Proofpoint, a Thoma Bravo portfolio company, will acquire Varonis Systems (NASDAQ: VRNS). The announcement was published on Thursday, October 15, after the close of trading. The price: $49.75 per share in cash, about $6.3 billion according to the announcement - a 52% premium to the June 22 close, the last full day before the first rumors, and 17% to the September 1 close, the last full day before additional media reports. Closing is expected in the first half of 2027.
There may be errors or inaccuracies. Found something that looks wrong? Write to me and I will fix it.
What was signed
| The agreement | |
|---|---|
| Price per share | $49.75 in cash, without interest |
| Deal size according to the announcement | About $6.3 billion |
| Premium to the June 22 close ($32.71) | 52% |
| Premium to the September 1 close ($42.35) | 17% |
| Free cash flow multiple, 12 months to June 30, 2026 | About 53 |
| Revenue multiple, same period | 8.4 |
| Expected closing | First half of 2027 |
| Outside date for closing | July 15, 2027, and up to October 15, 2027 if only the regulatory condition remains open |
| Termination fee paid by Varonis | $211.7 million |
| Reverse termination fee paid by Proofpoint | $423.3 million |
Premiums, multiples and dates as published in the announcement and the agreement. June 22 is the last full day before the first rumors, and September 1 is the last full day before additional media reports. The cash flow multiple is calculated on market value, and the revenue multiple on enterprise value. Source: the companies' joint announcement, Form 8-K and the merger agreement, October 15, 2026.
What is $6.3 billion? The announcement does not define whether the amount is equity value or enterprise value. The multiples it publishes point to an answer: the revenue multiple is calculated on enterprise value, and a multiple of 8.4 on revenue of about $688 million in the 12 months ended June 30 implies an enterprise value of about $5.8 billion. That is lower than $6.3 billion, and the gap squares with $911.5 million in cash and securities against $460 million of convertible notes. Hence $6.3 billion is probably the equity value. This is an inference from the multiples, not a figure the announcement states.
The structure: Vail Merger Sub, the buyer's merger vehicle, will merge into Varonis, which will survive as a wholly owned company, be delisted from Nasdaq and cease reporting. The buyer side of the agreement, the parent company and the merger vehicle, belongs to funds advised by Thoma Bravo. Options will be settled in cash at the difference between the deal price and the exercise price, as will RSUs and PSUs that vest at closing with no further condition. The remaining RSUs and PSUs will be converted into cash awards on the same vesting schedule, payable in cash or in shares of the surviving company or of the parent company. The 1.00% convertible notes due 2029 are a separate matter: under the indenture, the merger is an event that triggers the compensation mechanism for holders (Make-Whole Fundamental Change).
The board approved unanimously and recommended that shareholders approve. According to Faitelson in the announcement, a committee of independent directors conducted a comprehensive evaluation, including broad outreach to potential strategic and financial buyers. Goldman Sachs is Varonis's exclusive financial advisor and Paul Hastings its legal counsel. Proofpoint is represented by BofA, Morgan Stanley, J.P. Morgan, UBS and Mizuho as financial advisors, and by Kirkland & Ellis.
Who Varonis is
Varonis is a cybersecurity company traded on Nasdaq. It was incorporated in Delaware on November 3, 2004, and operations began on January 1, 2005. Its technology, the MetaData Framework, was developed jointly by two founders: Yaki Faitelson, CEO, president and chairman of the board since 2004 (age 50), and Ohad Korkus, a director since 2007 who served as chief technology officer from 2007 until February 2018.
The headquarters is in Miami, Florida, at 801 Brickell Avenue. According to the 2025 10-K, the company's development center is in Herzliya, where most of the research and development team is employed. At the end of 2025 Varonis employed 2,658 employees and contractors: 1,139 in the US, 916 in Israel, about 34%, and 603 elsewhere. It also has offices in North Carolina (US support and inside sales) and in Cork, Ireland (the EMEA region).
In 2025 revenue reached $623.5 million, up 13.2% from $551.0 million. SaaS revenue more than doubled, to $462.6 million from $208.8 million, and the self-hosted product will reach end of life on December 31, 2026. ARR at the end of 2025 stood at $745.4 million, up 16% from $641.9 million, of which $638.5 million, about 86%, is SaaS ARR. About 71% of revenue comes from the US. On the other hand, the GAAP operating loss was $146.5 million and the net loss was $129.3 million, alongside operating cash flow of $147.4 million.
In the second quarter of 2026, reported on July 28, revenue reached $180.0 million versus $152.2 million a year earlier, up 18.3%. SaaS ARR stood at $726.0 million, up 52%, or 25% excluding conversions, and the company held $911.5 million in cash and securities.
The run-up before the announcement
The premium in the announcement is measured from two points: June 22 and September 1. These are the official Nasdaq closes since then:
| Date | Close (USD) | What it represents |
|---|---|---|
| June 22 | 32.71 | The last full day before the first rumors; the basis for the 52% premium |
| June 23 | 35.03 | |
| June 24 | 37.29 | |
| September 1 | 42.35 | The last full day before additional media reports; the basis for the 17% premium |
| September 2 | 46.76 | The day after the report that an acquisition was under consideration |
| October 9 | 50.12 | Above the deal price |
| October 12 | 46.37 | |
| October 14 | 47.06 | |
| October 15 | 47.34 | The last close before the announcement |
On the trading day after June 22 the stock rose 7.1%, and on the day after that by another 6.5%. On September 2 it jumped 10.4%, after a Yahoo Finance report that Proofpoint was considering an acquisition. On October 9 it closed at $50.12, above the price set in the deal, and in the following session, on October 12, it fell 7.5% to $46.37.
At the last close before the announcement, $47.34, the stock was already 44.7% above the June 22 close and 11.8% above the September 1 close. And that is the gap between the premium in the headline, 52%, and the one seen by someone holding the stock on the eve of the announcement: 5.1%.
What has to happen before closing
Closing is subject to four conditions. Approval by holders of a majority of the voting power of the outstanding shares, which is the only shareholder vote. The absence of an order or law prohibiting the deal. Expiration of the waiting period under the US HSR antitrust act, alongside approvals under foreign laws listed in Section 6.1(c) of the company's disclosure letter. And the absence of a Material Adverse Effect on the company. There is no financing condition.
The HSR filings and the other filings are required within 10 business days of signing, and the buyer pays all the fees. The buyer is committed to agree to regulatory remedies such as asset sales and behavioral restrictions, but is not required to litigate.
Is an Israeli approval required? The public documents do not say. The list of foreign approvals is in the disclosure letter, which is not public, and the filings do not mention an approval from the Israel Competition Authority or the Investment Center. What the agreement does say about Israel is tax-related: the company is obligated to ask the Israel Tax Authority for an interim tax ruling on withholding tax on option and RSU payments and, after closing, for a ruling under Section 102, and Section 102 amounts will be transferred through a Section 102 trustee. These are tax undertakings, not closing conditions.
The financing: Thoma Bravo funds provide an equity commitment, and financial institutions that were not named have committed to debt financing. Ontario Teachers' Pension Plan agreed to invest in Proofpoint, a detail that appears in the announcement only and not in the text of the agreement. The amounts, the financing institutions and the leverage were not disclosed in the filing but in the commitment letters, which were not filed. Varonis is defined as a third-party beneficiary of the equity commitment letter and can sue to enforce it, provided that the debt has been funded at closing.
The agreement includes a prohibition on soliciting competing offers (no-shop) and does not include a go-shop period. Until the shareholder vote, the board may engage with an unsolicited written proposal if it determines that it is a superior proposal or could lead to one, and the company may terminate the agreement to accept a superior proposal. Varonis will pay $211.7 million if the board changes its recommendation, if it terminates to accept a superior proposal, or if an acquisition proposal was made public and a deal was signed within 12 months. Proofpoint will pay $423.3 million if it does not close when the conditions have been met and Varonis is ready to close, or if Varonis terminates because of an uncured breach. The reverse amount is almost exactly double Varonis's termination fee, and the two represent 3.4% and 6.7%, respectively, of $6.3 billion.
Faitelson, who holds about 0.67% of the shares, signed a support agreement and undertook to vote in favor. On the same day he signed a term sheet with the buyer to serve for 18 months after closing in a role defined as a non-executive officer. Compensation terms were not published, and no other management changes were reported.
Varonis will report third-quarter results on November 3, after the US market close, without a conference call. The guidance it gave on July 28 - third-quarter revenue of $185.0-188.0 million and full-year revenue of $735-739 million, free cash flow of $105-110 million and cloud ARR of $819-850 million - was not repeated in the deal announcement.
And the stock: October 15 is not the reaction day
The announcement was published after the close of trading on October 15. The close of $47.34, up 0.59% from $47.06 on October 14, is not a reaction to the deal - it is the last close before the market knew. The deal price, $49.75, is $2.41 above it, 5.1%. Against the October 14 close the gap is 5.7%.
The first trading day after the announcement is Friday, October 16. Its close is not included in this article, so there is no reaction price here.
הזווית שלי
דעה אישית של אילן אברמוב - לא ייעוץ ולא המלצה
The premium in the headline, 52%, is a correct number that measures something that has already happened. Someone who held the stock on the eve of the announcement received an offer at a 5.1% premium, and the stock traded on October 9 above the set price and in the following session fell 7.5%. I have no well-founded explanation for that move, so I do not offer one.
The small gap can be read in two ways. The first: the deal is well protected - there is no financing condition, and there is a reverse termination fee of $423.3 million - so the gap mostly prices time. The second: the list of foreign approvals is not public, and the buyer is not required to litigate - meaning that from the outside there is no way to know how many bodies need to approve, and the window can stretch to October 2027.
And what I do not know: what will happen to the operations in Israel. 916 of 2,658 employees, and the development center where most of the research and development team is employed, are here, and what the agreement says about it explicitly is tax-related. That is the question I will follow.
(To be clear: this is my personal opinion only. Nothing here is a recommendation to take any action, and there is no forecast here of the price of any security.)
Ilan Abramov, the author, or anyone on his behalf may hold some of the securities or funds mentioned in this article.
