AI security helps SaaS transition, price still matters
- Total SaaS ARR reached $726.0 million at June 30, 2026, an increase of 52% from the prior year period.
- The key growth test is SaaS ARR excluding conversions, which grew 25% year over year to $598.1 million in Q2.
- Varonis acquired AllTrue.ai in early 2026 to add real-time visibility and control over AI agents.
- The company plans to end the term license subscription business by December 31, 2026.
- Legal risk remains an overhang after a shareholder derivative action joined the existing securities class action in early 2026.
SaaS risk is fading, not gone
Varonis has moved from a self-hosted software story to a cloud subscription story. That matters because recurring SaaS sales are easier to track and can grow faster when customers expand. At June 30, 2026, total SaaS ARR reached $726.0 million.
The bull case is that the hard part of the transition is mostly over. Sales teams can focus on new customers instead of moving old customers to the cloud. Enterprise AI also gives Varonis a clear reason to exist. Companies need to know which data AI tools and agents can see before they let those tools loose. The recent acquisition of AllTrue.ai directly supports this growing need.
The bear case is that the last stretch can still hurt. Varonis still has remaining non-SaaS ARR that needs to convert before the December 31, 2026 end-of-life date. Lawsuits also add cost and distraction at a time when investors need clean proof that new SaaS demand is durable.
This is why the stock is not a simple victory lap. The operating story is better than it was in late 2025, but valuation remains a real question. Varonis needs to show that 25% SaaS ARR growth excluding conversions can last beyond the migration tailwind.
Subscription data security
Varonis makes money mainly by selling subscriptions to its Data Security Platform. The platform helps large companies find sensitive data, see who can access it, alert on risky behavior, and fix overexposed files. Customers usually buy through distributors and resellers, not directly from Varonis alone.
The business is now overwhelmingly SaaS. Total SaaS ARR reached $726.0 million at the end of June 2026, marking a 52% increase from the prior year. This transition has built a highly predictable and recurring revenue stream.
The model works best when customers keep renewing and then add more data stores, cloud apps, databases, email protection, MDDR, and AI security use cases. Varonis maintains a renewal rate over 90%, which points to a sticky customer base.
Where it breaks is conversion friction. The company has set December 31, 2026 as the end-of-life date for the term license subscription business. That makes the future cleaner if customers move, but it also creates a deadline that could push some legacy customers to leave.
What Varonis sells
Varonis Data Security Platform
This is the core platform. It finds sensitive data, checks who can reach it, alerts on risky activity, and can help lock down access.
Managed Data Detection and Response
MDDR is a 24/7 managed service for SaaS customers. It mixes Varonis software with human threat hunters who look for attacks and data misuse.
AI security and AllTrue.ai
Varonis acquired AllTrue.ai to provide visibility and control over AI agents, models, and data pipelines. The open question is how much ARR this adds.
Database Activity Monitoring from Cyral
Cyral expanded Varonis into database security. This helps the platform cover more places where sensitive company data lives.
SlashNext email security
SlashNext adds AI-native email protection against phishing and social engineering. That broadens Varonis beyond files and databases into a major attack path.
Federal SaaS platform
FedRAMP Authorization lets Varonis offer its full SaaS platform to U.S. federal customers. That opens a large market for dedicated growth.
SaaS now dominates revenue
Mix is based on the ongoing shift to SaaS through the first half of 2026. Varonis says the United States remains its main revenue source, but the clearest current mix is the SaaS, term license, and maintenance split.
What could break the story
Legacy customer churn
High impact · Medium oddsVaronis plans to end the term license subscription business on December 31, 2026. If too many legacy customers refuse to move to SaaS and choose to leave, ARR growth could slow and revenue could become choppy again.
New SaaS growth fades
High impact · Medium oddsThe bull case depends on new SaaS demand, not only moving old customers to the cloud. SaaS ARR excluding conversions grew 25% year over year in Q2 2026. If that rate drops after the conversion wave fades, investors may question the true growth rate.
Legal overhang grows
Medium impact · Medium oddsA securities class action was filed in January 2026. A related shareholder derivative action was filed in April 2026. These cases may not change the product, but they can raise legal costs, distract leaders, and weigh on trust.
AI security excitement outruns ARR
Medium impact · Medium oddsAI is a real demand driver because companies need to secure data before using AI tools. Still, Varonis has not yet given a clear ARR number for AllTrue.ai or the broader AI security push. If customers test but do not buy, the market may lower its growth expectations.
Israel operating exposure
Medium impact · Low oddsVaronis has significant research and development operations in Israel. Geopolitical instability could disrupt workers, product delivery, or costs. This risk is hard to time but important because product pace matters in cybersecurity.
In one breath
What does Varonis do?
Varonis helps companies protect sensitive data. Its software finds data, checks access, watches user and AI activity, and helps fix risky permissions.
Why does the SaaS transition matter for VRNS?
SaaS means customers use Varonis through cloud subscriptions instead of self-hosted licenses. That can make revenue more recurring, but the remaining legacy customers must convert or churn before the December 31, 2026 deadline.
How is AI helping Varonis?
AI tools need access to company data, which creates a security problem. Varonis sells tools that help companies see what data AI can touch and reduce the chance that sensitive data leaks.
What is the biggest number to watch next?
Watch SaaS ARR excluding conversions. It grew 25% year over year in Q2 2026, showing the underlying demand for the platform independent of migrating old customers.
