Data Security,
Security Operations
Thoma Bravo-Owned Firm Moves to Combine Data Protection and AI Governance
In a bold move marking the most significant cybersecurity acquisition of 2026, Proofpoint has announced its intention to acquire Varonis for a staggering $6.3 billion. This monumental deal aims to unify critical elements, including data visibility, identity management, access permissions, threat protection, and the governance of artificial intelligence (AI).
The acquisition, which will be the largest in the realm of pure-play cybersecurity firms this year, will significantly enhance Proofpoint’s capabilities. Based in Silicon Valley, Proofpoint brings a strong track record in the realms of human and agent cybersecurity, communications security, and data loss prevention. On the other hand, Varonis, headquartered in Miami, specializes in data security posture management, data access governance, and sensitive data protection. Proofpoint’s CEO, Sumit Dhawan, emphasized that the paradigm of cybersecurity is shifting from merely protecting physical infrastructure and users to focusing on safeguarding data and AI processes.
“By interlinking communications, identities, permissions, data, and AI, we are paving the way for an intelligence advantage,” Dhawan stated in a recent announcement. “This advantage enhances customers’ capacity to perceive risk more transparently, respond swiftly, and defend against the next wave of AI-related threats.” He further noted that this acquisition represents a pivotal step in Proofpoint’s transformation into a future-ready cybersecurity platform tailored for AI integration.
Moreover, the deal eclipses the earlier $3.25 billion acquisition of Dragos by Accenture, marking it as a new benchmark in the cybersecurity landscape. Additionally, it surpasses Proofpoint’s previous record acquisition of $1.8 billion for cloud-based email security firm Hornetsecurity in December 2025. Following the announcement, Varonis’ stock experienced a jump of $2.63, or 5.56%, trading at $49.97 per share during after-hours activities.
The timeline leading to this acquisition was relatively swift. Just months prior, Bloomberg reported that major private equity firms, including Blackstone, Thoma Bravo, and Vista Equity Partners, were showing preliminary interest in acquiring Varonis. Subsequently, discussions between Thoma Bravo-owned Proofpoint and Varonis were reported, signaling the feasibility of this landmark deal.
As part of the agreement, Varonis shareholders will receive $49.75 per share, reflecting a 52% premium over the company’s stock price before the initial reports by Bloomberg emerged. Despite Varonis’ robust portfolio in data security, challenges have persisted in the marketplace. Following a significant downturn in renewal rates for on-premises subscriptions disclosed in October 2025, Varonis’ stock has seen a decrease of 22.9% compared to the previous year, prompting a workforce reduction by 120 employees.
Following the acquisition, Yaki Faitelson, co-founder and CEO of Varonis, has agreed to offer consulting services to Proofpoint for a period of 18 months. Since Varonis’ inception in 2004, Faitelson has played a crucial role in steering the company through the evolving cybersecurity landscape. The largest stakeholder in Varonis, BlackRock, currently holds a 9.1% stake in the company, and the acquisition is expected to finalize in the first half of 2027.
How Proofpoint’s Technological Footprint Aligns With Varonis
Dhawan articulated that organizations are increasingly required to understand the locations of their sensitive information, who can access it, and how it is utilized. The anticipated synergy between the two firms is expected to enhance capabilities in integrated data discovery, classification, access governance, and automated protection.
“Our integration will offer one of the most comprehensive data security solutions available today,” Dhawan remarked. This includes elements such as data posture, insider risk management, data loss prevention (DLP), and AI governance. The goal is to establish a new industry standard for protecting sensitive data across various systems, particularly in environments increasingly influenced by AI.
Dhawan also expressed that traditional security measures may fall short in adequately addressing the dynamics introduced by AI agents. The combined platform aims to perpetually uncover and classify sensitive data, enforce security protocols, and remedy risks through automation, tapping into both companies’ strengths.
He elaborated, “AI agents can traverse and manipulate vast datasets in seconds. Securing this environment demands integrated intelligence and protection that adapts to the rapid pace at which AI operates.”
The cooperation between Proofpoint and Varonis not only aims to revolutionize data security mechanisms but also expands their ability to serve a broad clientele. Combined, they will cater to more than 16,000 enterprises and millions of smaller organizations globally. Proofpoint’s extensive operations, including the scanning of 2.37 trillion emails per year and the management of over 13,000 security sensors across 105 countries, further bolsters this expanded capacity.
As Faitelson optimistically concluded, “With Proofpoint, we are on track to become one of the premier cybersecurity enterprises worldwide. This merger will equip us with the technology, resources, and scale necessary to become the trust layer in an increasingly agentic workspace.”