19 OCT 2026 — Proofpoint, the email and data security company owned by private equity firm Thoma Bravo, has agreed to buy Varonis Systems for about US$6.3 billion in cash. The deal was announced on 15 October. Varonis shareholders will receive US$49.75 a share, and the Nasdaq-listed data security company will be taken private once shareholders and regulators approve the deal, which the two companies expect in the first half of 2027.
The price is 52% above Varonis's closing price of US$32.71 on 22 June, the last full trading day before rumours of a sale first surfaced, according to the companies' joint announcement. Measured against the US$42.35 close on 1 September, before a second round of media speculation, the premium shrinks to 17%.
The price and what it buys
The companies put the valuation at roughly 8.4 times Varonis's revenue over the 12 months to 30 June, and about 53 times its free cash flow over the same period. Those multiples are the companies' own calculation, based on enterprise value for revenue and market capitalisation for cash flow.
Varonis, founded in 2005, started out tracking access to files on corporate servers. It now sells a software-as-a-service platform that finds and classifies sensitive data across cloud and on-premises systems and watches how that data is used. Proofpoint made its name in email security and has since added data loss prevention and insider-risk tools. SecurityWeek, which reported the deal the next day, called it the largest cybersecurity acquisition announced so far this year.
Conditions, fees and the long stop
The merger agreement, summarised in Varonis's Form 8-K, needs approval from holders of a majority of Varonis shares. It also needs the US antitrust waiting period under the Hart-Scott-Rodino Act to expire, plus clearance under certain foreign regulatory laws that the filing does not name. Either side can walk away if the deal has not closed by 15 July 2027, a date that can be pushed back three months to wait on regulators.
The fees are lopsided. Varonis owes Proofpoint US$211.7 million if, among other cases, its board changes its recommendation or it leaves for a superior proposal. Proofpoint owes US$423.3 million, twice as much, if it fails to close after the conditions are met or breaches the agreement. Proofpoint's obligation is not subject to any financing condition.
Chief executive Yaki Faitelson, who co-founded Varonis and holds about 0.67% of its shares, has signed a support agreement to vote for the deal. A separate term sheet keeps him on as a non-executive officer for 18 months after closing.
Who is paying
Thoma Bravo funds will put up the equity, and a group of lenders has committed the debt. Canada's Ontario Teachers' Pension Plan will take a stake in Proofpoint as part of the transaction. Thoma Bravo itself took Proofpoint private in 2021 in a US$12.3 billion deal, so the buyer here is a portfolio company using its owner's money, rather than a listed rival paying in stock.
Varonis will report third-quarter results on 3 November but, given the deal, will not hold an earnings call.
The case the companies make
The merger argument from both companies centres on AI agents. "AI agents are increasingly accessing sensitive information and taking action across systems," said Proofpoint chief executive Sumit Dhawan. The companies say the merged group will count over 16,000 enterprise customers and become the industry's largest data and AI security organisation. Those are the companies' own descriptions, and RECATOOLS has not seen an independent ranking that tests them.
Faitelson said in the announcement that a committee of independent directors had approached "a range of potential strategic and financial buyers" before agreeing terms. In an interview with the Israeli business daily Calcalist, which Varonis filed with the SEC on 16 October, he said Proofpoint had approached Varonis. He gave Proofpoint's headcount as about 5,000 against Varonis's 2,800, and said Proofpoint lacked a product in Varonis's category. Asked about job cuts, he said it was too early to discuss the workforce.
What it means for data security
This section is RECATOOLS analysis. The two firms have been edging towards each other's ground for a year. Varonis agreed to buy phishing-detection company SlashNext in September 2025, according to a SiliconANGLE report, which moved it into Proofpoint's original email market. Early this year both bought AI security start-ups. Proofpoint took Acuvity in February, and Varonis announced a US$150 million deal for AllTrue.ai at around the same time, according to SecurityWeek. Buying Varonis lets Proofpoint offer data discovery and permissions mapping next to its email and data-loss tools from a single vendor.
Customers may end up with fewer consoles to manage. They also get less choice, and buyers who picked Varonis partly to avoid concentrating on one vendor face a renewal conversation they did not plan for. The deal also takes one of the few listed pure-play data security companies off the public market.
That leaves two risks. The regulators in the unnamed foreign jurisdictions have yet to rule, and Varonis shareholders have not voted. The 17% premium over the September price is modest next to the headline 52%, and how investors weigh those two figures will show up in the proxy vote.
