Varonis Acquisition Lets Companies Detect and Block Risky AI Data Flows

Varonis Systems announced on February 3, 2026, that it will acquire AllTrue.ai. AllTrue.ai provides AI Trust, Risk, and Security Management (AI TRiSM) capabilities. It discovers AI assets, including shadow AI, and scans security posture for vulnerabilities. It offers runtime protection through a tool-agnostic AI gateway that enforces policies and blocks risky data flows. Detection and response features produce audit alerts and connect to existing security tools. The company also runs tests against prompt injection and jailbreak attacks and produces compliance reports. Varonis will integrate these features into the Varonis Data Security Platform. That integration gives visibility and real-time control over AI systems that access enterprise data. "The real value, and risk, of AI is related to the enterprise data AI can access," said AllTrue.ai CEO Ron Bennatan. Varonis CEO Yaki Faitelson said the deal lets organizations adopt AI while keeping risks under control with data-centric security and least-privilege enforcement.

Why It Matters

• Security engineers can discover shadow AI and enforce runtime guardrails with the AI gateway, blocking data exfiltration before it occurs.
• SOC teams gain AI detection and response (AIDR) to monitor AI access, generate alerts, and integrate findings with SIEM and EDR workflows.
• Data governance and compliance teams get automated audit reports to simplify regulatory adherence, including requirements under the EU AI Act.