Varonis Systems
Varonis Systems is a U.S. cybersecurity software company that helps organizations discover, govern, monitor, and protect sensitive data across on-premises, cloud, SaaS, and infrastructure environments.
Last updated October 17, 2026
AI crawler reads
No AI crawler has read this profile since Oct 28, 2026.
Overview
Varonis Systems is a cybersecurity software company founded in 2005 by Yaki Faitelson and Ohad Korkus. The company was created around the problem of understanding and controlling how information is stored, accessed, and shared inside complex enterprise environments. Its early technology extracted metadata from file systems and used that information to improve file-activity tracking, information-rights management, access control, and data governance. The company’s central proposition is that data security depends on understanding relationships among data, identities, permissions, applications, and user activity. Its platform maps these relationships and analyzes behavior to identify exposed or sensitive information, excessive access privileges, suspicious activity, and potential routes to data loss. This approach is intended to help security, privacy, compliance, and information-technology teams reduce data exposure without relying solely on perimeter controls. Varonis initially concentrated on enterprise file systems and unstructured data. Over time, its scope expanded to cloud and multicloud services, SaaS applications, IaaS environments, databases, and business platforms such as AWS, Microsoft Azure, Google Cloud, Salesforce, and ServiceNow. The company’s Data Security Platform combines data discovery, classification, permissions analysis, activity monitoring, threat detection, remediation, and governance capabilities. Its analytics are designed to identify abnormal behavior associated with cyberattacks, insider threats, compromised accounts, and accidental or deliberate data exposure. Varonis became a public company on Nasdaq under the ticker VRNS in February 2014. It later broadened its platform through organic development and acquisitions. Polyrize, acquired in 2020, strengthened visibility into users and cloud data stores. Cyral, acquired in 2025, added cloud-native database-security capabilities, while SlashNext expanded the company’s email-security and anti-phishing portfolio. The company also introduced managed detection and response capabilities and placed greater emphasis on software delivered as a service. The shift toward SaaS delivery became a major strategic theme in the 2020s. Varonis announced a SOC 2-compliant SaaS version of its Data Security Platform in 2022, added generative-AI features in 2023, and developed controls for Microsoft Copilot and other AI-driven workflows in 2024. In 2026, it launched Varonis Atlas, a capability designed to inventory, visualize, and control an organization’s AI tools, agents, and copilots. Atlas integrates AI usage context with the company’s broader data-security platform, enabling customers to assess how AI systems access and use enterprise information. Varonis operates internationally and maintains research-and-development operations in Israel as well as U.S. locations. Its customer base spans financial services, healthcare, manufacturing, technology, and other industries with large volumes of sensitive or regulated information. The company positions itself around data-centric security: rather than protecting only devices or networks, it seeks to reduce the amount of exposed data, limit inappropriate access, and detect misuse across the enterprise data estate.
History
Varonis Systems was established in 2005 by Yaki Faitelson and Ohad Korkus. Before founding the company, both worked in professional-services and systems-integration roles at NetVision and NetApp. They focused on a recurring enterprise-security problem: organizations often lacked a reliable way to understand what information existed in file systems, who could access it, and how it was being used. Their initial approach centered on extracting and analyzing metadata from enterprise file systems. This metadata could reveal relationships among users, groups, files, permissions, and activity without requiring security teams to inspect every document manually. Faitelson and Korkus filed a patent concerning automatic management of storage access control in 2005; the patent was granted in 2006. The technology provided a foundation for products addressing file-activity tracking, information-rights management, access governance, and the reduction of excessive permissions. Varonis developed from a file-system security specialist into a broader data-security company. Its platform increasingly combined data discovery and classification with permissions analysis, user-behavior analytics, activity monitoring, threat detection, and automated remediation. The objective was to help customers identify sensitive information, locate overexposed data, understand normal and abnormal access patterns, and reduce the opportunity for insiders or compromised accounts to misuse enterprise data. The company raised capital from investors including Accel Partners, Evergreen Venture Partners, Pitango Venture Capital, and EMC. It completed an initial public offering on Nasdaq on February 28, 2014, trading under VRNS. After becoming public, Varonis continued expanding from traditional file shares into cloud, SaaS, IaaS, databases, and other enterprise applications. Varonis made its first reported acquisition in 2020 when it purchased Polyrize. Polyrize provided visibility into users and the cloud data stores they accessed, supporting the company's broader effort to understand data movement and cloud exposure. In 2021, Varonis announced that it would expand its Cork operations and double its workforce there, reflecting continued investment in international operations and engineering capacity. A major strategic shift occurred in the early 2020s as Varonis increased its emphasis on SaaS delivery. In 2022, it announced a SOC 2-compliant SaaS version of the Data Security Platform, presenting cloud delivery as a way to provide more frequent updates and simplify access to new functionality. In 2023, generative AI was added to the SaaS platform to assist administrators with analysis and investigations. During 2024, the company extended its coverage to emerging enterprise-AI use cases, including Microsoft Copilot. Its capabilities were designed to monitor prompts and data access, audit interactions, and identify both malicious behavior and unintended outcomes. Varonis also expanded its portfolio with managed detection and response services, enhanced Salesforce security posture management, and announced broader IaaS security coverage for Google Cloud. The company continued broadening its platform in 2025. It announced the acquisition of Cyral to improve database security and acquired SlashNext, whose technology addresses AI-assisted email phishing defense. Varonis also added database activity monitoring and sandbox-based analysis of suspicious email links. In 2026, it launched Varonis Atlas, which inventories and governs AI tools, agents, and copilots built or deployed by organizations. Atlas represents a further extension of the company's original data-centric model into AI governance: understanding which systems can reach enterprise data, how they use it, and whether that use creates security or compliance risk. Varonis has also operated a threat-research function known as Varonis Threat Labs. Its published research has examined weaknesses involving persistent Azure authorization cookies, phishing infrastructure, and Microsoft Copilot behavior. These disclosures support the company's broader market position as a specialist in data access, identity context, and the security implications of increasingly distributed enterprise systems.
- 2026
Varonis Atlas launched
[1]Atlas was introduced to inventory, visualize, and control organizational AI tools, agents, and copilots.
- 2025
Database and email-security expansion
[1]The company announced the Cyral acquisition, acquired SlashNext, and added database monitoring and anti-phishing capabilities.
- 2024
Expansion into AI, managed response, Salesforce, and Google Cloud security
[1]Varonis expanded Copilot monitoring, launched managed detection and response capabilities, enhanced Salesforce SSPM, and announced Google Cloud IaaS security coverage.
- 2023
Generative AI added
[1]Generative-AI capabilities were added to the SaaS platform to assist security analysis and investigations.
- 2022
SaaS platform announced
[1]Varonis announced a SOC 2-compliant SaaS delivery of its Data Security Platform.
- 2021
Cork operations expansion
[1]The company announced an expansion of its Cork operations and plans to double its workforce there.
- 2020
First acquisition: Polyrize
[1]Varonis acquired Polyrize to strengthen visibility into users and the cloud data stores they use.
- 2014
Initial public offering
[1]Varonis began trading on Nasdaq under the ticker VRNS on February 28.
- 2006
Foundational patent granted
[1]The founders' patent on automatic storage-access management was granted.
- 2005
Company founded and storage-access patent filed
[1]Yaki Faitelson and Ohad Korkus founded Varonis and filed a patent covering automatic management of storage access control.
Products and positioning
A data-centric cybersecurity platform focused on finding and remediating sensitive-data exposure, controlling access, monitoring activity, and governing enterprise data across file systems, cloud services, SaaS applications, databases, and AI tools.
Data security platform
Varonis Data Security Platform
The core platform analyzes enterprise data, identities, permissions, and activity to locate sensitive or overexposed information and identify inappropriate access. It supports discovery, classification, access-governance analysis, threat detection, behavioral analytics, and remediation across file systems, cloud environments, SaaS applications, IaaS services, and databases.
Enterprise SaaS security · 2022
Varonis SaaS
Varonis SaaS is the cloud-delivered form of the Data Security Platform. Announced as SOC 2 compliant in 2022, it is intended to provide customers with centrally delivered updates and security functionality while reducing the operational burden associated with deploying and maintaining traditional software infrastructure.
AI security and governance · 2026
Varonis Atlas
Atlas inventories and visualizes AI tools, agents, and copilots created or deployed by an organization. It connects information about AI activity and data access with Varonis's broader security context, helping customers identify misuse, abnormal behavior, unintended exposure, and governance risks associated with enterprise AI.
SaaS security posture management · 2024
Salesforce Security Posture Management
This capability focuses on identifying data-security risks in Salesforce environments. Announced enhancements were intended to help customers discover and automatically eliminate configuration, access, and data-exposure issues in the platform.
Managed cybersecurity service · 2024
Managed Data Detection and Response
Varonis expanded into managed detection and response for data-security incidents. The service is designed to combine the company's data-access and activity telemetry with monitoring and response support for customers that want help detecting and handling threats.
Email and anti-phishing security · 2025
SlashNext email security
SlashNext's technology, added through acquisition, uses AI and sandbox-based analysis to identify malicious links and help prevent phishing attacks delivered through email.
Brand decisions
2026
Launch of Varonis AtlasProduct launchBackground
Organizations increasingly use AI tools, agents, and copilots that may access sensitive enterprise information.
Action taken
Varonis launched Atlas to visualize, inventory, and control organizational AI systems and integrate their activity with the Data Security Platform.
Aftermath
Atlas extended the company's data-centric security model into governance and monitoring of enterprise AI use.
2025
Acquisition of CyralM&ABackground
Varonis identified database security as an area requiring deeper cloud-native and AI-driven protection.
Action taken
The company announced that it would acquire Cyral.
Aftermath
The transaction was intended to extend Varonis's platform into database-security monitoring and protection.
2025
Acquisition of SlashNextM&ABackground
Email phishing remained a significant route to account compromise and data exposure.
Action taken
Varonis acquired SlashNext and its AI-based email-security technology.
Aftermath
The acquisition expanded Varonis's capabilities beyond data access governance into phishing detection and email security.
2024
Expansion into AI and managed responseStrategyBackground
The growth of enterprise copilots and increasingly distributed cloud data created new requirements for monitoring AI access and responding to data-security incidents.
Action taken
Varonis added Microsoft Copilot monitoring and auditing capabilities and expanded its portfolio with managed detection and response services.
Aftermath
The company broadened its data-security positioning into AI governance and operational security services.
2022
Shift toward SaaS deliveryStrategyBackground
Varonis sought to make its data-security capabilities easier to update and consume across distributed cloud environments.
Action taken
The company announced a SOC 2-compliant SaaS delivery of its Data Security Platform.
Aftermath
The SaaS model became a central part of the company's subsequent product development and market strategy.
Recent events
- 2026
Varonis introduces Atlas for AI-tool governance[1]
Product launch
Varonis launched Atlas to visualize and control organizational AI tools, agents, and copilots, integrating AI-use context with its foundational data-security platform.
- 2025
Varonis announces database activity monitoring and anti-phishing capabilities[1]
Product launch
New capabilities addressed database activity monitoring and email-based phishing through sandbox analysis of potentially malicious links.
- 2025
Varonis announces acquisition of Cyral[1]
M&A
Varonis announced an agreement to acquire Cyral to strengthen database security with cloud-native and AI-driven technology.
- 2025
Varonis acquires SlashNext[1]
M&A · Product launch
Varonis acquired SlashNext, an email-security company whose technology uses AI to help prevent phishing attacks.
- 2024
Varonis expands security controls for Microsoft Copilot[1]
Product launch · Other
Varonis introduced capabilities to monitor and audit Copilot prompts and data access, while looking for abnormal or harmful interactions.
- 2024
Varonis adds managed detection and response capabilities[1]
Product launch
The company expanded its offering with a managed service designed to detect and respond to data-security incidents.
- 2024
Salesforce security posture management capabilities expanded[1]
Product launch
Varonis announced new Salesforce Security Posture Management capabilities intended to identify and automatically reduce data-security risks.
- 2024
Varonis expands IaaS security coverage to Google Cloud[1]
Product launch
The company announced broader infrastructure-as-a-service security coverage for Google Cloud.
- 2023
Generative AI added to the Varonis SaaS platform[1]
Product launch
The company added generative-AI capabilities intended to help administrators analyze security information and reduce investigation time.
- 2022
Varonis introduces a SOC 2-compliant SaaS delivery of its Data Security Platform[1]
Product launch
Varonis announced a SaaS version of its Data Security Platform, emphasizing faster updates and expanded cloud-delivered functionality.
Showing the 10 most recent.
Sources4 sources
Cite this profile: Cite the canonical profile. /brand-wiki/varonis-systems · Editorial policy · How profiles are compiled