Proofpoint Acquires Varonis for $6.3B: What Changes for Data Security Buyers

Proofpoint agreed on 15 October 2026 to acquire Varonis in an all-cash deal valued at about $6.3 billion. The deal puts one of the best-known names in data security inside one of the largest email and collaboration security vendors. The pitch is a single platform that watches how people and AI agents behave and what data they can reach. That is a big claim, and very little of it can be tested yet. The deal isn't expected to close until the first half of 2027. Meanwhile, many Varonis customers have a deadline of their own: support for Varonis's self-hosted product ends on 31 December 2026, months before the deal is due to close.

What happened?

Under the definitive agreement, Varonis shareholders will receive $49.75 per share in cash. That is a 52% premium to Varonis's closing price on 22 June, before the first sale rumours, and 17% above its 1 September close. The companies put the deal at roughly 8.4x Varonis's trailing twelve-month revenue. Thoma Bravo, which has owned Proofpoint since 2021, is providing equity and has secured debt financing. Ontario Teachers' Pension Plan is also investing in Proofpoint as part of the transaction. Closing depends on a Varonis shareholder vote and regulatory approvals. Until then, the two companies operate separately, and Varonis will leave the Nasdaq once the deal completes. On scale, Proofpoint CEO Sumit Dhawan told CRN that the combined company would have more than $3 billion in annual recurring revenue and over 8,000 employees. He said Proofpoint would assess an IPO after the deal closes.

What does Varonis do?

Varonis maps where sensitive data lives across SaaS, cloud, databases and on-premises file systems, who and what can access it, and how it is being used. It then helps remove excessive access. It also sells managed data detection and response (MDDR), where its analysts monitor customer data around the clock. In Picari's taxonomy it sits in [Data Security]([TODO: confirm Picari link]), primarily data security posture management (DSPM) and data access governance. Proofpoint is best known for email and collaboration security, but it has been building out its data security business for years. It already sells data loss prevention (DLP) and insider risk products, and in 2024 it acquired the DSPM vendor Normalyze. Dhawan describes the fit as two layers of signal. Proofpoint sees how people and AI behave when they touch data. Varonis sees the data itself: where it is, who has permission, and how it's used. "Now you can protect data at rest, and you can protect data in motion," he told CRN.

What happens next?

Confirmed:

• Varonis told customers that nothing changes for now: same account team, same contracts, same support channels.
• After closing, Proofpoint intends to "move quickly" to integrate the products, align go-to-market and deliver a unified platform.

Not yet announced:

• Branding. Dhawan said the companies will work it out before close and have no "desired intent" either way.
• Product overlap. Proofpoint already has a DSPM product built on Normalyze, and Varonis sells DSPM too. Neither company has said how the two will be combined or positioned.
• Roadmap, pricing and packaging for the combined platform, including whether Varonis will still be sold on its own.

How does this change the data security landscape?

Here is our interpretation. Data security is being pulled into larger platforms, and Proofpoint is assembling one deal at a time: Normalyze in 2024, Hornetsecurity in 2025 (a $1.8 billion deal, according to CRN) and now Varonis. AI agents give the argument fresh urgency. An agent that can read a SharePoint site inherits every permissions mistake on it, so knowing who and what can access data becomes a frontline control. For buyers, the question is shifting. It used to be "which DSPM tool is best?" Now it is "should data security come from the vendor that already sees my email and collaboration traffic, or stay independent?" Both answers can be right. The trade-off is fewer integrations and contracts on one side, and more pricing leverage and less lock-in on the other. Competitors have moved early. Forcepoint, Netwrix and Teleskope have all published guidance aimed at Varonis customers facing the on-premises end of life, and the acquisition gives them a second reason to call.

What should security teams watch?

• Self-hosted Varonis customers: your migration decision comes before the ownership change. If you move to Varonis SaaS, negotiate as if the vendor is about to change hands, because it is. Look at term length, renewal price caps, change-of-control terms and where your data will be hosted.
• Customers of both vendors: ask what "unified platform" will mean in practice, and when. Shared classification? One policy engine? One console? Get dates, and treat anything without a date as roadmap.
• Proofpoint DSPM customers: ask directly which DSPM product is the long-term one for your environment and what migration would involve.
• Anyone evaluating data security now: test on your own data. In a bake-off, measure classification accuracy on your real data stores. Check whether the tool actually removes excessive permissions or only reports them. Check how it handles access by AI assistants and agents.
• Don't assume integration that hasn't shipped, pricing that hasn't been published, or that today's product names will survive 2027.

The takeaway

Proofpoint's thesis makes sense: behavioural signals from email and collaboration, combined with data-layer context on permissions and usage, should catch things that neither catches alone. But for now it is a thesis. The combined platform doesn't exist yet and won't before mid-2027 at the earliest. Buyers should judge it the way they'd judge any vendor claim: by what can be shown working in their environment, not by what was announced.

To keep following the category, see DSPM on Picari.

---

Sources

• "Proofpoint to Acquire Varonis in a $6.3 Billion Transaction," Proofpoint and Varonis, 15 Oct 2026. proofpoint.com
• "Varonis is joining Proofpoint," Yaki Faitelson, Varonis, 15 Oct 2026. varonis.com
• "Proofpoint CEO Sumit Dhawan On 'Market-Changing' $6.3B Varonis Deal, IPO Goal," Kyle Alspach, CRN, 16 Oct 2026. crn.com
• "5 Things To Know On Proofpoint's $6.3B Acquisition Of Varonis," Kyle Alspach, CRN, 15 Oct 2026. crn.com
• "Why We're Going All In on SaaS," Yaki Faitelson, Varonis, 12 Nov 2025. varonis.com
• "Proofpoint Signs Definitive Agreement to Acquire Normalyze," Proofpoint, 29 Oct 2024. proofpoint.com