Varonis (NASDAQ: VRNS) published a report that at first glance looks like two different companies: impressive growth in one metric, a collapse in another, and a profit that is both positive and negative - depending which line you read.
And this is not confusion. This is exactly what a company mid-transition from one business model to another looks like.
About the Company
Varonis is a data-security company - and specifically, security of the data itself, as distinct from the network security around it.
The difference is material. Most traditional cyber products build a wall: they try to stop an attacker from getting in. Varonis focuses on a different question - who inside the organization is accessing which files, and should they be. In a typical large organization, tens of thousands of sensitive documents are open to employees who have no reason to access them. That is the problem it solves.
And why that became especially relevant now: when an organization connects an artificial-intelligence model to its internal data stores, the model can reach everything the user can reach - and sometimes more. A question that was theoretical became immediate. The company positions itself exactly there, and in the report it cites new products named Atlas, Interceptor and Database Activity Monitoring, as well as support for Cursor, the AI-based development tool.
The company was founded by Yaki Faitelson, who serves as CEO, and it has a significant development center in Israel.
The Cloud Transition - and That Is the Whole Story
Before the numbers you have to understand the move the company is in the middle of, because without it the report is unreadable.
The old model: a term license. The customer buys a three-year license and pays up front. In accounting terms, a substantial part of the revenue is recognized immediately at the point of sale.
The new model: cloud (SaaS). The customer pays a subscription, and the company recognizes revenue over the service period - month by month.
And here is the problem: when a customer moves from one model to the other, reported revenue falls - even if the customer pays exactly the same amount, and even if they pay more. The money did not disappear; it was spread forward.
And that is why ARR matters more than revenue
ARR - annual recurring revenue - measures the annualized revenue run-rate of all active subscriptions at a point in time, regardless of how accounting spreads it. In a company mid-transition to cloud, this is the only metric that reflects business reality. Quarterly revenue is distorted downward for a technical reason; ARR is not. That is why management guides on it, why analysts examine it, and why you should start there.
What Was Reported
Revenue - above guidance:
| Metric | Current quarter | Year ago |
|---|---|---|
| Total revenue | $180.0 million | $152.2 million |
| Cloud (SaaS) revenue | $171.7 million | $105.9 million |
| Term license subscription revenue | $4.2 million | $32.4 million |
| Maintenance and services | $4.1 million | $13.9 million |
The company's guidance was $175-178 million - so, above the top of the range.
And this table is a perfect illustration of the transition. Cloud jumped from $106 million to $172 million. And at the same time, term licensing collapsed from $32.4 million to $4.2 million - a decline of 87%, and maintenance from $13.9 million to $4.1 million. The company notes that the vast majority of the declines stems from customers converting to the cloud platform - that is, the same customers, on a different line.
ARR - the Metric That Decides
| Metric | Value | Change |
|---|---|---|
| Cloud ARR - total | $726.0 million | +52% |
| Cloud ARR excluding conversions | - | +25% |
| Cloud ARR from new logos | - | over 20% |
And why present two numbers? Because 52% also includes long-standing customers who simply moved from one model to the other - a figure that looks impressive but part of which is an internal transfer, not new business. The 25% figure excluding conversions is the more honest one: it measures real growth.
The company's guidance called for 24%-25%. The result is at the top end.
And within that, the figure worth particular attention: ARR from new logos grew over 20%. A mature company can show attractive growth purely from expanding existing accounts - and that is fine, but it is limited. New customers are the gauge of demand in the market, not just in the installed base.
Profit: Two Opposite Numbers
| Metric | Current quarter | Year ago |
|---|---|---|
| Adjusted operating profit | +$3.7 million | $(1.9) million |
| GAAP operating loss | $(40.6) million | $(36.6) million |
Adjusted operating profit turned positive - and guidance had called for a range of minus $1 million to breakeven. Here too, above the bar.
But the GAAP loss actually widened - from $36.6 million to $40.6 million.
And there is no contradiction here. The gap between the two in a software company stems largely from stock-based compensation - shares and options for employees. That is a real expense from a shareholder's perspective, because it dilutes them, but it is not cash leaving the treasury. So it is worth looking at both numbers: adjusted shows the operations, and GAAP is a reminder that there is a real cost to recruiting and retaining employees in this industry.
Cash and Cash Flow
| Metric (six months) | 2026 | 2025 |
|---|---|---|
| Cash from operations | $80.1 million | $89.3 million |
| Free cash flow | $69.1 million | $82.7 million |
| Adjusted free cash flow | $81.0 million | $84.3 million |
And the gap between the last two lines is explained: the company paid $11.9 million in acquisition-related costs during the half, against $1.7 million a year ago. Excluding that item, cash flow is nearly identical to last year's.
And the balance sheet is strong: $911.5 million in cash, deposits and marketable securities.
Guidance - Raised
For the third quarter:
| Metric | Guidance |
|---|---|
| Cloud ARR growth (excluding conversions) | 22%-23% |
| Revenue | $185-188 million (+14%-16%) |
| Adjusted operating income | $2.5-3.5 million |
And for the full year - here is the raise:
| Metric | Updated guidance |
|---|---|
| Cloud ARR | $819-850 million (+28%-33%) |
| ARR growth excluding conversions | 20%-21% |
| Revenue | $735-739 million (+18%-19%) |
| Adjusted operating income | $11-13 million |
| Adjusted EPS | $0.14-0.15 |
| Free cash flow | $105-110 million |
According to the company, this is a $5 million raise to the ARR target excluding conversions versus last quarter, and it is beyond the size of the quarter's own beat - meaning it is not merely rolling a good result forward.
The Bull Thesis
Whoever reads it positively will point to the fact that the company beat its own guidance on every line it guided: revenue above the range, ARR at the top end, and adjusted operating profit turning positive when guidance had called for breakeven.
Beyond that: the annual raise. A company raising guidance beyond the size of the beat is signaling it sees demand, not just a good quarter.
And market timing is in its favor. Data security in an era when organizations are connecting models into their data stores is exactly the problem the company was built to solve. ARR from new logos growing over 20% supports the view that this is real demand and not a narrative.
And finally, a balance sheet of $911 million gives a company this size room to maneuver.
The Bear Thesis
Whoever reads it critically will note first absolute profitability. Adjusted operating profit of $3.7 million on revenue of $180 million is a margin of about 2%. This is still a business that barely earns, and the GAAP loss is $40.6 million for the quarter.
Second, ARR excluding conversions is decelerating. 25% this quarter, guidance of 22%-23% next quarter, and 20%-21% for the full year. The trend is down - natural in a company that is growing, but it is still a decline.
Third, cash flow fell. $69.1 million of free cash flow in the half against $82.7 million a year ago. Even if most of the gap is explained by acquisition costs, the direction is not upward.
And fourth, competition. The data-security market is crowded: Microsoft offers built-in capabilities in Purview, and there are many dedicated players in the DSPM space. A company the size of Varonis competes against players far larger than itself.
The debate in one line
The bulls see a beat on every guided line, a full-year raise beyond the size of the beat, cloud ARR jumping 52%, new logos growing over 20% and precise positioning in the problem AI created. The bears see an adjusted operating margin of only 2%, a GAAP loss of $40.6 million, an ARR growth rate decelerating across the next three quarters, and competition against Microsoft. Both sides are reading the same report.
My Angle
A personal opinion of Ilan Abramov - not advice, not a recommendation
This report is one of the best lessons I have seen on the question of which number to look at.
If I read only the term-license revenue line - down 87% - I would conclude the business is collapsing. If I read only the ARR - up 52% - I would conclude it is surging. Both are in the same report, and both describe the same movement.
And what I take from it: a cloud transition is a period when accounting lies to you in the unfavorable direction. Not deliberately - simply because the rules spread already-closed revenue forward in time. A company going through such a transition will look worse than it is, exactly as a company doing the reverse will look better.
And the number I really look at here is ARR from new logos - over 20%.
That is, to me, the important line in the report, and it is barely in the headline. Expanding existing accounts is always the easy path. A customer already using the product who buys another module is a cheap sale. A new customer is a genuine test of the product against the market - they owe nothing, and they chose.
And what explains it is the timing. Organizations today are connecting language models to their internal data stores, and then discovering that an old question - "who is even supposed to access this file" - has suddenly become urgent. A model that can read everything will expose everything. This company did not build a product around AI; it built a product that AI made urgent. That is a meaningful difference.
And what I will follow: the ARR pace excluding conversions. 25% this quarter, 22%-23% next, 20%-21% for the year. The trend is down, and that is natural - but we need to see where it settles. Deceleration will be understood as long as it is gradual. If it accelerates, the question becomes one about demand rather than about arithmetic.
Summary
Varonis delivered a quarter in which it beat every target it guided: revenue of $180.0 million against guidance of $175-178 million; cloud ARR growth excluding conversions of 25%, at the top end of guidance; and adjusted operating profit of $3.7 million that turned positive, when guidance had called for breakeven. And full-year guidance was raised beyond the size of the beat.
And at the same time: the GAAP loss widened to $40.6 million, term-license revenue collapsed 87%, and free cash flow declined. All of these are the expected symptoms of a cloud transition, not signs of weakness - but they are real, and ignoring them yields a partial picture.
The question for the investor is not whether the transition is working - ARR of $726 million answers that. The question is what growth rate lies beyond it, once the conversions are exhausted and only the new business remains.
Sources: Varonis Systems' official results announcement for the second quarter of 2026 (July 28, 2026), as filed with the U.S. Securities and Exchange Commission on Form 8-K, including revenue and its breakdown, cloud ARR on all three cuts, GAAP and adjusted operating profit and loss, cash flows, cash balances and guidance for the third quarter and the full year; the company's prior guidance as given on its first-quarter call. Data accurate as of the time of writing. The chart is shown in real time via TradingView. Nothing herein constitutes a forecast, recommendation or advice - see the full disclaimer at the bottom of the page.