AI applications, and AI-agent workflows
• AI-native detection, with Nightfall reporting 95% detection precision and a 99% reduction in false positives
• Unified human and agentic data protection, including local and remote MCP, supported IDE agents, AI applications, endpoints, and SaaS
• Integrated investigation and response, with Nyx supporting automated incident analysis and policy workflows
• Prevention-first deployment, allowing teams to start protecting sensitive data while discovery and risk context develop alongside enforcement
• Shadow AI protection, with controls designed to prevent Shadow AI leakage without requiring organizations to block productive AI use broadly

Nightfall's current pricing is annual and per user, with final pricing based on user count and data volume. Its packaging combines DLP across SaaS, email, GenAI applications, endpoints, and browsers, with an expanded package adding AI-agent and MCP coverage.

For organizations comparing Cyera with an AI-era data protection platform, Nightfall's advantage is architectural consolidation. It brings real-time data movement controls, AI-native detection, insider-risk context, SaaS and endpoint protection, and AI-agent security into one operating model. That makes Nightfall the stronger fit when the primary objective is to control sensitive data as it moves across human and agentic workflows, while still supporting discovery and classification as part of the broader program.

Frequently Asked Questions

Does Cyera offer free trials or proof-of-concept deployments before annual contracts?

Cyera has referenced proof-of-concept evaluations in public customer materials. Its current AWS Marketplace listing shows paid 12-month packages, while Cyera's direct pricing page uses a custom-quote model. Public materials do not define a standard free-trial duration or universal POC structure.

How does Cyera handle multi-year contract pricing?

The reviewed public pricing materials do not publish a standard multi-year discount schedule. The main AWS Marketplace listing exposes 12-month packages, while direct Cyera pricing is custom.

What happens when data volume exceeds the public package threshold?

The reviewed public pricing pages do not publish standard overage mechanics for the 25TB, 100TB, and 250TB AWS Marketplace packages. The Marketplace listing states that a contract provides a specified quantity of use for the contract duration, but it does not publish a standard overage rate or universal mid-contract upgrade rule.

Does Cyera support mixed on-premise and cloud environments?

Yes. Cyera markets on-prem data security for supported files, databases, and application data alongside cloud and SaaS coverage. Significant on-premise use therefore does not automatically imply a separate data-security platform.

How does Cyera's acquisition activity affect product packaging?

Cyera's 2026 expansion included Genie Security for endpoint DLP, Ryft for agentic AI security, and Oasis Security for non-human identity management. Cyera's public materials describe these capabilities as part of its broader platform direction, while long-term packaging across every acquired capability is not fully detailed in public pricing materials.