Proofpoint is acquiring Varonis Systems in an all-cash transaction valued at approximately $6.3 billion, the two cybersecurity companies announced on October 15, 2026. Varonis shareholders will receive $49.75 per share in cash, a 52% premium to the price before sale rumors first surfaced. The deal is expected to close in the first half of 2027, subject to shareholder and regulatory approval, after which Varonis will delist from Nasdaq and become a privately held company. It is the largest cybersecurity acquisition announced in 2026 so far.
The deal at a glance
- Buyer: Proofpoint, the email and human-risk security company owned by private equity firm Thoma Bravo
- Target: Varonis Systems (Nasdaq: VRNS), the data and AI security company
- Price: approximately $6.3 billion, all cash, at $49.75 per Varonis share
- Premium: 52% above Varonis’s $32.71 close on June 22, 2026, the last trading day before initial sale rumors, and 17% above its $42.35 close on September 1, before further media reports on the talks
- Valuation: about 53 times Varonis’s trailing 12-month free cash flow and 8.4 times its trailing 12-month revenue
- Timeline: expected to close in the first half of 2027, pending shareholder and regulatory approval
- Financing: Thoma Bravo is providing committed equity and has secured debt commitments; the Ontario Teachers’ Pension Plan will also invest in Proofpoint
Why Proofpoint is buying Varonis: the AI agent angle
The official line from both companies centers on a single shift: AI agents. Enterprises are now deploying autonomous agents that can read sensitive files, move data between systems, and take actions across corporate networks on their own. That creates a security problem that neither email security nor data classification solves alone.
Proofpoint describes itself as a leader in human and agent cybersecurity. Its portfolio covers email security, data loss prevention, insider threat management, communications archiving, and, increasingly, controls on how employees use AI tools. Varonis is known as a data security specialist: its platform maps where sensitive data lives, classifies it, tracks who can access it, and uses AI-driven automation to spot misuse.
Put together, the pitch is a unified platform that does three things: find and protect sensitive data, control what people and AI agents can access, and stop data loss. Proofpoint intends to integrate the two technology stacks quickly and align go-to-market efforts after closing.
The AI angle is not just marketing language. Varonis acquired AllTrue.ai in February 2026 to extend its platform into AI security, while Proofpoint acquired Acuvity earlier in 2026 for AI usage governance. Both buyers and sellers clearly see AI agents as the next attack surface. Bill Gates recently warned that AI could supercharge cyberattacks within a year, and vendors are racing to sell the defenses before the wave hits.
What Varonis brings to the table
Varonis was founded in 2005 and is headquartered in Miami, Florida, with a major development center in Israel employing around 1,000 people out of a global workforce of roughly 2,800. Its platform focuses on unstructured data: files scattered across shares, cloud storage, and collaboration tools that traditional security products often miss. It identifies and classifies sensitive information, reduces exposure by removing excessive access rights, and backs the technology with a managed detection and response service.
The company reported 2025 revenue of $623.5 million, up 13% year over year. It has been shifting to a SaaS model in recent years, and its board, led by co-founder, chairman and CEO Yaki Faitelson, unanimously approved the sale after a review process run by a committee of independent directors that included outreach to multiple strategic and financial buyers.
What happens next: timeline and approvals
The path from announcement to closing runs through two gates. First, Varonis shareholders must approve the deal. Second, regulators must clear it. Both companies expect the transaction to close in the first half of 2027.
Until then, the two businesses will continue to operate separately. After closing, Varonis shares will stop trading on Nasdaq and the company will become privately held, the same model Proofpoint itself has operated under since Thoma Bravo took it private for $12.3 billion in 2021.
The deal structure tells its own story about confidence. Thoma Bravo is committing equity and has locked in debt financing, while the Ontario Teachers’ Pension Plan agreed to invest in Proofpoint alongside the transaction. Varonis’s board said the independent review process, including outreach to other potential buyers, confirmed that the Proofpoint offer was the best outcome for shareholders.
What this means for customers and employees
For Varonis customers, nothing changes immediately. Support contracts, product roadmaps, and service levels stay in place while the companies operate separately. Longer term, customers can expect a combined platform that pairs Varonis’s data visibility with Proofpoint’s email and human-risk controls, plus cross-selling in both directions. Industry analysts note that about half of Varonis accounts already use Proofpoint, so the cross-sell opportunity runs mostly into Proofpoint’s much larger customer base.
For employees, the Israeli development center will be one to watch. Acquisitions of Israeli-founded security companies by private equity owners have a mixed record on R and D retention, and Varonis employs roughly 1,000 people in Israel. Neither company has detailed staffing plans yet.
2026 is becoming the year cybersecurity consolidated
The Proofpoint-Varonis deal is the largest cybersecurity acquisition announced in 2026, according to trade publication SecurityWeek, but it is part of a broader consolidation wave driven by AI. Enterprise buyers want fewer vendors and tighter integration, and private equity firms are happy to fund the roll-ups.
Proofpoint itself has been one of the most active acquirers: Tessian for email data loss prevention in 2023, Normalyze for data security posture management in 2024, Hornetsecurity for $1.8 billion in 2025, Nuclei for communications archiving in 2025, and Acuvity for AI usage governance in 2026. Varonis at $6.3 billion is by far the largest of these bets.
The timing also reflects how quickly the threat landscape is moving. Data exposure incidents keep making headlines, from web shells planted on Nextcloud servers to zero-days in remote support tools exploited by state-linked actors. Meanwhile, AI models are now being used to compress security response timelines from weeks to hours. Vendors that can sell both the data visibility and the AI-era defenses in one contract have a clear pitch.
What to watch next
Three things will decide whether this deal delivers on its promises. First, regulatory review: a $6.3 billion cybersecurity merger will draw scrutiny, and any extended review could push the closing timeline. Second, integration execution: merging two large security platforms without disrupting customers is genuinely hard, and Proofpoint has never attempted an acquisition of this size. Third, the competitive response: rivals like Palo Alto Networks, CrowdStrike, and Microsoft will be pitching their own unified platforms to every Varonis and Proofpoint customer between now and the first half of 2027.
Frequently asked questions
When was the Proofpoint-Varonis deal announced?
October 15, 2026. Proofpoint and Varonis announced a definitive agreement under which Proofpoint will acquire Varonis in an all-cash transaction valued at approximately $6.3 billion. Reuters had reported in September that the two were in acquisition talks.
How much is Proofpoint paying for Varonis?
Varonis shareholders will receive $49.75 per share in cash. That represents a 52% premium to Varonis’s closing price of $32.71 on June 22, 2026, the last trading day before initial sale rumors, and a 17% premium to its $42.35 close on September 1, 2026. The deal values Varonis at about 8.4 times its trailing 12-month revenue.
When will the Proofpoint-Varonis acquisition close?
The companies expect the transaction to close in the first half of 2027, subject to approval by Varonis shareholders and clearance from regulators. The two businesses will operate separately until closing.
Will Varonis stay listed on Nasdaq?
No. After the deal closes, Varonis shares will stop trading on Nasdaq and the company will become privately held. Proofpoint itself has been privately held since Thoma Bravo took it private for $12.3 billion in 2021.
What will change for Varonis customers?
Nothing immediately. Contracts, support, and products continue as normal until closing. Longer term, Proofpoint plans to deliver a combined data and AI security platform and to integrate the companies’ go-to-market efforts.
Why is Proofpoint buying Varonis now?
The stated reason is AI agents. Enterprises are deploying agents that access sensitive data and take actions across corporate systems, and Proofpoint wants to combine its human and agent security portfolio with Varonis’s data security platform into one offering that protects data against AI-accelerated threats.