Proofpoint to Acquire Varonis for $6.3 Billion

The merger agreement (opens in a new tab), dated 15 October 2026, is between Varonis, Proofpoint and Vail Merger Sub, a Proofpoint subsidiary formed for the transaction. Under its terms, Varonis shareholders will receive $49.75 per share in cash. That price represents a premium of 52% to Varonis’ closing stock price of $32.71 on June 22, 2026, the last full trading day before initial market commentary on a potential sale, and a premium of 17% over the closing price of $42.35 on September 1, 2026, the last full trading day before further media coverage.

The announcement sets out two valuation markers. The transaction values Varonis at approximately 8.4x LTM revenue, measured as enterprise value over revenue for the twelve months to June 30, 2026, and approximately 53x LTM free cash flow, measured as market capitalization over free cash flow for the same period. Both figures come straight from the release, which makes this one of the more transparent take-private announcements of the year.

An independent committee ran the sale review

Faitelson explained how the board reached its decision. The agreement “follows a comprehensive evaluation led by a committee of independent members of our Board of Directors, which included extensive outreach to a range of potential strategic and financial buyers.” The board approved the transaction unanimously, and he described the result as “an excellent outcome for the company and our shareholders”.

Closing is expected in the first half of 2027, subject to customary closing conditions, including approval by Varonis shareholders and receipt of regulatory approvals. Varonis intends to file a proxy statement with the SEC ahead of a special meeting of its stockholders. Until closing, Proofpoint and Varonis will continue to operate as separate and independent companies. Once the deal completes, Varonis’ common stock will cease trading on Nasdaq and Varonis will become a private company.

Goldman Sachs for Varonis, five banks for Proofpoint

Goldman Sachs & Co. LLC is acting as exclusive financial adviser to Varonis, with Paul Hastings LLP as legal counsel. Proofpoint has a broad bench: BofA Securities, Morgan Stanley, J.P. Morgan Securities, UBS Securities and Mizuho Securities USA are serving as financial advisers, and Kirkland & Ellis LLP is serving as legal counsel. Okapi Partners is the proxy solicitor for Varonis.

Varonis started more than two decades ago with what Faitelson calls “a simple belief: it’s all about the data.” Its platform tells security teams where sensitive data lives, who and what can access it, and how it is being used across cloud, SaaS, databases and on-premises environments. The company says it reduces the blast radius before an attacker or an AI agent can do damage, and it backs the platform with 24x7x365 managed detection and response. In its farewell-to-independence post (opens in a new tab), Faitelson says thousands of organizations rely on it when it matters most.

The financial story of the past two years is the move to SaaS. In the second quarter of 2026 (opens in a new tab), Varonis posted total revenues of $180.0 million, compared with $152.2 million a year earlier. SaaS revenues were $171.7 million, up from $105.9 million. Term license subscription revenues fell to $4.2 million from $32.4 million, and maintenance and services revenues to $4.1 million from $13.9 million, in both cases with the vast majority of the change driven by customers converting to the SaaS platform.

SaaS ARR reaches $726.0 million

SaaS ARR, which Varonis defines as the annualized value of active SaaS contracts at the end of a period, was $726.0 million at the end of the second quarter, up 52% year over year. Excluding conversions from older contracts, SaaS ARR grew 25%, and Faitelson added that SaaS ARR from new logos grew more than 20%. Non-GAAP operating income was $3.7 million, compared with a non-GAAP operating loss of $1.9 million a year before.

The balance sheet is strong. As of June 30, 2026 (opens in a new tab), Varonis held $911.5 million in cash and cash equivalents, short-term deposits and short-term and long-term marketable securities. In the first six months of the year it generated $80.1 million of cash from operations and $69.1 million of free cash flow. Guy Melamed, the company’s CFO and COO, raised the full-year outlook for SaaS ARR excluding conversions to $769 million to $775 million, citing healthy new logo momentum “driven by the need to secure AI and the data powering it.”

Atlas, Interceptor and Claude integrations

Varonis has built steadily toward AI security. Its second-quarter update highlighted increasing momentum from newer products, including Atlas, Interceptor and Database Activity Monitoring. During the quarter it announced support for Cursor, the AI-native coding tool, delivering visibility and control across the agentic development lifecycle. It deepened its integration with Anthropic’s Claude Enterprise and Claude Platform, as well as Claude Code and Claude Cowork, so security teams can secure and govern the entire Claude enterprise suite with the Varonis Atlas AI Security Platform.

Recognition followed. Varonis was named a Gartner Peer Insights Customers’ Choice for Data Security Posture Management, and it achieved GovRAMP Authorization to help public sector organizations secure critical data and AI. For full-year 2026 the company guided to SaaS ARR of $819.0 million to $850.0 million, revenues of $735.0 million to $739.0 million and free cash flow of $105.0 million to $110.0 million.

Sumit Dhawan, Proofpoint’s chief executive, set out the thesis in a post published alongside the announcement (opens in a new tab). Cybersecurity, he writes, has evolved from securing networks and infrastructure to protecting people, and AI is now driving the next shift: securing the data that powers AI and governing how AI agents and people interact with it. Outside the enterprise, attackers are using AI to launch faster, more sophisticated attacks. Inside, organizations are deploying AI agents with unprecedented access to sensitive data.

As a result, Dhawan argues, data security, which he defines as protecting data from compromise, loss and misuse by people or AI agents, has become the defining priority for organizations seeking to realize AI’s full potential. Proofpoint brings the view of how people and agents communicate. Varonis brings the view of what sensitive data exists, who holds privileges over it and how it is used. The companies intend to combine those views into one of the industry’s most comprehensive data and AI security solutions, from data posture and access to data loss prevention and AI governance.

2.37 trillion emails feed the Knowledge Graph

Proofpoint leans on the scale of its signals. Dhawan cites 3.4 million customers, 2.37 trillion emails scanned annually, 410 billion data security events ingested and more than 13,000 sensors across 105 countries. Those signals feed Proofpoint’s Knowledge Graph (opens in a new tab), which strengthens its AI models with intelligence into cyber attacks, human behavior and data risk. Combined with Varonis’ visibility into sensitive data, access privileges and usage, he says, the companies envision a foundation for intelligent, adaptive security that can discover, classify and protect sensitive data and remediate risk at machine speed.

Fewer vendors for CISOs and CIOs

The pitch to buyers is simplicity. Dhawan writes that for CISOs and CIOs the combination means stronger protection with less complexity and lower costs, with the goal of simplifying security operations, enabling vendor consolidation and freeing resources for reinvestment in innovation, while keeping open integrations across the broader cybersecurity ecosystem. Faitelson makes the same point (opens in a new tab) from the Varonis side: for security leaders, joining Proofpoint means fewer vendors and a partner with even greater resources behind it.

Proofpoint arrives with a large enterprise footprint. It describes itself as a trusted partner to over 80 of the Fortune 100 and over 14,000 large enterprises, as well as millions of smaller organizations. Varonis contributes a base of thousands of organizations that use it to adopt AI, reduce data exposure and stop AI-powered attacks. The joint aim, in the words of the announcement, is a unified platform that helps organizations adopt AI with confidence: finding and protecting sensitive data, controlling what people and AI can access, and stopping data loss.

The financing package is fully set out. Thoma Bravo, which owns Proofpoint, is providing committed equity financing (opens in a new tab) and has secured debt financing commitments to fund the purchase. Ontario Teachers’ Pension Plan has also agreed to make an investment into Proofpoint in connection with the transaction. With committed equity and debt in place at signing, the release presents a funded offer rather than one that depends on raising money later.

The multiples in the release give a sense of what Proofpoint is paying for. At approximately 8.4x LTM revenue and 53x LTM free cash flow, the valuation rests on a business that has completed most of its SaaS transition, generates cash and holds $911.5 million of cash and investments. The 52% premium to the June 22 close sits alongside Faitelson’s statement that the price delivers value well in excess of the risk-adjusted value of the standalone plan.

Hornetsecurity added nearly $200 million of ARR

Varonis is Proofpoint’s second large acquisition in a year. On 8 December 2025 it completed its acquisition of Hornetsecurity (opens in a new tab), a pan-European provider of AI-powered Microsoft 365 security, data protection, compliance and security awareness services for managed service providers and smaller businesses, for a total consideration of $1.8 billion. Hornetsecurity generated annual recurring revenue of nearly $200 million, growing at 20% year over year, and brought a partner base serving over 125,000 customers through 12,000+ managed service providers and channel partners.

Proofpoint kept that business intact. Hornetsecurity operates as a dedicated business unit (opens in a new tab) focused on managed service providers and smaller businesses worldwide, led by its chief executive Daniel Hofmann as executive vice president and general manager, with his leadership team in place. Earlier in 2025 Proofpoint also completed the acquisition and integration of Nuclei, extending its digital communications governance system to cover all communications. Varonis now adds data and AI security for the enterprise end of the market.

The next formal step is the proxy. Varonis expects to file a proxy statement (opens in a new tab) with the SEC in connection with a special meeting of its stockholders to approve the transaction, and the definitive proxy will be sent to shareholders. Regulatory approvals are also required. Varonis will announce its third-quarter 2026 results after the U.S. market close on November 3 and, in light of the transaction, will not hold an earnings conference call.

After closing, Proofpoint intends to move quickly to integrate the companies’ capabilities, align go-to-market efforts and accelerate delivery of the combined platform to customers. Faitelson writes that the combined company will have the technology, resources and scale to become “the trust layer for the agentic workspace,” and he sees “the potential to build a stronger, faster-growing company positioned for a future return to the public markets.”

For customers, nothing changes yet. Faitelson’s message is direct: account teams stay the same, account numbers stay the same, support runs through the same channels and there are no changes to existing contracts or the solutions customers rely on. Over time, he says, joining Proofpoint means moving faster on protecting customers’ data, their AI environments and the collaboration tools their teams use every day.

Five signals before the first half of 2027

• –The proxy statement. The background to the agreement and the independent committee’s review.
• –Shareholder vote. The special meeting on the $49.75 cash offer.
• –Q3 2026 results. Varonis’ SaaS ARR against its guidance, set out in SaaS ARR reaches $726.0 million.
• –Regulatory approvals. Progress toward the first half of 2027 close.
• –The combined roadmap. How DSPM, access governance, DLP and AI governance come together, as set out in the capability stack.