Sample Page

Varonis Systems, Inc. is a software company based in Miami,^[4][5] Florida with R&D offices in Herzliya, Israel. The company’s Data Security Platform analyzes data and data activity using the insights to identify data exposure risks stemming from access permissions and software-as-a-service (SaaS) app configurations, triggering automated remediation capabilities in response.^[6]

Varonis performs User Behavior Analytics (UBA) that identify abnormal behavior from cyberattacks. Their software extracts metadata from an enterprise’s IT infrastructure and uses this information to map relationships among employees, data objects, content, and usage.^[7]

Varonis Systems was founded in 2005 by Yaki Faitelson and Ohad Korkus, in order to address security issues such as file activity tracking, information rights management, and access control.^[8] Prior to Varonis, Faitelson and Korkus worked at the global professional services and systems integration divisions of NetVision and NetApp.^[9]

Faitelson and Korkus invented a solution that would retrieve metadata contained in file systems. In 2005, Faitelson and Korkus filed a patent, “Automatic management of storage access control”, which was granted in 2006.^[10] The result of their work was the Intelligent Data Use (IDU) classification platform, a platform for gathering and analyzing file data use. The first product based on this platform, DatAdvantage, was released in 2006 – built so that enterprises can monitor file activity and user behavior, and manage data ownership, data access rights, and responsibilities of file system data.^[11]

Varonis continued with core platform development. In 2009, Varonis added the IDU Classification Framework, which allowed Varonis products to search for keywords, phrases and patterns from file content. In 2013, Varonis released DatAlert to detect and uncover insider threats and potential data breaches, notifying and alerting on suspicious file system activity including unusual access to sensitive data and changes to permissions and configuration files.^[12]

Varonis raised capital from Accel Partners, Evergreen Venture Partners, Pitango Venture Capital, and EMC.^[13][7]

In 2021, Varonis Systems announced that it was expanding its operations and doubling its workforce in Cork.^[14]

In 2022 Varonis announced it would deliver its Data Security Platform as a SOC® 2-compliant SaaS, citing faster updates and improved features.^[15]

In 2023, Varonis added generative AI to its SaaS platform, allowing administrators to analyze and reduce investigation times.^[16]

In 2024, Varonis began supporting Microsoft Copilot with a solution that monitors and audits Copilot prompts and data access in real-time and detects abnormal interactions to identify those with malign intent or those without malign intent that yielded undesirable outcomes.^[17]

Also that year Varonis expanded its portfolio of products that monitor data access and detect potential breaches to offer a managed service to detect and respond to incidents.^[18]

In September 2024, the company announced new capabilities in its Salesforce Security Posture Management (SSPM) solution aimed at helping customers identify and eliminate data security risks automatically.^[19]

In November 2024 Varonis announced that it would be expanding its IaaS security coverage to the Google Cloud. The company’s 2024 10k reported customers in 95 countries and a Q1 2025 relocation of its headquarters to Miami, Florida. In February 2025 it was reported that the company was set to accelerate and complete its SaaS transition by 2025, with a target of $737-$745 million ARR.^[20]

In 2020 the company made its first acquisition, Polyrize, a company that tracks users and the cloud data stores they use and gives them the ability to track where data is going.^[21]

In January 2025 the Calcalist reported Varonis was in advanced negotiations to acquire cyber startup Apex Security, whose investors include Sam Altman, founder and CEO of OpenAI, as well as the venture capital funds Sequoia and Index.The value of the deal was estimated at $30–40 million.^[22]

In March 2025, Varonis announced that it would be acquiring Cyral to improve database security using cloud-native, AI-driven technology. ^[23][24]

Varonis acquired California-based start-up SlashNext, developer of an email security tool that uses AI to prevent phishing attacks, for $150 million in September 2025.^[25]

In February 2026, the company acquired AI start-up AllTrue.ai, which developed technology for monitoring and controlling AI, for $150 million.^[26]

Varonis Threat Labs created a proof-of-concept called Cookie Bite that showed how access to Azure cloud could be obtained using persistent authorization session cookies that were capable of bypassing MFA requirements.^[27]

In December 2025, Varonis researchers reported Spiderman, an automated phishing campaign kit that mimics the login pages of multiple European banks.^[28]

In January 2026, Varonis’ research unit disclosed a vulnerability called “Reprompt” in Microsoft Copilot Personal that could allow attackers to trick the AI tool into retrieving sensitive data using a “try twice” command.^[29]

The Varonis Metadata Framework is implemented at two levels. Non-intrusive monitoring resides on file servers, feeding both real-time file event information and ACLs to a separate server.^[30] The collected data is stored in a database. The second part, the IDU analytics engine, performs statistical analysis to derive data owners, baseline user activity, and user groupings. The Metadata Framework is able to incrementally index file metadata, thereby allowing it to maintain the current state of file metadata in its database. DatAdvantage presents this information to IT administrators.