Enterprise cybersecurity giant Proofpoint announced on Tuesday that it has signed a definitive agreement to acquire data security posture management (DSPM) company Normalyze.

The deal, expected to close in November, will allow Proofpoint to enhance its cybersecurity platform with Normalyze’s DSPM technology, enabling customers to discover, classify and secure data across all their environments. 

Financial terms are not being disclosed. Normalyze, a San Francisco-based company, has raised over $26 million.

Proofpoint, which Thoma Bravo took private in a $12.3 billion deal in 2021, has developed what it describes as a human-centric security platform that provides threat defense, information protection, app and identity posture management, and security awareness capabilities.

The company provides email security, impersonation protection, enterprise DLP, insider threat management, and compliance products. 

Normalyze’s solutions, which will become part of Proofpoint’s offering once the acquisition has been completed, enable organizations to identify and classify sensitive data with the aid of an agentless scanner, allow them to assess and prioritize risk by impact and likelihood, and help them remediate security and compliance issues by providing insights and recommendations.

“With the rapid proliferation of internally developed cloud applications, and use of SaaS applications procured by teams outside of IT, security teams are faced with the daunting challenge of inconsistent visibility and control of their critical data in the cloud,” said Ravi Ithal, cofounder and CTO of Normalyze. 

Ithal added, “As data has become increasingly difficult to secure, the driving force behind our mission and technology has been to help organisations secure the data they care about, wherever it is. By joining forces with Proofpoint, we can empower organisations to further improve their data security posture, reducing the risk of data breaches caused by human errors and help them to prioritise data loss threats.”

Based on M&A data collected by SecurityWeek in the first three quarters of 2024, 28 deals involved data security companies, a vast majority located in North America and Europe. 

Related: Layoffs Hit Security Vendors Okta, Proofpoint, Netography

Related: Proofpoint to Acquire Tessian for AI-Powered Email Security Tech

Related: Proofpoint Buys Deception Tech Startup Illusive Networks