Proofpoint to Buy Varonis for About $6.3bn

Proofpoint and Varonis announced on 15 October 2026 that they have entered a definitive agreement under which Proofpoint — a portfolio company of Thoma Bravo — will acquire Varonis Systems (Nasdaq: VRNS) in an all-cash transaction valued at approximately $6.3 billion.

The deal has not closed. The companies say it is expected to close in the first half of 2027, subject to Varonis shareholder approval, regulatory approvals and customary conditions. Until then they will continue to operate as separate, independent companies. On completion, Varonis common stock would cease trading on Nasdaq and Varonis would become private.

Deal terms

Under the agreement, the joint release states, Varonis shareholders will receive $49.75 per share in cash. That price is described as a 52% premium to Varonis’ closing stock price of $32.71 on 22 June 2026 — “the last full trading day prior to initial rumors about a potential sale” — and a 17% premium over the $42.35 close on 1 September 2026, the last trading day before further media speculation. The transaction values Varonis at approximately 53x LTM free cash flow and 8.4x LTM revenue (multiples as of 30 June 2026, per the release’s footnote).

Thoma Bravo is providing committed equity financing and has secured debt financing commitments to fund the purchase. Ontario Teachers’ Pension Plan has also agreed to make an investment into Proofpoint in connection with the transaction.

The Varonis board unanimously approved the deal. Goldman Sachs advised Varonis; BofA Securities, Morgan Stanley, J.P. Morgan, UBS and Mizuho advised Proofpoint.

“Largest” is the companies’ framing

The release says the combined company “will serve more than 16,000 enterprises” and frames the combination as creating “one of the world’s leading pure-play cybersecurity companies” and “the industry’s largest data and AI cybersecurity organization,” plus marketing language about a cybersecurity “powerhouse.” Those “largest” and “powerhouse” formulations are the companies’ own framing, not an independent ranking.

Proofpoint positions itself as a human-and-agent cybersecurity vendor; Varonis as a data and AI security platform. Together they say they intend a unified platform for finding and protecting sensitive data, controlling what people and AI can access, and stopping data loss — integration plans that only apply after closing.

What the CEOs said

Sumit Dhawan, Proofpoint’s chief executive, said AI agents are “increasingly accessing sensitive information and taking action across systems,” and that connecting “communications, identities, permissions, data, and AI” is meant to help customers “defend against the next generation of AI risks.” Yaki Faitelson, Varonis’s chief executive, co-founder and chairman, said: “Our mission is to secure AI and the data that powers it.” He also said an independent board committee ran a comprehensive process with outreach to strategic and financial buyers.

Near-term calendar

Varonis will announce third-quarter 2026 results after US markets close on 3 November 2026, but will not hold an earnings conference call in light of the announced transaction.

Why it matters

AI agents that can read mailboxes, cloud drives and SaaS permissions have turned “who can see which file” from a compliance spreadsheet into a live control plane. Buying Varonis would give Thoma Bravo–backed Proofpoint a deeper data-security stack to sit beside email and collaboration controls — if regulators and shareholders clear the path. Similar M&A colour on TSN includes Cohere’s letter of intent for AISLE and reported OpenAI interest in Trail of Bits; enterprise buyers are also watching governance products such as ServiceNow’s AI Passport.

What’s still unknown

Whether antitrust or other regulators impose conditions, and in which jurisdictions
Final close date within the stated first-half 2027 window
How product brands, pricing and support will be combined after close

What to watch

Watch Varonis’s definitive proxy statement once filed with the SEC, shareholder-vote timing, and any regulatory clearance notices. Treat the combination’s “largest” claim as marketing until the deal actually closes.

What this means

Agreed, not closed. About $6.3bn all-cash; expected H1 2027 if approvals land.
$49.75 per share with the premiums and multiples stated in the joint release.
“Largest data and AI cybersecurity organisation” is company framing.