Introduction
Proofpoint builds security software centered on the idea that most serious breaches begin with an attack on a person rather than a piece of infrastructure — a phishing email, a compromised identity, an impersonated vendor invoice. Eric Hahn, a former chief technology officer of Netscape Communications, founded the company in Sunnyvale, California, in July 2002, initially focused on email filtering before broadening into a wider “human risk” security platform.
Proofpoint went public in 2012 and was later taken private by Thoma Bravo in 2021. For readers of Brel’s AI in cybersecurity coverage, Proofpoint’s 2026 acquisition of Acuvity is a useful illustration of a long-established human-risk security vendor extending its core philosophy — protect the person, not just the network — to a new class of actor operating inside enterprise workflows: the AI agent.
What the company does
Proofpoint’s platform covers email security and filtering, identity threat defense, data loss prevention, email encryption and archiving, and security awareness training aimed at reducing human susceptibility to social-engineering attacks. Following its February 2026 acquisition of Acuvity, the company added AI-native visibility, governance, and runtime protection for agentic workflows, extending its human-risk focus to cover the growing volume of enterprise work performed by AI agents rather than employees.
Who it serves
Proofpoint has traditionally served large enterprises seeking to protect email and collaboration channels used by tens of thousands of employees, and it counts a large share of the Fortune 100 among its customers, per its own public materials. Its May 2025 acquisition of Hornetsecurity, a German cloud security firm with a strong Microsoft 365 focus, extended Proofpoint’s reach into small and midsize businesses and further into the European market, a segment the company had historically served less directly than large enterprise accounts.
Company background
Eric Hahn founded Proofpoint in July 2002 and launched its first product in July 2003 after raising a $7 million Series A round, followed by a $9 million Series B round later that year led by RRE Ventures. The company completed its initial public offering on Nasdaq under ticker PFPT in 2012. On April 26, 2021, Proofpoint announced it had agreed to be acquired by private equity firm Thoma Bravo in an all-cash deal valued at $12.3 billion, taking the company private later that year. Under Thoma Bravo’s ownership, Proofpoint has pursued an active acquisition strategy, including data-security posture management vendor Normalyze in 2023, Hornetsecurity in May 2025, and Acuvity in February 2026, while reportedly exploring a return to public markets. Sumit Dhawan currently serves as CEO, with the company headquartered in Sunnyvale, California.
Product and AI capabilities
Proofpoint’s February 2026 acquisition of Acuvity added a purpose-built platform for AI enterprise security and governance, providing runtime inspection and enforcement across AI applications, autonomous agents, and Model Context Protocol (MCP) servers. According to the companies’ joint announcement, the combined platform is intended to understand human, agentic, and data risk in real time — reflecting Proofpoint’s existing emphasis on human behavior applied to a newer category of enterprise actor that can execute tasks and make decisions alongside people rather than simply respond to their commands. Acuvity’s co-founder and CEO, Satyam Sinha, framed the acquisition around governing “how AI thinks, acts and learns in real time,” language consistent with Proofpoint’s longstanding behavioral approach to email and identity threats, now extended to non-human actors operating inside the same workflows.
Key developments
Proofpoint went public in 2012 and operated as an independent, publicly traded security vendor for nearly a decade before Thoma Bravo’s $12.3 billion take-private acquisition closed in 2021. Since then, the company has pursued more than two dozen acquisitions under private ownership, most recently Hornetsecurity in May 2025 to expand into the SMB and European markets, and Acuvity in February 2026 to add AI agent security and governance. Company leadership has publicly discussed a potential return to public markets, with the Hornetsecurity deal specifically described by CEO Sumit Dhawan as positioning Proofpoint to be a stronger business as it explores that path.
Why it matters
Proofpoint is a useful example of how a vendor built around defending people from social-engineering and email-based attacks extends that same behavioral, human-centered lens to a new category of actor that increasingly operates alongside people inside enterprise workflows. Because email and identity compromise remain among the most common initial access vectors in reported breaches, Proofpoint’s decision to fold AI agent governance directly into its existing human-risk platform, rather than spinning it out as a separate product line, is a concrete signal of how established vendors expect AI-native risk to intersect with the threats they already spend the most resources defending against.
Sector context
Within Brel’s AI in cybersecurity coverage, Proofpoint competes most directly with behavioral email-security vendor Abnormal AI, though the two differ in architecture: Proofpoint’s platform spans a broader set of gateway, DLP, and awareness-training products built up over two decades, while Abnormal is a newer, API-first entrant focused specifically on behavioral baselining. Proofpoint’s move into agentic AI governance also parallels similar acquisitions by Varonis and Palo Alto Networks, each approaching AI agent risk from its own established security discipline.
Sources and references
This profile draws on Proofpoint’s official newsroom, Thoma Bravo’s press materials, and independent reference and press sources.
- Proofpoint Newsroom — “Proofpoint Acquires Acuvity to Deliver AI Security and Governance Across the Agentic Workspace” (2026)
- Thoma Bravo — “Proofpoint acquires Acuvity…” (2026)
- Wikipedia — “Proofpoint”
- Startuprad.io — “Proofpoint Buys Hornetsecurity for $1B+ to Fuel IPO Plan” (2025)