Proofpoint to Acquire Varonis for $6.3 Billion in Largest Cybersecurity Deal of 2026

Proofpoint has agreed to acquire Varonis in an all-cash transaction valued at approximately $6.3 billion, the companies announced this week — the largest cybersecurity acquisition confirmed so far in 2026. This moves the earlier “talks” speculation into a signed, priced, and dated deal.

The economics are notable for how rich the exit is: Varonis shareholders will receive $49.75 per share in cash, a 52% premium over the $32.71 close on June 22, 2026, the last full trading day before deal speculation surfaced. Financing comes via Thoma Bravo, which owns Proofpoint, providing committed equity alongside secured debt commitments, with Ontario Teachers’ Pension Plan also investing in Proofpoint. The two companies will continue operating independently until close, expected in the first half of 2027, at which point Varonis goes private.

For data security buyers, the strategic logic is straightforward: Proofpoint brings visibility into who is being targeted (email, human-risk, insider threat telemetry), while Varonis brings visibility into what each identity can actually reach (data access graphs, DSPM, permissions sprawl across SaaS and on-prem repositories). Analyst commentary has framed this as a natural pairing of “targeting” and “blast radius” data — and the cross-sell math is lopsided in Proofpoint’s favor, since roughly half of Varonis’s existing accounts already run Proofpoint, meaning most of the upside flows into Proofpoint’s considerably larger install base rather than the reverse.

For DLP and DSPM-watching practitioners, this is a consolidation signal worth tracking closely: it follows a string of platform-building moves across the sector this year and suggests data-centric security vendors are racing to bundle identity, access, and content inspection into single platforms rather than compete as point products.