M&A Tracker

Proofpoint to Acquire Data Security Posture Management Firm Normalyze

Enterprise cybersecurity giant Proofpoint is acquiring data security posture management (DSPM) company Normalyze. 

Enterprise cybersecurity giant Proofpoint is acquiring data security posture management (DSPM) company Normalyze. 

Enterprise cybersecurity giant Proofpoint announced on Tuesday that it has signed a definitive agreement to acquire data security posture management (DSPM) company Normalyze.

The deal, expected to close in November, will allow Proofpoint to enhance its cybersecurity platform with Normalyze’s DSPM technology, enabling customers to discover, classify and secure data across all their environments. 

Financial terms are not being disclosed. Normalyze, a San Francisco-based company, has raised over $26 million.

Proofpoint, which Thoma Bravo took private in a $12.3 billion deal in 2021, has developed what it describes as a human-centric security platform that provides threat defense, information protection, app and identity posture management, and security awareness capabilities.

The company provides email security, impersonation protection, enterprise DLP, insider threat management, and compliance products. 

Normalyze’s solutions, which will become part of Proofpoint’s offering once the acquisition has been completed, enable organizations to identify and classify sensitive data with the aid of an agentless scanner, allow them to assess and prioritize risk by impact and likelihood, and help them remediate security and compliance issues by providing insights and recommendations.

Advertisement. Scroll to continue reading.

“With the rapid proliferation of internally developed cloud applications, and use of SaaS applications procured by teams outside of IT, security teams are faced with the daunting challenge of inconsistent visibility and control of their critical data in the cloud,” said Ravi Ithal, cofounder and CTO of Normalyze. 

Ithal added, “As data has become increasingly difficult to secure, the driving force behind our mission and technology has been to help organisations secure the data they care about, wherever it is. By joining forces with Proofpoint, we can empower organisations to further improve their data security posture, reducing the risk of data breaches caused by human errors and help them to prioritise data loss threats.”

Based on M&A data collected by SecurityWeek in the first three quarters of 2024, 28 deals involved data security companies, a vast majority located in North America and Europe. 

Related: Layoffs Hit Security Vendors Okta, Proofpoint, Netography

Related: Proofpoint to Acquire Tessian for AI-Powered Email Security Tech

Related: Proofpoint Buys Deception Tech Startup Illusive Networks

Related Content

Funding/M&A

The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio.

Data Protection

Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.

Data Protection

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.

Cybersecurity Funding

The data security company received the new investment from Goldman Sachs Alternatives, extending its Series G funding round.

Cybersecurity Funding

The company will use the funding to accelerate platform development and expand its presence in key enterprise markets.

Data Protection

Financials have not been disclosed, but the estimated cost is in the tens of millions of dollars.

Funding/M&A

Fortinet will use Virtue AI technology to enhance its AI security portfolio, including for AI models, applications, and agentic systems.

Fraud & Identity Theft

The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version