Cybersecurity company Proofpoint has agreed to buy data security specialist Varonis Systems for about $6.3 billion in cash. The deal, announced on October 15, 2026, is one of the largest cybersecurity acquisitions of the year, and it is built around a simple idea: as companies hand more work to AI agents, protecting the data those agents can see becomes critical.
The deal at a glance
- Buyer: Proofpoint, owned by private equity firm Thoma Bravo
- Target: Varonis Systems, listed on Nasdaq
- Price: $49.75 per share in cash, about $6.3 billion in total
- Premium: 52% over Varonis's June 22 close (before sale rumours) and 17% over its September 1 close
- Funding: equity from Thoma Bravo plus committed debt, with Ontario Teachers' Pension Plan also investing in Proofpoint
- Expected closing: first half of 2027
Varonis's board approved the deal unanimously. It still needs shareholder and regulatory approval. Once it closes, Varonis will become a private company and leave Nasdaq. Until then, the two firms will keep operating separately.
Who are Proofpoint and Varonis?
Proofpoint is best known for email security. It protects communications and data across email, cloud apps and collaboration tools, and it recently bought Hornetsecurity to strengthen protection for Microsoft 365 users.
Varonis, co-founded by CEO Yaki Faitelson, helps organisations find sensitive data, see who has access to it and cut unnecessary exposure. It offers automated data controls, round-the-clock managed detection and response, and a product called AI Shield, which finds exposed data, monitors AI interactions and tightens permissions.
Why AI agents are driving this deal
AI assistants and agents are only useful if they can read company files, emails and business systems. That creates a new risk. If an employee has access to far more data than they need, an AI agent working on their behalf may have that same broad access, and could surface or leak sensitive information.
Proofpoint CEO Sumit Dhawan summed it up: "As AI becomes embedded across the enterprise, the data it can access determines both its value and its risk."
The plan is to combine Proofpoint's communication and data controls with Varonis's data security tools into one platform that can answer three questions for security teams: what data can an AI agent reach, does it really need that access, and how is it using it? The combined company would serve more than 16,000 enterprises.
What it means for the cybersecurity industry
The deal fits a wider trend. Security vendors are racing to offer "platforms" rather than single tools, and AI is giving them a fresh reason to consolidate. Buyers want fewer vendors and a single view of risk, especially as AI tools spread across the workplace faster than security teams can review them.
It is also another sign of private equity's appetite for software. Thoma Bravo, one of the most active technology investors, is using Proofpoint as a platform to keep adding capabilities, and taking a listed company private lets the combined firm integrate products away from quarterly market pressure.
What it means for customers
For now, nothing changes. Both companies say they will run independently until the deal closes, and they have not yet shared a detailed integration roadmap or migration plan. Existing Varonis customers should expect their contracts and support to continue as normal, and should watch for product announcements once regulators sign off.
The bigger picture
The $6.3 billion price tag shows how much value the market now places on a once-niche area: understanding and controlling access to data. As AI agents move from experiments to everyday work, deals like this suggest that "who and what can see our data" may become one of the most important questions in enterprise security.
Source: Cybersecurity News, company announcements.
