All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Proofpoint sells email security, data loss prevention, awareness training, communications archiving, and AI security to large enterprises, federal agencies, and smaller organizations. Founded in 2002, it says more than 80 of the Fortune 100 use Proofpoint and names Accenture and Wyndham as customers. Private equity firm Thoma Bravo took it private in a $12.3 billion deal in 2021. Proofpoint has agreed to buy data security firm Varonis for about $6.3 billion, expected to close by mid-2027 pending approvals. It is hard to replace where customers rely on its regulated communications archive or federally authorized email service. Microsoft and Google, which Proofpoint listed as competitors in its 2020 annual report, could build email security into the mailboxes it protects.
| Description | Proofpoint is a cybersecurity and compliance company that protects people, data, and AI agents across email, cloud, and collaboration tools, combining threat protection and data loss prevention with AI security, awareness training, and communications archiving. | [f1] |
|---|---|---|
| Founded | 2002 | [f2] |
| HQ | Sunnyvale, California | [f2] |
| Subsidiaries | Hornetsecurity (Pan-European Microsoft 365 security provider acquired by Proofpoint in December 2025 for $1.8 billion. Runs as a dedicated business unit serving MSPs and SMBs.) | |
| Latest funding | Take-private acquisition by Thoma Bravo valuing Proofpoint at approximately $12.3 billion (completed August 2021) | [f3] |
| Product | What it does |
|---|---|
| Collaboration Security Prime | Safeguards people and AI agents against targeted threats across email, messaging, social media, cloud apps, and file-sharing services. |
| Adaptive Email DLP | Detects and prevents accidental and malicious email data loss using machine learning and behavioral AI. |
| Data Security and Governance | Unifies data discovery, posture management, and loss prevention across cloud and endpoints in one omnichannel approach. |
| ZenGuide | Risk-based security awareness training that strengthens human resilience through automated, adaptive learning. |
| Account Takeover Protection | Detects, investigates, and remediates account takeovers using machine learning across identity and email signals. |
| Digital Communications Governance | Captures, archives, and supervises enterprise communications for compliance, e-discovery, and long-term retention. |
| Proofpoint AI Security | Platform pairing AI runtime security with data security, covering employee AI use, autonomous agent behavior, and authentication and inspection at the MCP boundary. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Collaboration Security Prime defends mailboxes and cloud apps with the Nexus AI detection ensemble, Adaptive Email DLP and the data security line guard enterprise data, and ZenGuide addresses human and identity risk. These lines are mapped to the Cyber Defense Matrix. [f4]
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Proofpoint AI Security monitors and enforces policy on employee GenAI use, autonomous agents, and MCP servers at runtime. Proofpoint built it on technology from its Acuvity acquisition. It is mapped to the AI Defense Matrix. [f5]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 4/5 | Proofpoint names a specific buyer, the security team protecting employees and AI agents across email and collaboration tools. BleepingComputer reported that the EchoSpoofing campaign relayed an average of 3 million spoofed emails a day through Proofpoint’s relay servers to target Fortune 100 companies. Forrester describes access to enterprise data by people, applications, and AI systems as increasingly interconnected problems. [s26, s19, s1] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Proofpoint documents concrete mechanisms on its own pages: Nexus AI combines five behavioral AI models in one evaluation engine, Core Email Protection offers API and gateway deployment for inline, in-mailbox, post-delivery and click-time protection, and the archive connects through public REST APIs. Its detection-efficacy figures and Gartner placement appear in Proofpoint’s own voice, Forrester gives a market assessment rather than a technical test, and Futurum calls the Acuvity work a potential differentiator that depends on integration. [s5, s4, s7, s15, s19, s20] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | Email security is an established purchase with AI creating new protection needs. The cited demand evidence consists of analyst publications, including Gartner’s 2025 email security evaluation displayed by Proofpoint and Forrester’s October 17, 2026 discussion of data and AI access. Proofpoint’s report of roughly 440 new logos in its first fiscal 2026 quarter is its own figure, so the independently documented demand in the record is of that single kind. [s15, s19, s30] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | Proofpoint’s leaders have built security businesses, with independent reporting on Proofpoint and Hornetsecurity. CNBC documents the company’s own growth past $1 billion in annual revenue before Thoma Bravo agreed to buy it, and SecurityWeek reports that Hornetsecurity founder Daniel Hofmann leads the MSP business unit after the acquisition. Chief executive Sumit Dhawan drove more than $13 billion of revenue as president of VMware, according to Proofpoint. [s22, s16, s28, s29] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 5/5 | Proofpoint’s fiscal 2020 10-K reported $1.05 billion in revenue and enterprise customers including about 57% of the Fortune 1000. CNBC independently reported its pass of $1 billion in annual revenue. The FedRAMP Marketplace lists five authority-to-operate or authority-to-use letters for its Email and Information Protection Service. Current counts are the company’s own figures, 3.4 million customers protected and more than 80 of the Fortune 100, and Proofpoint names Accenture and Wyndham in published customer stories. [s23, s12, s1, s22] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 4/5 | Proofpoint’s fiscal 2020 10-K reports operating cash flow of $264.5 million in 2020, up from $242.5 million in 2019, and CNBC reported Thoma Bravo’s $12.3 billion buyout, which closed in August 2021. Under the at-scale reading, that exit and the audited cash generation are confirmed output per dollar, and Proofpoint has since completed the Hornetsecurity acquisition. The cited sources carry no current margin figures, and the pending Varonis deal adds no delivered output, so the score stops below the top rung. [s23, s22, s25, s16, s17] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Proofpoint fits the email security category. CNBC calls it a security software vendor, while Forrester addresses email and collaboration security buyers. Proofpoint displays Leader placements in Gartner’s 2025 Magic Quadrant for Email Security and a 2025 Forrester Wave. Gartner’s report covered 14 vendors. No captured source names Proofpoint the definer of the category, so it fits an established category without defining it. [s22, s19, s15, s4] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | A platform vendor would need to match Proofpoint’s communications archive with supervision for SEC, FINRA, and FCA rules, FedRAMP certification for its email protection service, and the Hornetsecurity channel to managed service providers. Its fiscal 2020 10-K says Microsoft and Google increasingly build competing features into their products, and Microsoft 365’s government cloud also holds FedRAMP certification, so a platform owner could eventually replicate much of that position through bundling. [s7, s3, s12, s16, s23, s14, s19] |
Proofpoint sells protection against attacks that reach organizations through their people and, increasingly, their AI agents. The company describes itself as securing how people, data, and AI agents connect across email, cloud, and collaboration tools. It frames its newer products around employee AI use, autonomous agents, and the MCP connections agents use to reach enterprise data.
Independent records show the email problem at scale. BleepingComputer reported that the 2024 EchoSpoofing campaign relayed an average of 3 million spoofed emails a day through Proofpoint’s own relay servers, peaking at 14 million, to target Fortune 100 companies. Forrester frames the data side of the problem as access by more people, applications, and AI systems, which makes understanding, controlling, and monitoring that data increasingly interconnected work.
The buyer is a large or regulated organization, alongside a long tail of smaller ones. Proofpoint’s fiscal 2020 10-K reported enterprise customers including about 57% of the Fortune 1000, and the company now says it serves more than 80 of the Fortune 100, over 10,000 large enterprises, and millions of smaller organizations. [s15, s9, s26, s19, s23, s13]
Proofpoint’s products span email threat protection, data security, AI security, awareness training, and communications archiving. Core Email Protection deploys inline as a gateway or through an API, and Proofpoint says its Nexus engine combines five behavioral AI models, informed by trillions of emails, URLs, and attachments. Proofpoint claims Core Email Protection blocks 99.999% of advanced email threats, a vendor figure with no independent benchmark in the record.
The data line unifies data loss prevention, data security posture management, insider threat management, and communications governance. Proofpoint Archive is a single system of record for retention, legal hold, and export. Supervision requires Archive and supports reviews of regulated communications. Archive connects to compliance and legal systems through public REST APIs. Proofpoint AI Security discovers AI tools in use, governs agent behavior through intent-based detection, and enforces authentication and content inspection for MCP servers.
Forrester writes that Proofpoint stands out in data loss prevention and insider risk management and has consolidated its email security modules, including Tessian’s capabilities, into one workbench for security operations analysts. [s4, s5, s8, s7, s9, s19]
Proofpoint competes with the platform owners whose mailboxes it protects and with independent security vendors. Its fiscal 2020 10-K named Broadcom, Cisco, FireEye, Google, Microsoft, and Mimecast among its email and advanced threat protection competitors, and it said large technology companies were increasingly building competing features into their own products. Forrester adds that email infrastructure providers keep raising customers’ expectations for the security included in their productivity suites.
Proofpoint’s AI security products face a different field. Futurum describes competitive pressure on Proofpoint’s AI governance products from Microsoft, Cisco, Palo Alto Networks, Netskope, Zscaler, and data and cloud security vendors.
Proofpoint answers with breadth and with acquisitions. It completed the $1.8 billion Hornetsecurity purchase, acquired Acuvity for AI security, and agreed in 2026 to acquire Varonis for about $6.3 billion. Forrester writes that for data security buyers the two companies both complement and compete, while for email and collaboration security buyers the Varonis deal adds little capability. [s23, s19, s20, s16, s21, s18]
Proofpoint’s traction is large in both independent and company-reported terms. Its fiscal 2020 10-K reported $1.05 billion in revenue, about 8,000 enterprise customers paying over $10,000 a year, and a renewal rate of 90% or higher every year since 2003. CNBC independently reported that it had passed $1 billion in annual revenue when Thoma Bravo agreed to buy it in a deal valued at $12.3 billion.
Current figures come from the company. Proofpoint reports 3.4 million customers protected and more than 80 of the Fortune 100. In its quarterly update, Proofpoint reported that its fiscal 2026 first quarter brought double-digit ARR and revenue growth, roughly 440 new logos, and gross retention above 92%. Proofpoint publishes customer stories naming Accenture and Wyndham.
Proofpoint now sells through a managed service provider channel as well as direct enterprise sales. SecurityWeek reports that Hornetsecurity operates as a dedicated MSP business unit serving more than 12,000 MSPs and 125,000 customers, and the FedRAMP Marketplace counts five authorization letters for Proofpoint’s Email and Information Protection Service. [s23, s22, s1, s30, s16, s12]
Proofpoint’s leadership pairs a chief executive hired from a large software company with Hornetsecurity founder Daniel Hofmann, who leads its managed service provider business unit. Sumit Dhawan, who leads a workforce of more than 4,500 employees according to Proofpoint’s leadership page, previously drove more than $13 billion of revenue as president of VMware. SecurityWeek reports that Hofmann leads that unit as an executive vice president.
Eric Hahn, a former chief technology officer of Netscape, founded Proofpoint in 2002, and CNBC documents its growth past $1 billion in annual revenue before the Thoma Bravo take-private. [s29, s28, s16, s2, s22]
Proofpoint holds federal authorization for its core email service and is pursuing a higher level. The FedRAMP Marketplace lists Proofpoint Email and Information Protection Service as FedRAMP Certified at the Moderate class since January 2020, with five authorization letters. Proofpoint announced in March 2026 that it is pursuing FedRAMP High for its Collaboration Security offerings, with availability following federal approval.
Proofpoint also lists commercial and international certifications. It lists ISO 42001 certification for its AI management system, SOC 2 reports available on request, and a trust center that publishes subprocessors by location, and its archive supports SEC 17a-4 record-keeping.
Because Proofpoint handles customer mail, weaknesses in its own systems reach its customers. Attackers in the EchoSpoofing campaign relayed spoofed messages through Proofpoint’s relay servers using compromised or rogue Microsoft Office 365 accounts, through weak permissions BleepingComputer reports were since fixed. An NVD entry also describes an account-creation vulnerability in Proofpoint Enterprise Protection. [s12, s13, s11, s32, s7, s26, s27]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Microsoft | competes with | N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. | |
| competes with | N/AGoogle is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. | ||
| Mimecast | competes with | ||
| Cisco | competes with | N/AWe scored these companies at different scopes, so the totals measure different things. | |
| Abnormal | competes with | N/AThese companies operate in different domains, so the scores reflect readiness in different markets. | |
| Barracuda Networks | competes with | ||
| Palo Alto Networks | competes with | Futurum names it among the platform vendors pressuring Proofpoint’s AI security push. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| Varonis | adjacent | Proofpoint agreed in 2026 to acquire Varonis, and Forrester describes the two as both complementing and competing for data security buyers. |
Add analyzed competitors to compare them side by side with Proofpoint.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Proofpoint is hard to replace where regulated communications and federal email run through it. A customer that keeps its compliance archive and supervision workflows there would need to move retained communications and replace the review workflows to leave, even with the archive’s export tools. Its email service is FedRAMP Moderate certified, which a replacement needs on its own. Proofpoint also sells threat intelligence its ET Labs team observes, a record a rival could rebuild only with sustained research. Microsoft and Google operate the mailboxes Proofpoint protects. Proofpoint’s 2020 annual report said both were building competing features, so a mailbox owner could eventually replicate much of its email protection through bundling.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Proofpoint sells software the customer’s team configures and operates, across email protection, data security, archiving, and awareness training. Its Advisory Services leave execution with the customer’s team and Applied Services act after the customer’s approval, so the services remain optional attachments to features the customer runs. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | A customer that keeps regulated communications in Proofpoint’s archive, a single system of record with supervision add-ons, faces meaningful friction from data history and workflows. The archive also offers export and public REST APIs, and the cited record documents the mechanism without sizing the migration, so the documented friction is data history, integrations, and learned workflows. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | The FedRAMP Marketplace lists Proofpoint’s Email and Information Protection Service as FedRAMP Certified at the Moderate class, so a federal buyer replacing it needs another authorized service, a material but feasible barrier. Proofpoint separately states that its archive supports SEC 17a-4, which is Proofpoint’s own compliance claim. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Detecting human-targeted attacks in real time across email and collaboration channels requires the machine learning and threat expertise Proofpoint documents. Its Nexus engine uses five behavioral AI models informed by trillions of emails, URLs, and attachments. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Proofpoint builds and sells its core products for regulated enterprises and government. The FedRAMP Marketplace lists five authorization letters for its email protection service, while Supervision supports reviews of regulated communications. In its fiscal 2020 10-K, Proofpoint reported about 57% of the Fortune 1000 among its enterprise customers. Hornetsecurity serves smaller customers through a separate MSP business unit. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 | Proofpoint’s email gateway and Secure Email Relay sit in the mail path, where messages and application-generated email pass through Proofpoint before delivery, and EchoSpoofing shows real mail flowing through its relay servers. That dependence is limited to mail routed through those components, since Proofpoint also deploys email protection by API. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | Proofpoint’s 10-K says it synthesizes threat intelligence gathered from its vectors and threat feeds in a graph database known as Proofpoint Nexus, Nexus AI feeds new verdicts and threat research back into its models, and its Emerging Threats Intelligence subscription sells current and historical metadata on IPs and domains. That vendor-held, accumulated record is a data advantage, but every cited source is Proofpoint’s own, and none shows that a funded rival could not build a comparable threat corpus through collection and research over time. |
Proofpoint sells to large enterprises and, through partners, to smaller organizations. Its fiscal 2020 10-K reported enterprise customers including about 57% of the Fortune 1000. Proofpoint organized its sales force around large enterprises of 4,000 employees and above and mid-sized organizations of 1,000 to 4,000. The company now describes its base as more than 80 of the Fortune 100, over 10,000 large enterprises, and millions of smaller organizations.
Regulated and public-sector buyers form a distinct segment. Supervision helps customers meet SEC, FINRA, and FCA rules on communications, and the FedRAMP Marketplace lists Proofpoint’s Email and Information Protection Service as FedRAMP Certified with five authorization letters.
Proofpoint serves smaller businesses partly through an acquired unit. SecurityWeek reports that Hornetsecurity, which Proofpoint bought for $1.8 billion, runs as a dedicated business unit serving more than 12,000 MSPs and 125,000 customers.
Proofpoint applies AI mainly to threat detection and data protection. Its Nexus engine combines five behavioral AI models across email and collaboration channels, and Proofpoint says that detection is informed by trillions of emails, URLs, and attachments and by 2.3 trillion interactions. Proofpoint claims Core Email Protection blocks 99.999% of advanced email threats, a vendor-reported figure with no independent benchmark in the record.
Proofpoint also sells security for AI itself. Proofpoint acquired Acuvity in 2026 to address risks from autonomous AI agents. Its AI Security products discover AI tools, monitor agent behavior during tasks, and enforce authentication and inspect content at connections between AI agents and enterprise tools. Proofpoint reported that AI Security saw encouraging early traction in its fiscal 2026 first quarter.
Its threat intelligence is a separate product. Proofpoint ET Intelligence gives subscribers current and historical metadata on IPs, domains, and related threat activity, and Proofpoint says its feeds come from behavior that its ET Labs team observes directly. Forrester writes that Proofpoint stands out in data loss prevention and insider risk management.
Proofpoint sells through a hired enterprise organization and a partner channel. Chief executive Sumit Dhawan previously ran VMware’s go-to-market functions as president, and the fiscal 2020 10-K describes a sales force organized by region and by customer size.
The channel is a structural part of the business. SecurityWeek reports that Hornetsecurity runs as a dedicated MSP business unit, and Proofpoint lists Hornetsecurity’s 365 Total Protection in its product index for channel delivery. CyberScoop reports that Proofpoint’s chief strategy officer expects Acuvity’s AI security to reach the smaller organizations that use Hornetsecurity.
Proofpoint markets analyst recognition to buyers. It displays its Leader placement in Gartner’s 2025 Magic Quadrant for Email Security and in a 2025 Forrester Wave for email, messaging, and collaboration security, and it publishes customer stories naming Accenture and Wyndham.
Proofpoint routes buyers to demo requests. A request for www.proofpoint.com/us/pricing on 2026-10-20 returned the site’s Page Not Found page, and the product pages in the record contain demo requests and data sheets without prices.
Proofpoint reports its commercial results as growth and retention rates. In its first fiscal quarter of 2026, Proofpoint reported double-digit annual recurring revenue growth, gross retention above 92%, and growth in customers spending over $1 million on its platform. The cited update contains no unit prices or contract values.
Proofpoint packages its archive line as a base product with add-ons. Supervision requires Archive, and Automate requires Supervision, so a regulated buyer adds modules on top of the base retention product.
Proofpoint delivers its products as cloud services, with the email gateway able to sit in the mail path. Core Email Protection offers gateway and API deployment for inline, in-mailbox, post-delivery, and click-time protection. Secure Email Relay carries transactional email that applications, SaaS platforms, and AI agents send using a customer’s domains.
The archive runs as a managed service. Proofpoint describes Archive as a fully managed SaaS platform built on cloud-native AWS architecture with immutable retention, regional deployments in the US, Canada, and the EU, and public REST APIs for connecting compliance and legal systems.
Proofpoint carries operational responsibility for the mail it relays. The EchoSpoofing campaign relayed spoofed emails through Proofpoint’s relay servers using compromised or rogue Microsoft Office 365 accounts, and BleepingComputer reports the weak permissions behind it were fixed.
Proofpoint holds federal authorization for its core email service. The FedRAMP Marketplace lists Proofpoint Email and Information Protection Service as FedRAMP Certified at the Moderate class since January 2020. Proofpoint announced in March 2026 that it is pursuing FedRAMP High for its Collaboration Security offerings.
Proofpoint also lists certifications beyond federal programs. Proofpoint lists ISO 42001 certification for its AI management system, SOC 2 reports available on request, and a trust center publishing subprocessors by location, and its archive supports SEC 17a-4 record-keeping.
Because Proofpoint handles customer mail, its own security is part of what customers buy. An NVD record describes an account-creation vulnerability in Proofpoint Enterprise Protection, and attackers in the EchoSpoofing campaign abused weak permissions in its email protection service.
Proofpoint builds its platform through acquisition. It completed the $1.8 billion Hornetsecurity purchase, acquired Acuvity for AI security, and agreed in 2026 to acquire Varonis for about $6.3 billion. Forrester writes that Proofpoint acquired Normalyze in 2024 for data security posture management and has consolidated its email modules, including Tessian’s capabilities, into one workbench.
The Varonis deal is pending. The Varonis 8-K states the deal is expected to close in 2027’s first half, subject to Varonis shareholder and regulatory approvals, and the two companies operate separately until then. The purchase has committed equity financing and secured debt financing commitments.
Forrester reads the deal as a test of integration. Its analysts write that for email and collaboration security buyers the acquisition adds little capability, while it makes Proofpoint’s communications security franchise more strategically important to the combined data and AI security strategy.
Proofpoint’s executive team combines a hired chief executive with founders who joined through acquisitions. Sumit Dhawan became chief executive after serving as president of VMware, where Proofpoint says he drove more than $13 billion of revenue. According to SecurityWeek, Hornetsecurity founder Daniel Hofmann leads the managed service provider business unit.
Thoma Bravo completed its acquisition of Proofpoint in a deal valued at about $12.3 billion. Proofpoint’s stock ceased trading on Nasdaq. The Varonis purchase has committed equity financing and secured debt financing commitments.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Proofpoint: press release on the 2025 Gartner Magic Quadrant for Email Security (company boilerplate) | official | 2026-10-20 |
| f2 | Proofpoint: About Proofpoint company overview | official | 2026-10-20 |
| f3 | Proofpoint: press release on completion of the Thoma Bravo acquisition | official | 2026-10-20 |
| f4 | Proofpoint product suite index | official | 2026-06-24 |
| f5 | AI Defense Matrix Catalog mapping | other | 2026-10-20 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.