Varonis is a data and AI security company. It helps security teams find where their sensitive data lives, see which people and AI agents can reach it, cut back excess access and catch threats such as ransomware, insider misuse and rogue agents, across cloud, SaaS, Microsoft 365, on-premises file systems, NAS and databases.
It is built for organisations whose biggest risk is not a single system but the sprawl of permissions on their data, a problem that grows as copilots and agents are given the same reach as the people who deploy them.
At A Glance
| Vendor | Varonis Systems, Nasdaq: VRNS |
|---|---|
| Category | Data security |
| Identities covered | Users and AI agents with access to data, mapped across cloud and hybrid environments |
| Deployment | SaaS |
| Agentic AI | Atlas AI Security, MCP gateway, Athena AI |
| Founded | 2005 |
| Ownership | Being acquired by Proofpoint, closing expected first half of 2027 |
| Market classification | Data Security |
What Varonis Does
“AI runs on data. Varonis keeps it secure.” Data is the asset at risk, and both people and AI tools are the paths to it. Varonis starts from the data rather than from the network or the endpoint: it works out what is sensitive, who and what can reach it, and whether that access is used, then shrinks access to what is actually needed and watches what remains. The aim is to let organisations connect AI to their most critical data without widening their exposure.
Products
Data Security Platform
The core platform is for teams that cannot say where their sensitive data sits or who can open it. It classifies data, including types unique to a business, and its DSPM ranks posture risks, compliance gaps and toxic combinations by severity. Next-Gen DAM brings cloud-native database activity monitoring, while data-centric UEBA, access governance and DLP watch how data is used. Remediation enforces least privilege, labels sensitive data and cleans out redundant, obsolete and trivial files.
Identity Security
Identity Security approaches the same problem from the identity side. Identity resolution maps each identity across cloud and hybrid environments, and posture management plus ITDR show every identity, attack path and permission level, so teams can trace an account to the data it could expose.
Atlas AI Security
Atlas is for organisations rolling out copilots, LLMs and agents faster than they can govern them. It manages AI security posture across the AI data lifecycle, shows which AI tools and agents touch which data, and manages the risk of third-party AI services.
Interceptor
Interceptor covers the human entry points: email security against phishing and social engineering, browser security and email data protection.
Managed Data Detection And Response
Varonis also runs a managed service that monitors alerts and responds to data threats on the customer’s behalf, using the same platform.
How It Works
Every supported platform is delivered as SaaS from a cloud-native service.
| Component | What it does |
|---|---|
| Data coverage | Connectors read permissions, activity and content from cloud, SaaS, Microsoft 365, file shares, NAS and databases. |
| Identity resolution | Identities are linked across environments so permissions and attack paths lead back to the data each one can reach. |
| Network telemetry | VPN, web proxy, DNS and firewall data, from sources such as Zscaler Proxy, Palo Alto PAN-OS firewalls and Infoblox, adds context to detections. |
| MCP gateway | Atlas sits between AI clients and MCP servers and binds each server to a credential on a gateway token. |
Identities And Systems Covered
| AI agents | Varonis “maps what every agent can reach and right-sizes access to data and tools based on intent” |
|---|---|
| Human and machine identities | Permissions analysis covers who or what is accessing data |
| Directories | Active Directory, Entra ID, LDAP and NIS |
| Cloud | AWS (S3, EC2, EBS, RDS, Redshift), Azure (Blob Storage, Databases), Google Cloud (BigQuery, Cloud Storage) |
| SaaS | Box, Confluence, Jira, GitHub, Bitbucket, Salesforce, ServiceNow, Slack, Snowflake, Databricks, Zoom |
| Microsoft 365 | Exchange Online, OneDrive, SharePoint Online, Teams |
| File systems and NAS | Windows File Shares, UNIX/Linux, NetApp, Dell, Nasuni, Qumulo, VAST Data, Cohesity |
| Databases | MSSQL, Oracle, PostgreSQL, MySQL, MongoDB, IBM DB2, Amazon Aurora, DynamoDB, CosmosDB |
| AI platforms | Microsoft 365 Copilot, ChatGPT Enterprise, Claude Enterprise, Cursor, AWS Bedrock, Salesforce Agentforce |
Agentic AI Capabilities
MCP Gateway Controls
Atlas finds every MCP server, shows what each can reach and enforces an allowlist at runtime: “No binding, no access.” Policies flag shadow MCP, changed tool definitions and servers that reach sensitive data without an owner. It supports Streamable HTTP, Server-Sent Events and STDIO transports with API key or OAuth credentials.
Guardrails And Red Teaming
Runtime guardrails block attacks, redact sensitive data and keep agents on task. Coding agent protection blocks risky commands and catches agents that drift from their assignment, and red teaming tests models, agents and chat apps automatically.
Athena AI
Athena AI is an assistant inside the platform that speeds up investigations and analyses.
Company Background
| Founded | 2005, by Yaki Faitelson and Ohad Korkus |
|---|---|
| Headquarters | Miami, Florida, with research and development in Herzliya, Israel |
| Leadership | Yaki Faitelson (Co-Founder, CEO and Chairman of the Board) |
| Ownership | Listed on Nasdaq in 2014; in October 2026 Proofpoint agreed to buy Varonis for $49.75 per share in cash, a deal valued at about $6.3 billion |
| Acquisitions | Polyrize (2020), Cyral (2025), SlashNext (2025) and AllTrue.ai (2026) |
| Research | Varonis Threat Labs, a team of threat hunters |
| Recognition | Included in Gartner Peer Insights, the Forrester Wave for data security platforms and G2’s Spring 2026 reports |
Note: This overview is compiled from Varonis’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.