Proofpoint
Acquisitions
11
Major Deals Covered
$1.2B
Disclosed Deal Value
Proofpoint's largest disclosed acquisition here is ObserveIT for $225M in 2019. This page covers 11 major deals from 2013 to 2024, each with its price where disclosed and the reason behind it.
| Company | Year | Price | Purpose |
|---|---|---|---|
| Normalyze | 2024 | $120.0M | Acquired data security posture management (DSPM) innovator to discover, classify, and protect sensitive enterprise data across multi-cloud environments. |
| Tessian | 2023 | $100.0M | Acquired AI-native behavioral email security leader to combat accidental data loss, misdirected emails, and advanced social engineering. |
| Illusive Networks | 2022 | $125.0M | Acquired identity threat detection and response (ITDR) pioneer to mitigate Active Directory reconnaissance and lateral movement attacks. |
| Dathena | 2022 | $50.0M | Acquired AI-driven data classification and discovery startup to automate sensitive content governance. |
| ObserveIT | 2019 | $225.0M | Acquired leading insider threat management and endpoint behavioral monitoring platform. |
| Meta Networks | 2019 | $120.0M | Acquired innovative Zero Trust Network Access (ZTNA) and software-defined perimeter pioneer. |
| Wombat Security Technologies | 2018 | $225.0M | Acquired leading security awareness computer-based training and simulated phishing platform. |
| Cloudmark | 2017 | $110.0M | Acquired messaging security provider protecting major ISPs and mobile mobile network operators globally. |
| FireLayers | 2016 | $55.0M | Acquired cloud application security broker (CASB) platform providing real-time visibility into SaaS applications. |
| Nexgate | 2014 | $35.0M | Acquired social media brand protection and compliance monitoring technology. |
| Sendmail, Inc. | 2013 | $23.0M | Acquired the commercial entity behind the ubiquitous open-source Sendmail mail transfer agent (MTA). |
2024
$120M
Acquired data security posture management (DSPM) innovator to discover, classify, and protect sensitive enterprise data across multi-cloud environments.
Integrated into Proofpoint Information Protection to deliver unified data risk visibility spanning cloud, SaaS, and on-premises repositories.
Positions Proofpoint as a top provider in the rapidly growing DSPM category alongside human-centric email DLP.
2023
$100M
Acquired AI-native behavioral email security leader to combat accidental data loss, misdirected emails, and advanced social engineering.
Enhanced Proofpoint's inbound and outbound threat defenses with deep natural language processing and behavioral anomaly detection.
Fully merged into Proofpoint's email threat portfolio to prevent human error and sophisticated spear-phishing.
2022
$125M
Acquired identity threat detection and response (ITDR) pioneer to mitigate Active Directory reconnaissance and lateral movement attacks.
Equipped Proofpoint with identity risk discovery and deception-based defense mechanisms across privileged accounts.
Expanded Proofpoint's human risk management platform to safeguard credentials and user identities.
2022
$50M
Acquired AI-driven data classification and discovery startup to automate sensitive content governance.
Upgraded Proofpoint Enterprise DLP with deep learning-based automated data discovery and zero-configuration classification.
Enhanced data security coverage for regulated industries across healthcare, finance, and government.
2019
$225M
Acquired leading insider threat management and endpoint behavioral monitoring platform.
Provided Proofpoint with lightweight endpoint sensors that detect anomalous user activities and data exfiltration.
Became the technological cornerstone of Proofpoint Enterprise DLP and insider risk management.
2019
$120M
Acquired innovative Zero Trust Network Access (ZTNA) and software-defined perimeter pioneer.
Enabled Proofpoint to secure remote user access to corporate applications without traditional VPN vulnerabilities.
Integrated into Proofpoint's cloud security and secure access service edge (SASE) offerings.
2018
$225M
Acquired leading security awareness computer-based training and simulated phishing platform.
Created the Proofpoint Security Awareness Training (PSAT) division, tying threat intelligence directly to end-user education.
Delivers substantial high-margin cross-sell revenue across Proofpoint's global enterprise customer base.
2017
$110M
Acquired messaging security provider protecting major ISPs and mobile mobile network operators globally.
Expanded Proofpoint's threat telemetry by billions of daily messages from global internet service providers.
Solidified Proofpoint's position as the world's highest-volume message security and threat intelligence engine.
2016
$55M
Acquired cloud application security broker (CASB) platform providing real-time visibility into SaaS applications.
Gave Proofpoint immediate native CASB capabilities to defend corporate cloud apps like Office 365, Google Workspace, and Salesforce.
Formed the foundational infrastructure for Proofpoint Cloud App Security.
2014
$35M
Acquired social media brand protection and compliance monitoring technology.
Extended Proofpoint's threat mitigation beyond email to social media accounts on LinkedIn, Twitter, and Facebook.
Broadened digital risk protection and regulatory compliance for financial services brands.
2013
$23M
Acquired the commercial entity behind the ubiquitous open-source Sendmail mail transfer agent (MTA).
Granted Proofpoint direct control over core enterprise email routing architecture and critical message infrastructure.
Cemented enterprise relationships and provided a seamless upgrade path to Proofpoint's cloud email defense.
Under CEO Sumit Dhawan, Proofpoint is executing four strategic growth priorities: (1) Advancing the Human Risk Management (HRM) Platform: Transforming from discrete email security tools into a unified Human Risk Management platform that dynamically adjusts security controls based on an employee's real-time risk profile and attack exposure; (2) Neutralizing Sophisticated Business Email Compromise (BEC) and Vendor Fraud: Deploying generative AI and natural language processing to detect multi-stage supply chain impersonation and payroll redirection scams; (3) Scaling Cloud and Identity Protection for M365: Delivering frictionless API-based security for Microsoft 365 and Google Workspace to secure cloud collaboration tools (Teams, Slack, SharePoint) from data exfiltration; and (4) Accelerating Enterprise Data Loss Prevention (DLP): Unifying cloud, email, and endpoint DLP into a single console, preventing data leakage driven by generative AI tools and insider threat vectors.
Proofpoint operates a high-margin, enterprise-scale Software-as-a-Service (SaaS) subscription business model with outstanding revenue visibility and customer retention rates consistently exceeding 95%: (1) Email Protection & Targeted Attack Protection (TAP) Subscriptions (~60% of revenue), billed annually on a per-user, per-month basis to protect corporate email against advanced phishing, zero-day attachments, credential harvesting, and Business Email Compromise (BEC); (2) Human Risk Management & Security Awareness Training (~20% of revenue), which delivers simulated phishing attacks, adaptive employee training modules, and behavioral risk scoring; (3) Information Protection & Enterprise Data Loss Prevention (DLP) (~15% of revenue), monitoring sensitive data transfers, insider threats, and endpoint file exfiltration; and (4) Cloud App Security & Enterprise Archiving (~5% of revenue), providing regulatory compliance archiving, eDiscovery, and CASB protection for Microsoft 365 and Google Workspace. Proofpoint's scale generates gross margins exceeding 78% and robust operating cash flow.
Proofpoint pursues a disciplined, strategic M&A approach focused on acquiring proprietary technologies, expanding customer distribution reach, and unlocking operational cost synergies rather than pursuing unselective scale.
Transformative transactions in Proofpoint's history include pivotal mergers and acquisitions that secured key regional footprints, consolidated core market share, and brought proprietary software intellectual property in-house.
Proofpoint deploys dedicated integration teams to harmonize core software stacks, align regulatory compliance systems, and unite company cultures while preserving entrepreneurial agility.
Yes, Proofpoint periodically evaluates its corporate portfolio, strategically divesting non-core or non-strategic assets to redeploy capital into high-margin core operational divisions.
Compare corporate acquisition records, deal values, and strategic targets
Explore Proofpoint
Core profile pages, founders and related research hubs for this company.