Varonis Systems

Varonis Systems is a cybersecurity software company founded in 2005 by Yaki Faitelson and Ohad Korkus. The company was created around the problem of understanding and controlling how information is stored, accessed, and shared inside complex enterprise environments. Its early technology extracted metadata from file systems and used that information to improve file-activity tracking, information-rights management, access control, and data governance. The company’s central proposition is that data security depends on understanding relationships among data, identities, permissions, applications, and user activity. Its platform maps these relationships and analyzes behavior to identify exposed or sensitive information, excessive access privileges, suspicious activity, and potential routes to data loss. This approach is intended to help security, privacy, compliance, and information-technology teams reduce data exposure without relying solely on perimeter controls. Varonis initially concentrated on enterprise file systems and unstructured data. Over time, its scope expanded to cloud and multicloud services, SaaS applications, IaaS environments, databases, and business platforms such as AWS, Microsoft Azure, Google Cloud, Salesforce, and ServiceNow. The company’s Data Security Platform combines data discovery, classification, permissions analysis, activity monitoring, threat detection, remediation, and governance capabilities. Its analytics are designed to identify abnormal behavior associated with cyberattacks, insider threats, compromised accounts, and accidental or deliberate data exposure. Varonis became a public company on Nasdaq under the ticker VRNS in February 2014. It later broadened its platform through organic development and acquisitions. Polyrize, acquired in 2020, strengthened visibility into users and cloud data stores. Cyral, acquired in 2025, added cloud-native database-security capabilities, while SlashNext expanded the company’s email-security and anti-phishing portfolio. The company also introduced managed detection and response capabilities and increased its focus on software delivered as a service. The transition toward a SaaS delivery model became a major strategic theme in the 2020s. Varonis announced a SOC 2-compliant SaaS version of its Data Security Platform in 2022, added generative-AI functionality in 2023, and developed controls for Microsoft Copilot and other AI-enabled workflows in 2024. In 2026, it introduced Varonis Atlas, a capability designed to inventory, visualize, and control organizational AI tools, agents, and copilots. Atlas integrates AI-use context with the company’s broader data-security platform so that customers can evaluate how AI systems access and use enterprise information. Varonis operates internationally and has maintained research and development operations in Israel in addition to its U.S. base. Its customer focus spans industries including financial services, healthcare, manufacturing, technology, and other sectors with substantial volumes of sensitive or regulated information. The company positions itself around data-centric security: rather than protecting only devices or networks, it seeks to reduce the quantity of exposed data, constrain inappropriate access, and detect misuse across the enterprise data estate.

Varonis Systems was established in 2005 by Yaki Faitelson and Ohad Korkus. Before founding the company, both worked in professional-services and systems-integration roles at NetVision and NetApp. They focused on a recurring enterprise-security problem: organizations often lacked a reliable way to understand what information existed in file systems, who could access it, and how it was being used. Their initial approach centered on extracting and analyzing metadata from enterprise file systems. This metadata could reveal relationships among users, groups, files, permissions, and activity without requiring security teams to inspect every document manually. Faitelson and Korkus filed a patent concerning automatic management of storage access control in 2005; the patent was granted in 2006. The technology provided a foundation for products addressing file-activity tracking, information-rights management, access governance, and the reduction of excessive permissions. Varonis developed from a file-system security specialist into a broader data-security company. Its platform increasingly combined data discovery and classification with permissions analysis, user-behavior analytics, activity monitoring, threat detection, and automated remediation. The objective was to help customers identify sensitive information, locate overexposed data, understand normal and abnormal access patterns, and reduce the opportunity for insiders or compromised accounts to misuse enterprise data. The company raised capital from investors including Accel Partners, Evergreen Venture Partners, Pitango Venture Capital, and EMC. It completed an initial public offering on Nasdaq on February 28, 2014, trading under VRNS. After becoming public, Varonis continued expanding from traditional file shares into cloud, SaaS, IaaS, databases, and other enterprise applications. Varonis made its first reported acquisition in 2020 when it purchased Polyrize. Polyrize provided visibility into users and the cloud data stores they accessed, supporting the company's broader effort to understand data movement and cloud exposure. In 2021, Varonis announced that it would expand its Cork operations and double its workforce there, reflecting continued investment in international operations and engineering capacity. A major strategic shift occurred in the early 2020s as Varonis increased its emphasis on SaaS delivery. In 2022, it announced a SOC 2-compliant SaaS version of the Data Security Platform, presenting cloud delivery as a way to provide more frequent updates and simplify access to new functionality. In 2023, generative AI was added to the SaaS platform to assist administrators with analysis and investigations. During 2024, the company extended its coverage to emerging enterprise-AI use cases, including Microsoft Copilot. Its capabilities were designed to monitor prompts and data access, audit interactions, and identify both malicious behavior and unintended outcomes. Varonis also expanded its portfolio with managed detection and response services, enhanced Salesforce security posture management, and announced broader IaaS security coverage for Google Cloud. The company continued broadening its platform in 2025. It announced the acquisition of Cyral to improve database security and acquired SlashNext, whose technology addresses AI-assisted email phishing defense. Varonis also added database activity monitoring and sandbox-based analysis of suspicious email links. In 2026, it launched Varonis Atlas, which inventories and governs AI tools, agents, and copilots built or deployed by organizations. Atlas represents a further extension of the company's original data-centric model into AI governance: understanding which systems can reach enterprise data, how they use it, and whether that use creates security or compliance risk. Varonis has also operated a threat-research function known as Varonis Threat Labs. Its published research has examined weaknesses involving persistent Azure authorization cookies, phishing infrastructure, and Microsoft Copilot behavior. These disclosures support the company's broader market position as a specialist in data access, identity context, and the security implications of increasingly distributed enterprise systems.

1. 2026Varonis Atlas launched

   Atlas was introduced to inventory, visualize, and control organizational AI tools, agents, and copilots.

   Source
2. 2025Database and email-security expansion

   The company announced the Cyral acquisition, acquired SlashNext, and added database monitoring and anti-phishing capabilities.

   Source
3. 2024Expansion into AI, managed response, Salesforce, and Google Cloud security

   Varonis expanded Copilot monitoring, launched managed detection and response capabilities, enhanced Salesforce SSPM, and announced Google Cloud IaaS security coverage.

   Source
4. 2023Generative AI added

   Generative-AI capabilities were added to the SaaS platform to assist security analysis and investigations.

   Source
5. 2022SaaS platform announced

   Varonis announced a SOC 2-compliant SaaS delivery of its Data Security Platform.

   Source
6. 2021Cork operations expansion

   The company announced an expansion of its Cork operations and plans to double its workforce there.

   Source
7. 2020First acquisition: Polyrize

   Varonis acquired Polyrize to strengthen visibility into users and the cloud data stores they use.

   Source
8. 2014Initial public offering

   Varonis began trading on Nasdaq under the ticker VRNS on February 28.

   Source
9. 2006Foundational patent granted

   The founders' patent on automatic storage-access management was granted.

   Source
10. 2005Company founded and storage-access patent filed

    Yaki Faitelson and Ohad Korkus founded Varonis and filed a patent covering automatic management of storage access control.

    Source

A data-centric cybersecurity platform focused on finding and remediating sensitive-data exposure, controlling access, monitoring activity, and governing enterprise data across file systems, cloud services, SaaS applications, databases, and AI tools.

• Varonis Data Security PlatformData security platform

  The core platform analyzes enterprise data, identities, permissions, and activity to locate sensitive or overexposed information and identify inappropriate access. It supports discovery, classification, access-governance analysis, threat detection, behavioral analytics, and remediation across file systems, cloud environments, SaaS applications, IaaS services, and databases.

• Varonis SaaSEnterprise SaaS security2022

  Varonis SaaS is the cloud-delivered form of the Data Security Platform. Announced as SOC 2 compliant in 2022, it is intended to provide customers with centrally delivered updates and security functionality while reducing the operational burden associated with deploying and maintaining traditional software infrastructure.

• Varonis AtlasAI security and governance2026

  Atlas inventories and visualizes AI tools, agents, and copilots created or deployed by an organization. It connects information about AI activity and data access with Varonis's broader security context, helping customers identify misuse, abnormal behavior, unintended exposure, and governance risks associated with enterprise AI.

• Salesforce Security Posture ManagementSaaS security posture management2024

  This capability focuses on identifying data-security risks in Salesforce environments. Announced enhancements were intended to help customers discover and automatically eliminate configuration, access, and data-exposure issues in the platform.

• Managed Data Detection and ResponseManaged cybersecurity service2024

  Varonis expanded into managed detection and response for data-security incidents. The service is designed to combine the company's data-access and activity telemetry with monitoring and response support for customers that want help detecting and handling threats.

• SlashNext email securityEmail and anti-phishing security2025

  SlashNext's technology, added through acquisition, uses AI and sandbox-based analysis to identify malicious links and help prevent phishing attacks delivered through email.

• 2026Launch of Varonis AtlasProduct launch

  Organizations increasingly use AI tools, agents, and copilots that may access sensitive enterprise information.

  What changed. Varonis launched Atlas to visualize, inventory, and control organizational AI systems and integrate their activity with the Data Security Platform.

  Aftermath. Atlas extended the company's data-centric security model into governance and monitoring of enterprise AI use.

  Source
• 2025Acquisition of CyralM&A

  Varonis identified database security as an area requiring deeper cloud-native and AI-driven protection.

  What changed. The company announced that it would acquire Cyral.

  Aftermath. The transaction was intended to extend Varonis's platform into database-security monitoring and protection.

  Source
• 2025Acquisition of SlashNextM&A

  Email phishing remained a significant route to account compromise and data exposure.

  What changed. Varonis acquired SlashNext and its AI-based email-security technology.

  Aftermath. The acquisition expanded Varonis's capabilities beyond data access governance into phishing detection and email security.

  Source
• 2024Expansion into AI and managed responseStrategy

  The growth of enterprise copilots and increasingly distributed cloud data created new requirements for monitoring AI access and responding to data-security incidents.

  What changed. Varonis added Microsoft Copilot monitoring and auditing capabilities and expanded its portfolio with managed detection and response services.

  Aftermath. The company broadened its data-security positioning into AI governance and operational security services.

  Source
• 2022Shift toward SaaS deliveryStrategy

  Varonis sought to make its data-security capabilities easier to update and consume across distributed cloud environments.

  What changed. The company announced a SOC 2-compliant SaaS delivery of its Data Security Platform.

  Aftermath. The SaaS model became a central part of the company's subsequent product development and market strategy.

  Source

• 2026Varonis introduces Atlas for AI-tool governance

  Varonis launched Atlas to visualize and control organizational AI tools, agents, and copilots, integrating AI-use context with its foundational data-security platform.

  Product launch
  Source
• 2025Varonis announces database activity monitoring and anti-phishing capabilities

  New capabilities addressed database activity monitoring and email-based phishing through sandbox analysis of potentially malicious links.

  Product launch
  Source
• 2025Varonis announces acquisition of Cyral

  Varonis announced an agreement to acquire Cyral to strengthen database security with cloud-native and AI-driven technology.

  M&A
  Source
• 2025Varonis acquires SlashNext

  Varonis acquired SlashNext, an email-security company whose technology uses AI to help prevent phishing attacks.

  M&AProduct launch
  Source
• 2024Varonis expands security controls for Microsoft Copilot

  Varonis introduced capabilities to monitor and audit Copilot prompts and data access, while looking for abnormal or harmful interactions.

  Product launchOther
  Source
• 2024Varonis adds managed detection and response capabilities

  The company expanded its offering with a managed service designed to detect and respond to data-security incidents.

  Product launch
  Source
• 2024Salesforce security posture management capabilities expanded

  Varonis announced new Salesforce Security Posture Management capabilities intended to identify and automatically reduce data-security risks.

  Product launch
  Source
• 2024Varonis expands IaaS security coverage to Google Cloud

  The company announced broader infrastructure-as-a-service security coverage for Google Cloud.

  Product launch
  Source
• 2023Generative AI added to the Varonis SaaS platform

  The company added generative-AI capabilities intended to help administrators analyze security information and reduce investigation time.

  Product launch
  Source
• 2022Varonis introduces a SOC 2-compliant SaaS delivery of its Data Security Platform

  Varonis announced a SaaS version of its Data Security Platform, emphasizing faster updates and expanded cloud-delivered functionality.

  Product launch
  Source
• 2021Varonis announces expansion in Cork

  The company announced an expansion of its Cork operations and plans to double its workforce there.

  Other
  Source

1. Varonis Systems
2. Varonis official website