The entrance of a Proofpoint office, with the company's name on a red-brick facade above glass doors

Sunnyvale’s Proofpoint Bets $6.3 Billion That the Next Security War Is Over What AI Can See

, ,

·

Editor-in-Chief

·

Top image: A Proofpoint office (Toronto). Photo: Raysonho @ Open Grid Scheduler / Scalable Grid Engine / CC0 via Wikimedia Commons

Five years after private equity took it off the public markets, Sunnyvale-based Proofpoint is now doing the buying. The email-security company, owned by Thoma Bravo, said Thursday it will acquire data-security firm Varonis Systems in an all-cash transaction valued at about $6.3 billion and a clear signal that the Valley’s security sector is entering a consolidation phase built around artificial intelligence.

Under the agreement announced Oct. 15, Varonis shareholders will receive $49.75 per share. The companies said that price is a 52% premium to Varonis’ closing price of $32.71 on June 22, the last full trading day before rumors of a possible sale first surfaced, and a 17% premium to its $42.35 close on Sept. 1, before a second round of media reports. They put the deal at roughly 53 times Varonis’ trailing free cash flow and 8.4 times trailing revenue.

The thesis: agents need guardrails

The two companies frame the deal less as a product tuck-in than as a bet on where enterprise risk is heading. Proofpoint built its business protecting people from phishing and other threats delivered through email and collaboration tools. Varonis, which co-issued the announcement from Miami, built its business on mapping where an organization’s sensitive data lives and who can reach it.

“As AI becomes embedded across the enterprise, the data it can access determines both its value and its risk,” Proofpoint CEO Sumit Dhawan said in the announcement. “AI agents are increasingly accessing sensitive information and taking action across systems, making it critical for organizations to understand not only what data needs protecting and who can access it, but how it is actually being used.”

The combined company, the release said, will serve more than 16,000 enterprises and intends to sell a unified platform for finding and protecting sensitive data, controlling what both people and AI systems can access, and stopping data loss.

Varonis CEO and co-founder Yaki Faitelson said the sale followed “a comprehensive evaluation led by a committee of independent members of our Board of Directors, which included extensive outreach to a range of potential strategic and financial buyers,” and called the price “well in excess of the risk-adjusted value of delivering against our standalone plan.” The Varonis board approved the deal unanimously.

The money behind it

Thoma Bravo is providing committed equity financing and has secured debt commitments, and the Ontario Teachers’ Pension Plan has agreed to invest in Proofpoint alongside the deal, according to the companies. A day later, Investing.com, citing Bloomberg, reported that Proofpoint had lined up $1.25 billion in financing, with JPMorgan and UBS appointed to lead a later sale of that debt in the high-yield bond market, according to people familiar with the matter.

The deal requires approval from Varonis shareholders and regulators and is expected to close in the first half of 2027. Until then the companies will operate independently. When it closes, Varonis stock will stop trading on Nasdaq. Varonis said it will still report third-quarter results after the market closes on Nov. 3, but will not hold an earnings call.

Bloomberg Law described the transaction as evidence that private equity-related technology dealmaking is rebounding after concerns about AI drove a steep selloff in software stocks earlier this year.

A familiar Valley pattern, run in reverse

Proofpoint knows the take-private playbook from the other side. Thoma Bravo completed its acquisition of Proofpoint on Aug. 31, 2021, for about $12.3 billion in cash, or $176 a share, delisting the company from Nasdaq. Now the portfolio company is being used as a platform to absorb a public peer, the classic private equity sequence of buy, build and consolidate.

The announcement did not address headcount, integration costs or where combined operations would be based, and Proofpoint said only that it intends “to move quickly to integrate the companies’ capabilities” after closing. For the South Bay, where Proofpoint is headquartered, those details will matter more than the multiple.

The long view

For two decades, enterprise security was sold as a stack of separate tools: one for email, one for endpoints, one for identity, one for data. AI agents, which act on a user’s behalf across all of those systems at once, undercut that model. A security company that can see only the inbox, or only the file share, sees only part of what an agent is doing.

That is the logic Proofpoint and Thoma Bravo are paying for: control the map of the data and the map of the people, and you are positioned to govern the software that increasingly sits between them. Whether a $6.3 billion premium buys that position or merely buys revenue will not be clear for years. What is clear now is that private capital, not the public markets, is setting the pace of consolidation in one of the Valley’s most important industries, and that the companies doing the consolidating are increasingly the ones private equity already owns.

Sources

Leave a Reply