Proofpoint buys Varonis for $6.3 billion – the company disappears from the stock exchange
The data security company Varonis is disappearing from the stock exchange: Proofpoint, owned by the investment firm Thoma Bravo, is acquiring the company in an all-cash transaction worth around $6.3 billion – with control over what humans and AI agents can access as the stated rationale.
The deal that has been struck
On October 15, 2026, Varonis Systems (Nasdaq: VRNS) and Proofpoint announced that they have entered into a definitive agreement under which Proofpoint will acquire Varonis in an all-cash transaction worth approximately $6.3 billion. Shareholders will receive $49.75 per share, and Varonis' board has unanimously approved the deal, according to the joint press release distributed via GlobeNewswire.
The transaction is expected to close in the first half of 2027, but is subject to a number of conditions: approval from Varonis' shareholders and the necessary regulatory approvals. In other words, this is not a completed deal, but a binding agreement that can still be stopped along the way.
The terms are confirmed in a Form 8-K filed with the US securities regulator, the SEC, according to StockStory via FinancialContent.
What the price actually means
The offer of $49.75 values Varonis' equity at $5.71 billion, reports The Times of Israel. Benzinga estimates that the price corresponds to roughly 53 times the last twelve months' free cash flow and 8.4 times the last twelve months' revenue.
The premium picture depends entirely on which starting point you use – and this is where it is easy to mislead the reader:
- Measured against the October 15 close of $47.34, the premium is only 5.1 percent. The stock had already risen sharply following takeover speculation.
- Measured against the June 22 close of $32.71 – the last trading day before the sale rumors emerged – the premium is 52 percent. Against the September 1 close of $42.35, the premium was 17 percent.
The market reacted with little surprise: the stock rose around 2.7 percent in after-hours trading, writes The Times of Israel, and was up 2.96 percent to $48.74 ahead of the opening bell, according to Benzinga.
How the acquisition is being financed
Proofpoint is a portfolio company of the private equity firm Thoma Bravo, and it is Thoma Bravo that stands behind the financing: the firm is contributing committed equity financing and has secured debt financing to cover the purchase, according to the press release. In addition, the Canadian pension fund Ontario Teachers' Pension Plan has agreed to invest in Proofpoint in connection with the transaction.
Because Proofpoint is privately held, there are no public financial statements for the buyer – the stated multiples apply to Varonis' side of the equation.
The AI rationale: control over what humans and agents can access
Both companies frame the acquisition around AI security. Varonis' CEO Yaki Faitelson says in the press release: "Our mission is to secure AI and the data that powers it. By joining forces with Proofpoint, we can achieve this mission faster than ever."
The Record quotes the announcement's description of the goal: a platform that "helps organizations adopt AI with confidence: finding and protecting sensitive data, controlling what humans and AI can access, and stopping data loss."
It is worth noting that this is the companies' own framing. According to the press release, the combined company will serve more than 16,000 enterprise customers and "establish the industry's largest data and AI security organization" – a superlative that comes from the companies themselves and has not been independently verified.
The underlying logic is nevertheless concrete enough: as AI agents themselves retrieve, process and forward data, the security question shifts from controlling what humans click on to controlling what machine actors can access. Varonis' core product is precisely about mapping and governing access to data; Proofpoint has historically focused on protecting people against threats such as phishing, and describes itself as a player in "human and agent cybersecurity."
The analysts: a reasonably priced acquisition, a signal of more consolidation
RBC Capital Markets writes in an analyst note, reproduced by MT Newswires via Yahoo Finance, that the acquisition "makes sense" in a data security market with tougher competition. On the question of antitrust risk, RBC believes the overlap with Proofpoint's existing data loss prevention (DLP) business does not pose any significant problem: DLP is only one part of the data security market and accounts for roughly 3 percent of total cybersecurity spending, according to the analysts.
At the same time, RBC has downgraded the Varonis share to "sector perform" with a price target of $49.75 – exactly the offer price. That signals the analysts see little prospect of a higher bid.
Wedbush Securities reads the acquisition as a signal of more consolidation: that further mergers and acquisitions are coming in the cybersecurity industry, with a move toward platform-based security offerings, according to Seeking Alpha.
The acquisition fits into a larger pattern of major cybersecurity acquisitions in 2026. The Times of Israel places the deal alongside Palo Alto Networks' purchase of CyberArk for $25 billion and Google's $32 billion acquisition of Wiz – both targeting Israeli cybersecurity companies. Varonis has around 2,800 employees, of whom approximately 1,000 are in Israel, according to Channel 12 as reported by The Times of Israel.
What happens now – and what remains unresolved
Varonis will report its third-quarter 2026 figures after market close on November 3, but will not hold the usual conference call because of the announced transaction, the company says, according to Benzinga. For investors, that means the quarter's operational details must be read from the report alone.
Before the agreement can be completed, shareholder approval at Varonis and regulatory approvals therefore remain outstanding. RBC's assumption that competition authorities will not create problems is an analyst assessment – not a guarantee. The very fact of going private, under an ownership where public reporting obligations disappear, will also make it harder to follow how the integration of the two companies actually progresses.
The analysis house Forkast describes the acquisition as "2026's largest acquisition explicitly aimed at the risk of AI agents gaining access to sensitive data" – a characterization that is Forkast's commentary, not a documented conclusion, and should be read as exactly that. The same applies to Forkast's other points about Proofpoint's product launches and Varonis' renewal rates, which cannot be verified against the primary sources in this case.
The unresolved question after the announcement is therefore not whether AI agent security is the rationale – it is stated explicitly in the agreement – but whether the combined company can actually deliver a platform that makes organizations trust AI agents with their most sensitive data. The answer to that will not come until well after the expected close in 2027.