Proofpoint to Acquire Varonis for $6.3B in Data Security Deal

Yaki Faitelson wants Varonis customers to know their account number will survive the announcement. The CEO and co-founder’s assurance, alongside promises about familiar support channels and existing contracts, gives a practical starting point for a proposed acquisition aimed at changing how enterprises protect data and AI.

Proofpoint agreed on October 15, 2026, to acquire Varonis in an approximately $6.3B all-cash transaction. The companies expect the deal to close in the first half of 2027, subject to shareholder and regulatory approvals. Their proposed combination would connect Proofpoint’s threat and behavior controls with Varonis’s understanding of sensitive data and access.

For enterprise security teams, that connection could help an investigation follow activity into the information it exposes. Delivering it will involve integrating products while preserving the customer relationships already responsible for keeping those systems useful. Both companies remain independent pending completion.

What the Proofpoint–Varonis agreement actually changes

Under the joint announcement, Varonis shareholders would receive $49.75 per share in cash. The Varonis board unanimously approved the agreement, and completion would take the company private and end trading of its shares on Nasdaq. Those are outcomes of a completed transaction, with the required approvals still ahead.

Thoma Bravo, which owns Proofpoint, is providing committed equity financing and has secured debt financing commitments for the purchase. Ontario Teachers’ Pension Plan has also agreed to invest in Proofpoint in connection with the transaction. The announcement does not assign individual amounts to those commitments, so the $6.3B purchase price should remain separate from any claim about how much a particular backer is contributing.

Faitelson says a committee of independent Varonis directors evaluated the company’s options and approached potential strategic and financial buyers. His decision to recommend this outcome puts a commercial judgment alongside the product argument: shareholders are being offered cash for a business whose standalone development would carry its own time and execution risks. The announcement supplies that board process, rather than evidence that the proposed platform has already earned customer adoption.

Connecting an investigation to the data within reach

Varonis was founded in 2005 by Yaki Faitelson and Ohad Korkus around giving organizations more visibility and control over their information. The Miami company’s platform identifies sensitive data, examines access and monitors activity across cloud services, SaaS applications, databases and on-premises environments. Its current EVP of Engineering and CTO, David Bass, leads product development and quality assurance.

Proofpoint grew from a different starting point. Founded in 2002 by former Netscape CTO Eric Hahn and headquartered in Sunnyvale, California, the company built its business around protecting communications and the people using them. Its current leadership includes CEO Sumit Dhawan and Chief Technical Officer Marcel DePaolis, whose team would bring that technical history into the proposed combination.

An investigation may need both kinds of context. A security team examining suspicious activity benefits from understanding the sensitivity of the affected information, the permissions surrounding it and how those permissions were used. Putting those observations together could help the team distinguish a concerning action from one with limited consequences, then choose an appropriate response.

Dhawan’s argument for the acquisition follows that relationship into AI: software acting for an employee can reach information and take actions across systems. The proposed platform would connect communications, identities, permissions and data. That is a product direction, with the practical integration still to be delivered after closing.

Why customer continuity belongs inside the product story

In his letter to customers, Faitelson says existing account teams, account numbers, support channels, contracts and solutions remain in place. Proofpoint’s acquisition information page also says the independent companies do not share customer data and that no product decisions have been made. Customers can keep working through their current contacts while the transaction proceeds.

Those statements matter to the organization already relying on both suppliers. A security operation has configured tools, agreed escalation routes and people who understand how its environment behaves. An ownership announcement gives that team a new roadmap conversation without immediately supplying the answers it needs about integration, product packaging or future support arrangements.

The acquisition’s appeal is therefore partly organizational. Common ownership could make connecting data-access evidence and behavior analysis a shared product responsibility, rather than a task left entirely to the customer. Whether it reduces operational effort will depend on the combined implementation and the customer’s environment. The companies have yet to publish the specific product choices that would let a buyer evaluate that outcome.

Related DevCuration coverage of Reach Security examines another part of this problem: extracting more useful decisions from security controls already in service. The connection is the operator’s workload, where another alert helps only if somebody can understand it and act.

A broader platform still has to answer a specific question

Proofpoint has been expanding the reach of its business as well as its technology. Its completed Hornetsecurity acquisition, announced in December 2025 at $1.8B, strengthened its position with managed service providers and smaller businesses. Varonis adds a different strategic opportunity, bringing a long-established focus on data exposure into Proofpoint’s larger customer relationships.

There is a recognizable procurement attraction in asking fewer suppliers to take responsibility for connected risks. A buyer still needs to know how signals relate, how remediation works and which team answers when the explanation is incomplete. The number of vendors on a contract cannot resolve those operational questions by itself.

Harmonic Security’s workforce AI expansion illustrates the adjacent pressure to understand how employees use AI while deciding what to protect and permit. Proofpoint and Varonis are proposing a much larger combination around the relationship between access and behavior. Their common challenge is making security context useful where work is happening.

Until closing, the customer following an incident still reaches the same account team. Afterward, the companies intend to connect more of the evidence that team can bring to the conversation. Faitelson’s promise about the account number leaves a familiar route into a business preparing to offer a different account of what happened to the data.