Varonis acquires AllTrue.ai for $150 million to oversee enterprise AI
The deal expands its data-centric security platform to monitor AI behavior across organizations.
Varonis Systems, the Israeli-founded cybersecurity company, has acquired AllTrue.ai, a startup specializing in AI Trust, Risk, and Security Management (AI TRiSM), in a deal valued at $150 million. The move marks a strategic push by Varonis to extend its data-centric security capabilities into the rapidly evolving world of enterprise AI, where models, agents, and copilots increasingly interact with critical data at machine speed.
AllTrue.ai was founded in 2022 by Ron Bennatan, creator of Guardium (acquired by IBM) and jSonar (acquired by Imperva). Bennatan served as General Manager of Data Security at Imperva before leaving to found AllTrue.ai. Bennatan, a veteran in cybersecurity and data protection, built AllTrue.ai to provide real-time observability and control over AI systems, addressing what he describes as the “new class of risk” created as AI systems read, write, and modify enterprise data autonomously.
“Most AI security efforts focus on models and prompts,” Bennatan said. “But the real value, and risk, of AI is related to the enterprise data AI can access. Varonis pioneered the data-centric security approach that must be the bedrock of AI security. Together, we can give organizations the fastest path to safe, compliant, and trustworthy AI.”
The acquisition expands Varonis’ existing platform, which monitors enterprise data, identities, and access, to now include comprehensive oversight and governance for AI systems. AllTrue.ai’s suite of tools enables organizations to discover AI assets, including “shadow AI,” enforce real-time policies to prevent data leakage, proactively stress-test systems for vulnerabilities, and maintain compliance with evolving regulations.
Yaki Faitelson, co-founder and CEO of Varonis, emphasized the timeliness of the deal. “As companies deploy AI models, copilots, and agents at scale, these systems are no longer just analyzing data — they are reading, writing, modifying, and acting on it at machine speed. This shift introduces a new class of risk: AI systems that operate without clear visibility, governance, or guardrails.”
The acquisition comes as Varonis reports steady growth in its SaaS business, even amid broader market pressures. In its latest quarterly results announced this week, the company reported $173.4 million in revenue, beating analysts’ expectations by 3.1% and marking a 9.4% year-on-year increase. Adjusted earnings per share reached $0.08, significantly above forecasts of $0.03. However, the company’s stock has struggled in 2026, down more than 26% year to date and 57% over six months, with its market capitalization hovering around $2.8 billion.
Varonis’ move reflects a broader trend in cybersecurity, where companies are increasingly positioning themselves as guardians not just of static data but also of autonomous systems interacting with that data. Faitelson said, “Security is no longer just about stopping breaches; it’s about whether organizations can trust autonomous systems to act safely, reliably, and in line with policy.”
