What happened
Proofpoint announced an agreement to acquire Varonis for $6.3 billion, with the deal expected to close in the first half of 2027. The acquisition aims to create a leading cybersecurity entity focused on data and AI security, specifically addressing risks from AI agents accessing sensitive data.
Proofpoint announced on Thursday that it has reached an agreement to acquire Varonis in a deal valued at approximately $6.3 billion. According to MSSP Alert, citing CRN, the acquisition is expected to close in the first half of 2027. Proofpoint, which is owned by Thoma Bravo, will offer $49.75 per share in cash, representing a significant premium to Varonis's recent share prices.
The primary goal of the acquisition is to significantly expand Proofpoint's presence in the data and AI security market. The combined entity will focus on protecting data and governing AI interactions. Proofpoint plans to integrate Varonis's capabilities, including data security posture management, data access governance, and data loss prevention, with its own existing offerings.
A key focus of the combined company will be addressing the growing risks associated with AI agents and their access to sensitive data. The company aims to provide a unified platform that enables organizations to confidently adopt AI, discover and protect data, and control both human and AI access to resources. This acquisition follows Proofpoint's $1.8 billion purchase of Hornetsecurity in December 2025, further demonstrating its strategy to expand its market reach and capabilities in the cybersecurity landscape.
Source details: msspalert.com ↗
Why it matters
This acquisition signals a major shift in the cybersecurity industry toward integrating with traditional data security. By combining Varonis's data security posture management with Proofpoint's existing offerings, the new entity aims to provide a unified platform for controlling both human and AI access to resources. This move is significant for organizations looking to adopt AI confidently while maintaining strict data protection standards, reflecting the growing importance of AI security in enterprise environments.
This acquisition is poised to create one of the world's largest pure-play cybersecurity companies, with a strong emphasis on data and AI security. The move reflects the increasing importance of AI security in enterprise environments, as organizations grapple with the risks associated with AI agents accessing sensitive data.
By combining Varonis's data security posture management and data access governance capabilities with Proofpoint's existing offerings, the new entity aims to provide a unified platform for controlling both human and AI access to resources. This is significant for organizations looking to adopt AI confidently while maintaining strict data protection standards.
The acquisition also demonstrates Proofpoint's strategy to expand its market reach and capabilities in the cybersecurity landscape, following its $1.8 billion purchase of Hornetsecurity in December 2025. This move is likely to impact the competitive landscape among pure-play cybersecurity firms, as the combined entity will have a broader range of capabilities and a larger customer base.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
crm_get_transaction(id='4092').Why can ethical evaluation not be reduced to one model score?
What to watch next
Monitor the integration of Varonis's data security posture management and data access governance tools with Proofpoint's existing platform. Watch for specific product updates or new features that explicitly address access controls and data loss prevention in AI-driven environments. Additionally, track how this acquisition impacts the competitive landscape among pure-play cybersecurity firms.
Monitor the integration of Varonis's data security posture management and data access governance tools with Proofpoint's existing platform. Watch for specific product updates or new features that explicitly address access controls and data loss prevention in AI-driven environments.
Additionally, track how this acquisition impacts the competitive landscape among pure-play cybersecurity firms. The combined entity will have a broader range of capabilities and a larger customer base, which could give it a significant advantage in the market.
Finally, watch for any regulatory or compliance implications of the acquisition, as the combined entity will be handling sensitive data and AI interactions. This could have implications for data privacy and security regulations, particularly in regions with strict data protection laws.