Proofpoint and Varonis said Thursday after the bell (4:15 PM ET) that they have signed a definitive agreement for Proofpoint, a Thoma Bravo portfolio company, to buy Varonis Systems in an all-cash deal valued at about $6.3 billion. Varonis holders get $49.75 a share. The merger agreement is dated Oct 15, and the Varonis board approved it unanimously (Proofpoint/Varonis release via GlobeNewswire).
The price. $49.75 is a 52% premium to the $32.71 close on June 22, the last day before the first sale rumors, and 17% over the $42.35 close on Sept 1, the day before Reuters and Bloomberg reported Proofpoint talks. The companies put it at about 8.4x LTM revenue (enterprise value) and about 53x LTM free cash flow (market cap), both as of June 30. VRNS closed Thursday at $47.34, so the cash price is about 5% above where the stock already traded. Most of the premium was priced in weeks ago.
The money and the clock. Thoma Bravo is putting up committed equity and has lined up debt commitments. Ontario Teachers’ Pension Plan is also investing in Proofpoint as part of the deal. Close is expected in the first half of 2027, pending a Varonis shareholder vote and regulatory approvals. After that, VRNS comes off Nasdaq. Varonis will still report Q3 on Nov 3 after the close, but it won’t hold a call. Advisors: Goldman Sachs and Paul Hastings for Varonis. BofA, Morgan Stanley, J.P. Morgan, UBS and Mizuho, with Kirkland & Ellis, for Proofpoint.
What actually gets combined. Proofpoint owns the inbound path: email, collaboration, and the people who click things. Varonis owns the data side: what is sensitive, who can open it, and who is actually opening it. That spans file shares, Microsoft 365, cloud data stores, and AI copilots, with a 24x7 MDR team behind it. Proofpoint’s pitch is one graph connecting communications, identities, permissions and data. That way a phished account, a permissions sprawl problem and an exfil attempt show up as a single incident instead of three tickets. The combined company claims more than 16,000 enterprise customers.
Who it squeezes. Microsoft Purview, Cyera, BigID, Netwrix and the DSPM tools that cloud and backup vendors have bought. All of them now face a rival bundling data access governance with the email gateway Proofpoint already sells to more than 80 of the Fortune 100. Varonis’ board said it reached out to both strategic and financial buyers. The buyer that won is a PE-backed platform, not a strategic.
What to do this week if you run Varonis. Pull your contract and read the change-of-control and renewal terms. Ask in writing what happens to the self-hosted data center product line, and whether your current SaaS migration timeline survives the deal. Also check whether the MDR coverage terms carry over unchanged. If you run both vendors, expect a bundle quote at your next Proofpoint renewal. Price it against what you pay today.
The read. This is the platform stitch that has been rumored since September, now signed: email plus data security, at public-company scale, under a PE owner. At 8.4x revenue, Thoma Bravo is paying for Varonis’ SaaS transition before it has finished. The closing window runs to mid-2027, so the integration risk sits with customers in the meantime.