“Data Security — protecting data from compromise, loss, and misuse by people or AI agents — has become the defining priority for organizations seeking to realize AI’s full potential,” Sumit Dhawan wrote, framing the rationale for Proofpoint’s agreed acquisition of Varonis Systems for approximately $6.3 billion in cash.
Proofpoint’s people-focused defenses and Varonis’ data mapping
The transaction pairs two distinct approaches to security. Varonis specializes in data security: mapping where sensitive information sits inside an organization, who can reach it, and how it is actually used. Proofpoint, which is owned by private equity company Thoma Bravo, has built its business around protecting people — blocking phishing, fraud and other attacks that arrive primarily through email and target employees rather than machines. The companies present the deal as a combined response to attackers and internal risks driven by AI.
Scale and signals: the Knowledge Graph, emails, events, and sensors
Proofpoint emphasized the scale of its telemetry in the joint announcement. The company said it serves 3.4 million customers, scans 2.37 trillion emails annually, ingests 410 billion data security events, and operates more than 13,000 sensors across 105 countries. Those signals feed what Proofpoint calls its Knowledge Graph, which the company says strengthens its AI models with intelligence on threats, human behavior and data risk. Proofpoint and Varonis say combining that telemetry with Varonis’ visibility into sensitive data will create a foundation for “discovering and remediating risks at machine speed.”
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scrambleRecent acquisitions and an established buying pattern
The announcement extends a string of purchases by both firms. In February, Proofpoint acquired Acuvity, an AI security startup whose platform monitors how employees and automated systems interact with external AI services; financial terms for that deal were not disclosed. Proofpoint also acquired Hornetsecurity, a German provider of Microsoft 365 security services, in a deal reportedly worth more than $1 billion. Varonis has been active on the M&A trail as well, acquiring the AI security firm AllTrue.ai for $150 million. The companies frame the Varonis purchase as accelerating their shared strategy around securing data in an AI-driven environment.
Board approval, regulatory checks, and the expected close
Varonis’ board approved the deal unanimously. The transaction is expected to close in the first half of 2027 but remains subject to shareholder and regulatory approvals before that can happen. Both companies positioned the acquisition as enabling vendor consolidation and simplification of security operations while retaining “open integrations across the broader cybersecurity ecosystem,” according to Sumit Dhawan’s blog post and the joint announcement.
What this means for CISOs, CIOs, and enterprise procurement leaders
- CISOs and CIOs: Proofpoint said the combined platform will offer “stronger protection with less complexity and lower costs,” aiming to simplify security operations and free resources for reinvestment in innovation. The companies argue that uniting people-focused defenses with data-mapping capabilities will address both external AI-enabled attacks and internal risks from AI agents.
- Enterprise procurement leaders: The firms explicitly pitched vendor consolidation as an outcome of the deal, positioning the combined product set as an opportunity to reduce the number of separate security vendors while maintaining interoperability via open integrations.
- Security teams and technologists: The companies describe a technical rationale predicated on telemetry and visibility — pairing Proofpoint’s Knowledge Graph signals with Varonis’ data-access mappings to accelerate detection and remediation “at machine speed.”
Yaki Faitelson, Varonis’ CEO and co-founder, framed the move as a speed play: the company’s mission “to secure AI and the data that powers it” would advance faster within the combined organization than Varonis could on its own. Proofpoint’s leadership, for its part, has stressed two fronts where AI is changing the security equation: attackers using AI to mount faster, more advanced campaigns, and the proliferation of internal AI agents that widen insider risk.
The next concrete milestone is procedural: shareholder and regulatory sign-offs ahead of a first-half-2027 close. If approved, the deal will consolidate data-centric visibility and people-centric defenses under one ownership umbrella — a bet by both companies that securing data is the central problem of the AI era.
