Proofpoint to acquire Varonis in $6.3bn all-cash deal

Thoma Bravo-backed Proofpoint will pay $49.75 per share for the data security vendor, a 52% premium to its pre-rumour share price.

A modern, brightly lit control room features a large, curved video wall displaying abstract green digital data, a light wood desk with a silver monitor, keyboard, and mouse, and a black office chair in the foreground, with a large window on

Proofpoint has agreed to acquire Nasdaq-listed data security firm Varonis Systems in an all-cash transaction valued at approximately $6.3 billion, the two companies announced on 15 October 2026. Shareholders in Varonis will receive $49.75 per share, representing a 52% premium to the stock's closing price of $32.71 on 22 June 2026, the last full trading day before acquisition rumours first surfaced. The deal values Varonis at roughly 8.4 times last-twelve-months revenue and 53 times LTM free cash flow.

The transaction has been unanimously approved by the Varonis board following a process led by a committee of independent directors, which the company said involved outreach to a broad range of strategic and financial buyers. Thoma Bravo, the private equity firm that owns Proofpoint, is providing committed equity financing and has secured debt commitments to fund the acquisition. Ontario Teachers' Pension Plan has also agreed to co-invest in Proofpoint in connection with the deal. The transaction is expected to close in the first half of 2027, subject to Varonis shareholder approval and customary regulatory clearances.

The strategic rationale

Proofpoint's chief executive Sumit Dhawan framed the acquisition around the rapid spread of AI agents across enterprise environments. "AI agents are increasingly accessing sensitive information and taking action across systems, making it critical for organisations to understand not only what data needs protecting and who can access it, but how it is actually being used," he said. The combined company intends to build a unified platform spanning communications security, identity and permissions management, data classification, and AI-risk controls.

Varonis co-founder and chief executive Yaki Faitelson said the deal would allow the company to accelerate its mission of securing AI workloads and the underlying data faster than it could as a standalone public company. The merged entity would serve more than 16,000 enterprise customers globally. Proofpoint already claims relationships with over 80 of the Fortune 100 and approximately 14,000 large enterprises.

Market context and competitive read-across

The acquisition brings together two complementary points in the data security stack: Proofpoint's strength in email, cloud collaboration, and human-centric threat prevention sits alongside Varonis's focus on data access governance, sensitive-data discovery, and AI-risk monitoring. The combined platform is positioned to compete directly with broader security vendors such as Microsoft Purview, Palo Alto Networks' Prisma suite, and CrowdStrike's data-protection capabilities, each of which is pushing deeper into the data-security and identity-governance space.

The deal reflects a broader consolidation trend in cybersecurity, where pure-play vendors are finding it increasingly difficult to sell individual point solutions into enterprises that are under pressure to rationalise their security tooling. Thoma Bravo has been an active architect of this consolidation, having previously taken Proofpoint private in 2021 in a deal valued at $12.3 billion, and holding or having held positions in a range of security vendors including SolarWinds, Ping Identity, and ForgeRock.

Regulatory path

The transaction will require antitrust clearance in multiple jurisdictions given the combined company's scale and Proofpoint's ownership by a major private equity firm with existing portfolio positions. EU and UK competition regulators have both signalled heightened scrutiny of platform bundling in enterprise software and security markets. The deal is structured as a straightforward cash merger rather than a share-for-share exchange, which typically simplifies the regulatory review timeline. Varonis will delist from Nasdaq on completion and operate as a private company within the Proofpoint and Thoma Bravo portfolio. No remedies or divestitures have been indicated as preconditions.

Goldman Sachs is advising Varonis, while BofA Securities, Morgan Stanley, J.P. Morgan, UBS, and Mizuho are acting for Proofpoint. Varonis will report third-quarter 2026 results on 3 November but will not hold an earnings call given the pending transaction.