Here is the question worth sitting with: if Varonis was already up roughly 98% over the six months before this deal was announced, and a sophisticated private equity buyer with full access to the books still paid a 52% premium to the pre-rumor price, what does that say about what the public market had been getting wrong?
The deal is one of the largest cybersecurity acquisitions announced so far in 2026. Varonis shareholders receive $49.75 per share in cash, a 52% premium to the closing stock price of $32.71 on June 22, the last full trading day before rumors of a potential sale emerged. Thoma Bravo, which already owns Proofpoint, is not known for overpaying. When it writes a check this size, the gap between that June price and $49.75 is a signal worth decoding.
Why This Deal Matters Now
The transaction values Varonis at approximately 53 times last twelve months free cash flow and 8.4 times last twelve months revenue. The broader public cybersecurity market trades at roughly 8x trailing revenue as of August 2026. So Varonis is being taken out right at the sector average, even though its growth profile is faster than most. That is the key tension: a buyer is paying market-rate revenue multiples for a business growing well above market rates.
SaaS annual recurring revenue was $726 million as of June 30, 2026, up 52% year over year. Varonis delivered Q2 2026 revenue of $180 million, up from $152.2 million a year earlier. The SaaS transition that weighed on near-term margins for years is nearly done: SaaS revenues accounted for 95.4% of revenue in the three months ended June 30, 2026. What Thoma Bravo is buying is a business that has already absorbed most of the transition pain and is now entering the phase where operating leverage compounds.
The Strategic Bet
The deal pairs the email security giant’s threat intelligence with Varonis’ visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise networks. Varonis focuses on identifying and classifying sensitive data, managing permissions, and detecting suspicious data usage. That capability is increasingly rare. CrowdStrike and Palo Alto Networks dominate endpoint and network security, but data-layer visibility at Varonis’ depth has no obvious public-market substitute at scale.
Proofpoint plans to create what it describes as the largest data and AI cybersecurity organization and a leading pure-play cybersecurity company. Ontario Teachers’ Pension Plan has agreed to make an investment into Proofpoint in connection with the transaction, adding institutional credibility to the financing structure.
Bull Case and Bear Case
The bull case for existing shareholders is simple: the cash is locked in. The deal, approved unanimously by Varonis’ board, is expected to close in the first half of 2027, subject to shareholder and regulatory approvals. The arb spread, with VRNS trading around $47.34 as of the October 15, 2026 close, reflects standard deal-close risk on an uncomplicated transaction.
For investors watching publicly listed peers, the implications are more interesting. Bloomberg Law reported Thursday, October 15, 2026, that the transaction underscores how private equity-related dealmaking in the technology sector is rebounding after concerns about artificial intelligence drove a steep selloff in software stocks earlier this year. If Thoma Bravo sees this as the right moment to pay up for data security, that view has implications for how the market should price CrowdStrike’s data protection capabilities, Palo Alto’s Cortex platform, and any other vendor that has been building toward the same AI-era data security positioning.
The bear case is regulatory and timing. A deal of this size, crossing international jurisdictions given Varonis’ Israeli founding, requires careful navigation. An independent board committee conducted an extensive evaluation before the deal, during which the company approached various strategic and financial buyers. That process suggests the $49.75 price reflects genuine price discovery, not a rushed first offer.
Bottom Line
Varonis shareholders got a clean exit at a price that vindicates years of platform investment. What is more useful for active investors is the implicit message: a buyer with private-market discipline and full due diligence access decided that data security assets are worth more than where public equity markets had been pricing them. In a sector where CrowdStrike and Palo Alto routinely command 20x-plus revenue multiples, a takeout at 8.4x for a 52%-ARR-growth business looks like a floor, not a ceiling, for what this category is actually worth.