Proofpoint to Acquire Varonis for $6.3B to Address AI Data Risks
The cybersecurity firms plan to merge data security platforms to protect information from automated AI threats and prepare for an IPO.
Key points
- Proofpoint announced a $6.3 billion acquisition of publicly traded data security vendor Varonis.
- The combined entity will have over 8,000 employees and more than $3 billion in annual recurring revenue.
- CEO Sumit Dhawan stated the deal targets AI and agentic risks, strengthening prospects for a future IPO.
Proofpoint plans to acquire Varonis for $6.3 billion to create a unified platform for securing data against emerging artificial intelligence threats, according to an interview with CRN.
The risk
Proofpoint CEO Sumit Dhawan told CRN that the acquisition addresses the growing danger posed by AI agents accessing sensitive information. He described the deal as "market-changing" because it combines complementary technologies to secure data holistically. Dhawan noted that AI attacks data from both outside and inside organizations, requiring protection at machine speed.
Who is exposed
The combined company will serve customers who need to protect data in an era of increasing AI adoption. Dhawan stated that data security is a board and CEO level priority because organizations cannot enable AI without proper safeguards. The platform aims to help partners deliver comprehensive solutions to these customers.
Cost and compliance
The transaction value is $6.3 billion, a figure disclosed by the companies and reported by CRN. Upon completion, the merged entity will employ more than 8,000 people. The combined annual recurring revenue will exceed $3 billion, creating what Dhawan called a top-five cybersecurity company with healthy growth.
What should you do?
Managers should review their current data security posture to ensure it can handle automated AI interactions. Teams need to assess whether their existing tools can protect data from both internal and external AI threats. Organizations should verify that their security strategy aligns with board-level priorities for AI adoption.
The background in plain language
AI agents are software programs that can act autonomously to complete tasks. These agents require access to large amounts of data to function effectively. This access creates new vulnerabilities where data could be exposed or manipulated. Security teams usually need to monitor data movement continuously. They must check whether their current tools can detect automated access patterns. Holistic protection involves integrating signals from different security layers to respond quickly.
Background: AI agents
AI agents are software systems that perceive their environment, make decisions, and execute actions to achieve specific goals. Unlike standard models, they maintain internal state and interact with external tools, creating unique security risks around tool execution, memory retention, and autonomous decision loops that require specialized controls.
Read the full guide: AI Agents Explained: Answers to Security and Architecture Questions
What to do and how to stay safe: Proofpoint
- Audit current data access policies to identify unnecessary permissions for automated tools.
- Verify that security solutions can detect anomalous data movement at machine speed.
- Ensure that internal and external data protection strategies are integrated and consistent.
- Review board-level security priorities to align with AI adoption plans.
Step-by-step guide: Mobile Security Architecture: 8 Practices for Device Integrity
General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How much is Proofpoint paying for Varonis?
Proofpoint is acquiring Varonis for $6.3 billion, according to the announcement and CRN reporting.
What is the main goal of this acquisition?
The goal is to create a comprehensive data security solution that protects against AI and agentic risks, according to CEO Sumit Dhawan.
Will the combined company go public?
Dhawan stated that the goal is to assess an initial public offering after the deal closes, as the combination would be more attractive to public investors.




