Why Proofpoint is paying $6.3 billion for Israeli-founded Varonis
The acquisition combines Proofpoint’s focus on email and human security with Varonis’ data protection technology, as AI agents gain access to sensitive corporate information. It follows a turbulent year for Varonis shares, which plunged nearly 49% in a single session before recovering.
Proofpoint’s agreement to acquire Israeli-founded Varonis for approximately $6.3 billion reflects a shift in how companies need to protect their information as artificial intelligence moves from generating answers to accessing sensitive data and taking action across corporate systems.
The deal brings together Proofpoint’s focus on email threats and human risk with Varonis’ technology for identifying, monitoring and protecting enterprise data. The companies are betting that connecting these capabilities will help businesses address security risks that are becoming harder to separate as employees and AI agents use the same systems and information.
But the acquisition also comes after a turbulent period for Varonis. Its shares reached their highest level since 2021 in October 2025, plunged nearly 49% in a single session, and then fell to a new low in April 2026 before recovering sharply. Proofpoint is now offering shareholders a cash exit, while taking ownership of a business whose technology could become increasingly important as enterprises adopt AI.
For years, cybersecurity companies have developed products around distinct problems. Some specialize in email and threats directed at employees, while others focus on identities, endpoints, networks or the information stored in corporate systems.
AI agents are making those boundaries less meaningful. These systems can retrieve internal documents, access applications and take actions on behalf of employees. Their usefulness depends on access to corporate information, but that same access can expose sensitive data if permissions are too broad or the systems behave in unexpected ways.
Proofpoint, a cybersecurity company owned by private equity firm Thoma Bravo, has traditionally focused on protecting communications and users. Varonis adds a layer of visibility into the data itself, helping organizations identify sensitive information, understand who can access it and detect suspicious activity.
The strategic logic is that knowing an employee has received a malicious message is only part of the picture. Security teams also need to understand what that employee can access, which data might be exposed and whether an AI agent can retrieve or use that information.
Proofpoint says the combined platform is intended to connect communications, identities, permissions, data and AI. The goal is to help organizations identify sensitive information, control access and respond more quickly to emerging threats.
That is a clear strategic rationale, but it remains a plan rather than a proven outcome. The companies have not yet detailed how the combined products will work together or how quickly customers will see the benefits. The challenge will be to build an integrated platform rather than simply sell more products to the same customers.
Varonis’ acquisition comes after a dramatic year for its stock, which swung from a market value of approximately $7.3 billion to less than $4 billion before recovering ahead of the deal.
The shares reached an intraday high of $63.90 in October 2025, their highest level since 2021. On October 29, they plunged from a previous close of $63 to $32.34, a decline of approximately 49% in a single session. The selloff wiped out billions of dollars in market value.
The collapse followed disappointing quarterly results, weaker guidance and the announcement of staff cuts without an advance profit warning. As CTech reported at the time, Varonis attributed the weakness to slower subscription renewals among long-standing customers using its on-premises software, even as its cloud-based business continued to grow.
The results raised questions about the pace and cost of the company's transition to a cloud subscription model. Investors were concerned that some customers might not renew their existing subscriptions or migrate to Varonis’ newer offerings as expected.
The shares continued to fall in 2026, reaching an intraday low of $19.70 on April 10, equivalent to an estimated equity market value of roughly $2.3 billion. They subsequently more than doubled, closing at $47.34 on October 15, the last trading day before the acquisition announcement.
Proofpoint’s offer values Varonis at $49.75 per share in cash, representing a 52% premium to its June 22 closing price, before initial reports of a potential sale, and a 17% premium to its September 1 closing price, before further media reports about a possible transaction.
The agreement values Varonis’ equity at approximately $5.71 billion, while the announced transaction is valued at approximately $6.3 billion. Those figures measure different things and should not be confused with the company's historical stock-market value.
The offer remains below the shares’ October 2025 peak, but represents a substantial recovery from their April low. It provides a defined cash exit for shareholders after a volatile period.
The deal values Varonis at approximately 8.4 times its revenue over the last 12 months and 53 times its free cash flow. Those multiples underline that the acquisition is not simply a bet on the company's current financial performance. Proofpoint is also paying for the strategic value of its technology and the possibility of integrating it into a broader cybersecurity offering.
The deal also deepens Thoma Bravo’s investment in cybersecurity. The private equity firm acquired Proofpoint in 2021 in a transaction valued at approximately $12.3 billion. Buying Varonis gives the company a larger portfolio of technologies to sell to enterprise customers as the security implications of AI become more prominent.
Varonis is being acquired at a moment when data security is becoming more closely tied to AI adoption. Its technology gives Proofpoint a way to expand beyond its traditional areas of strength, while the combined business could offer customers a more connected approach to protecting employees, data and AI systems.
The companies say the combined business will serve more than 16,000 enterprises and millions of organizations worldwide. That customer base could create opportunities to sell additional products, but scale alone will not determine whether the acquisition succeeds.
The more important test is whether Proofpoint can connect information about threats and user behavior with Varonis’ understanding of data, permissions and exposure. If it can, the combined platform could help customers see more clearly how an attack or an AI agent’s actions translate into concrete data risks. If integration proves slower or less effective than expected, the deal could amount to an expensive expansion of the product portfolio without delivering the unified experience the companies envision.
The transaction is expected to close in the first half of 2027, subject to Varonis shareholder approval, regulatory clearances and other customary conditions. Until then, the businesses will continue to operate independently.
