We may earn a commission when you buy through links on this page. It doesn't change what we recommend.
Proofpoint has agreed to buy Varonis for about $6.3 billion in cash, and the Proofpoint Varonis acquisition is one of the year’s larger cybersecurity deals. The companies announced it on October 15. Varonis shareholders would get $49.75 a share. That’s a 52 percent premium to the $32.71 the stock closed at on June 22, the last full trading day before the first sale rumors. Proofpoint, an email and data security company owned by the private equity firm Thoma Bravo, expects to close in the first half of 2027.
This article explains what the Proofpoint Varonis acquisition includes, why an email security company wants a data-access specialist, and what it could mean for customers and shareholders.
What’s in the Proofpoint Varonis acquisition
The headline price is $49.75 per share in cash. That’s 17 percent above Varonis’s $42.35 close on September 1, the last full trading day before later media reports, according to the companies’ press release. The release says the price works out to about 8.4 times trailing revenue and about 53 times trailing free cash flow, as of June 30. Ynetnews puts the equity value at about $5.71 billion and says Varonis shares rose about 2.7 percent in after-hours trading.
Thoma Bravo is providing equity and has lined up debt financing, and Ontario Teachers’ Pension Plan has agreed to invest in Proofpoint. Varonis’s board approved the deal unanimously. Independent directors ran a review that included outreach to strategic and financial buyers. The deal still needs approval from Varonis shareholders and regulators. Until it closes, the two companies keep operating separately. Varonis will report third-quarter results on November 3 without a conference call. When the deal closes, its stock leaves the Nasdaq.
Some details aren’t public. The release doesn’t give a termination fee, Varonis’s annual recurring revenue, or its customer count.
Varonis was founded in 2005 by Yaki Faitelson and Ohad Korkus, who had worked at NetVision and NetApp. Ynetnews says it’s headquartered in Miami, with a major research center in Herzliya, Israel. It went public on the Nasdaq in 2014 and moved from perpetual licenses to subscriptions in 2019. It has bought smaller firms too, including database-monitoring company Cyral and phishing-detection company SlashNext, so this wouldn’t be its first combination.
Why Proofpoint wants Varonis
Proofpoint is best known for email security and data loss prevention. Varonis specializes in the files and documents scattered across corporate networks and cloud services, and in who can open them. SiliconANGLE says Varonis’s data mapping and access controls would join Proofpoint’s email, collaboration and data loss prevention products on one platform. The combined company says it would serve more than 16,000 enterprises. Proofpoint says more than 80 of the Fortune 100 already use its products.
The pitch is about AI. CRN reports that Proofpoint chief executive Sumit Dhawan sees the next big shift in security as protecting the data that feeds AI, and controlling what both people and AI agents can reach. That fits a problem we’ve covered, such as OpenAI’s disclosure of models acting without permission. An agent can open anything its owner can, so knowing where sensitive data sits and who can reach it becomes a basic control. Varonis launched a product called Atlas earlier this year to monitor AI systems and agents, Ynetnews notes.
Proofpoint says it scans 2.37 trillion emails and ingests 410 billion data security events a year, signals CRN says it feeds into a knowledge graph that strengthens its AI models. Dhawan argues that Varonis’s view of sensitive data, access rights and usage would complement them. Scale tells the rest. Ynetnews reports Varonis had about $660 million in revenue over the four quarters ending in March, and about 2,700 employees. Proofpoint’s annual recurring revenue was $2.45 billion at the end of 2025, and CRN says it closed a $1.8 billion purchase of Hornetsecurity in December. This is its second billion-dollar deal in about a year.
What the Proofpoint Varonis acquisition means for customers
For customers, nothing changes yet. The companies operate separately until closing, which is months away. After that, Proofpoint says it plans to integrate products and sales teams quickly. It hasn’t said what happens to pricing, product lines, support contracts or jobs, and CRN notes that the announcement doesn’t address partner programs. If you use either product, watch for notices about renewals, because deals like this often change packaging.
Shareholders face a simpler choice. They get cash at a large premium to where the stock traded in June, but the price is only 17 percent above the September level, after takeover reports had already lifted the shares. Varonis’s chief executive called the offer “a realization of immediate, significant, and certain value” in the press release. Whether holders agree is a vote still to come. This is general information, not investment advice.
Private equity’s bet on security
Thoma Bravo took Proofpoint private in August 2021 for about $12.3 billion, Ynetnews says. Now the same owner is using Proofpoint to buy a public company, with debt financing behind it. The release lists the usual risks: regulators could object, shareholders could vote no, litigation could follow, and financing could fall through. Cybersecurity has seen steady consolidation, and the Proofpoint Varonis acquisition continues it. For a related look at how security risk is being priced, see our piece on AI liability insurance exclusions.
What to watch next
Watch the Varonis shareholder vote date, any regulatory review, the November 3 results, and the first integration plans. Also watch whether rivals respond with deals of their own. The gap between Varonis’s trading price and the $49.75 offer is worth a look too. A wide gap would suggest the market sees real risk that the deal doesn’t close, while a narrow one would signal confidence.
Editor’s take
The Proofpoint Varonis acquisition is a bet that AI makes data access the main security problem, and that customers will pay one vendor to cover email, files and agents together. That logic is reasonable. The risks are execution and cost: platform deals often promise simplicity before the integration is done. Customers should ask for roadmap commitments in writing, and shareholders should read the proxy statement before the vote.
