Introduction
Varonis builds security software organized around a data-first premise: that the fastest way to reduce risk is to know exactly where an organization’s sensitive data lives, who and what can access it, and how it is actually being used, rather than starting from network traffic or endpoint activity. Yaki Faitelson, who serves as CEO, president, and chairman, and Ohad Korkus founded the company in 2005 after working together in the professional-services divisions of NetVision and Network Appliance, where they said they saw firsthand how quickly growing file systems outpaced organizations’ understanding of their own data security.
Two decades later, Varonis has become one of the more established data-security vendors on Nasdaq. For readers of Brel’s AI in cybersecurity coverage, its 2026 launch of Varonis Atlas is a useful illustration of a data-centric vendor arguing that securing enterprise AI is fundamentally a data-visibility problem, not primarily a model- or prompt-security problem.
What the company does
The Varonis Data Security Platform is built on the company’s patented MetaData Framework, which maps permissions, access activity, and content sensitivity across an organization’s file systems, cloud storage, and SaaS applications, then uses machine learning to automate remediation such as revoking excessive permissions or flagging anomalous access behavior. Varonis Atlas, launched in 2026, extends that same data-mapping approach specifically to AI: it visualizes and controls the AI tools, agents, and copilots an organization has built or deployed, and integrates with Varonis’ existing data platform to show which sensitive data those AI systems can actually reach.
Who it serves
Varonis’ customers are concentrated among enterprises in regulated or data-sensitive industries — financial services, healthcare, and government among them — that need continuous, automated visibility into unstructured and semi-structured data rather than periodic, manual audits. As of its most recent fiscal year, the company reported customers in 95 countries, and it has emphasized partnerships with Microsoft and AWS as central to reaching customers already standardized on those cloud platforms.
Company background
Yaki Faitelson and Ohad Korkus founded Varonis in 2005, building the company’s foundational MetaData Framework technology together and holding numerous related patents. Varonis is traded on Nasdaq under ticker VRNS. In the first quarter of 2025, the company relocated its corporate headquarters from New York to Miami, Florida. Varonis has also been executing a multi-year transition from a traditional licensed, self-hosted software model to a 100% SaaS subscription business, targeting completion of that shift by the end of 2026 and setting a formal end-of-life date of December 31, 2026, for its remaining self-hosted subscriptions. Faitelson continues to serve as CEO, president, and chairman of the board.
Product and AI capabilities
Varonis added generative-AI capabilities to its core SaaS platform in 2023, letting administrators analyze data-access findings and investigate potential incidents faster using natural-language queries. Its more significant AI move came in February 2026, when it acquired AllTrue.ai, an AI Trust, Risk, and Security Management (AI TRiSM) company co-founded by Ron Bennatan — also the creator of IBM’s Guardium and the founder of jSonar, acquired by Imperva — for $150 million. That acquisition powered the March 23, 2026 general-availability launch of Varonis Atlas, an AI security platform that gives organizations an inventory of the AI models, agents, code libraries, and their interactions and behavior running across the enterprise, then connects that inventory to Varonis’ existing behavioral analytics and data classification to flag when an AI system can reach data it should not be able to. Varonis has also acquired SlashNext, aimed at combating AI-driven email threats, as part of the same broader AI-security push.
Key developments
Varonis spent its first years establishing data-centric security as a distinct product category before adding generative-AI features to its platform in 2023. In 2025, the company relocated its headquarters to Miami and committed publicly to completing its transition to a fully SaaS-based business model by the end of 2026. Its most significant recent move has been a run of AI-security acquisitions — SlashNext in September 2025 and AllTrue.ai in February 2026 — culminating in the March 2026 launch of Varonis Atlas, positioning the company’s existing data-mapping strength as the foundation for a dedicated AI security product line rather than treating AI governance as a separate business.
Why it matters
Varonis is a useful counterpoint to AI-security vendors that focus primarily on model behavior, prompts, or red-teaming: its central argument, articulated repeatedly by CEO Yaki Faitelson, is that an organization cannot safely use AI at scale without first knowing which AI systems exist and what sensitive data each one can access — a data-inventory problem before it is a model-safety problem. That framing gives Brel readers a distinct lens for evaluating AI security claims across the broader market, separate from vendors emphasizing model scanning or runtime prompt inspection.
Sector context
Within Brel’s AI in cybersecurity coverage, Varonis’ data-first approach to AI governance is a useful contrast to Wiz‘s graph-based cloud posture management and to identity-first approaches from vendors such as Okta, each converging on similar AI-governance outcomes from different architectural starting points — data classification for Varonis, cloud configuration for Wiz, and non-human identity for Okta.
Sources and references
This profile draws on Varonis’ official company page and independent press coverage of its recent acquisitions and product launches.
- BleepingComputer — “Varonis Atlas: Securing AI and the Data That Powers It” (2026)
- StorageNewsletter — “Varonis to Acquire AllTrue.ai…” (2026)
- Varonis — “About Us” official company page
- Wikipedia — “Varonis Systems”