Varonis to Acquire AllTrue.ai: What Managers Need to Know
On February 3, 2026, Varonis (NASDAQ: VRNS) announced it is acquiring AllTrue.ai, an AI Trust, Risk, and Security Management (AI TRiSM) company. The deal pairs AllTrue's real-time visibility and enforcement with Varonis' strength in data, identities, and access. The goal is clear: help enterprises adopt AI safely, prove control, and stay compliant at scale.
AI isn't just analyzing data anymore. Models, copilots, and agents are acting on data at machine speed. Without visibility, governance, and guardrails, you get risk you can't see and actions you can't explain.
What the combined platform promises
- See what AI systems and agents exist, what their intent is, what they're connected to, and how they behave - including shadow AI.
- Control AI behavior in real time to filter or block risky or non-compliant actions.
- Reduce risk by knowing exactly what critical data AI systems can access and automatically enforcing least privilege.
- Prove accountability with clear evidence for internal governance and external compliance.
"AI can behave unpredictably," said Yaki Faitelson, CEO and co-founder of Varonis. "If you don't know which AI systems you have, what they're doing, or what data they can touch, you can't safely use AI."
Ron Bennatan, CEO and co-founder of AllTrue.ai, added: "Most AI security efforts focus on models and prompts. But the real value, and risk, of AI is related to the enterprise data AI can access."
Why this matters for management
- Risk shifts from "what did a user do?" to "what did an autonomous system do - and why?" You need evidence, not assumptions.
- Compliance isn't a checkbox; it's continuous. Real-time guardrails and audit trails reduce audit fatigue and surprise exposure.
- Shadow AI is real. Visibility across homegrown agents and third-party copilots prevents silent failure modes.
- Platform consolidation helps security and IT move faster with fewer tools and clearer ownership.
Actions to take now
- Inventory AI: list every model, copilot, and agent by owner, purpose, data connections, and privileges.
- Assign an AI service owner for each system with clear RACI across security, data, and app teams.
- Tie AI to data controls: classify sensitive data and enforce least privilege before agents get access.
- Set guardrails: block risky actions (exfil, mass changes, privilege escalation) and require human approval for high-impact steps.
- Establish AI incident response: detection rules, kill-switches, and a playbook for unintended actions.
- Prove it: enable logging and evidence collection for audits, regulators, and internal governance.
- Pilot fast: start with one high-value workflow, measure risk reduction and time-to-control, then expand.
For governance alignment, review the NIST AI Risk Management Framework for common language and control objectives. NIST AI RMF
FAQ
What did Varonis announce?
Varonis announced it is acquiring AllTrue.ai to integrate AI TRiSM capabilities into its platform. The aim is to combine AllTrue's AI visibility and enforcement with Varonis' data and identity security to help organizations adopt safe, compliant AI at scale.
How will this change Varonis' AI security capabilities?
It adds real-time visibility and enforcement for enterprise AI systems. Teams can see agents, control behavior in real time, and automatically enforce least-privilege access to critical data.
What benefits did Varonis highlight for investors and stakeholders?
Reduced AI risk, stronger accountability, and improved compliance evidence. The platform helps control AI actions and limit what critical data systems can access.
Were financial terms or timing disclosed?
No. The announcement focuses on strategic benefits: visibility, real-time guardrails, least-privilege enforcement, and compliance support.
How does the deal address shadow AI?
The combined platform discovers unmanaged AI systems and enforces guardrails in real time to prevent unsafe or unintended behavior.
What's the bigger picture?
As AI embeds into core processes, security is moving from breach prevention to trust: can autonomous systems act safely, reliably, and within policy? Varonis is building a platform to answer that with visibility, control, and proof.
About Varonis
Varonis is a data security company with a cloud-native platform that discovers and classifies critical data, removes exposures, and detects advanced threats with AI-driven automation. Customers use it for DSPM, data classification, data access governance, DDR, DLP, database activity monitoring, identity protection, email security, and AI security.
Contacts
Investor Relations: Tim Perz, 646-640-2112, investors@varonis.com
News Media: Rachel Hunt, 877-292-8767 (ext. 1598), pr@varonis.com
Upskilling your team
If you're building AI governance and security competencies across management roles, explore curated options here: AI courses by job.
Your membership also unlocks:
