The Varonis Data Security Platform is the name Varonis uses for the set of capabilities it sells as a single cloud-delivered service. Its platform page describes it as combining data discovery and classification, automated remediation, data-centric threat detection, a forensics layer and broad coverage of structured, unstructured and semi-structured data, with “world-class services and support”.[1] Varonis’ public pages do not give a price list, part numbers or an edition matrix, and the Subscription Services Agreement leaves the product list and the Authorized Usage to the Purchase Confirmation.[13] This article lists what the public pages say about each product, and flags the statements that bear on whether an item is separately licensed.
How the platform page groups products
The platform page navigation groups the offering into data security, AI security, identity security, Interceptor email security, and services, as follows.[1]
| Group | Items named on the page |
|---|---|
| Data security | Data discovery and classification; DSPM; database activity monitoring; data-centric UEBA; data access governance; DLP |
| AI security | Atlas AI security |
| Identity security | Identity resolution; identity posture; ITDR |
| Interceptor email security | Interceptor email security; Interceptor browser security; email data protection |
| Services | MDDR; Varonis Concierge; Athena AI; Changelog |
| Coverage packages | Microsoft 365 and Entra ID; Windows and NAS; SaaS apps; cloud infrastructure; databases; network |
The page does not say whether each item is a separate order line, a module within a single subscription, or a feature switched on by configuration. What it does say about packaging is limited to two statements: that “All customers get proactive threat hunting and posture assessments with their SaaS subscription”, and that customers can “Upgrade to MDDR” for alert response around the clock.[1] The navigation of the page also offers buy links for the AWS, Azure and Salesforce marketplaces.[1]
The SLA gives the contractual dimension: Updates under Support Services “shall not include any new functionality, features or modules offered by Varonis as separate or additional products, components or add-ons.”[14] A capability announced as a new module may therefore be outside an existing subscription until it appears on a Purchase Confirmation.
Data security capabilities
Discovery, classification and DSPM
Varonis describes classification as combining AI classification and pattern matching across structured databases and data warehouses, unstructured data in files, folders and buckets, and semi-structured data in SaaS apps and email. The same page presents data security posture management (DSPM) as an outcome-based layer that automatically remediates risk, enforces policies and detects threats.[1] The privacy whitepaper says AI-based classification of actual data is optional and enabled by the customer: each document is analysed momentarily and then deleted, and Varonis retains only the classification.[2] The responsible AI page adds that customers who do not want GenAI-based features can disable them, or “avoid licensing specific services or platforms” where Varonis uses GenAI.[11]
DatAdvantage Cloud
DatAdvantage Cloud was announced in early access on 2023-06-02 as a cloud-hosted solution for AWS, Box, GitHub, Google Drive, Jira, Okta, Salesforce, Slack and Zoom, connecting to cloud services and identity providers without proxies or architecture changes.[9] The privacy whitepaper describes DatAdvantage Cloud as working directly with cloud data sources such as Salesforce, Google Suite and Box; most allow a collector installed in the customer environment, while for a handful that do not, data is temporarily retrieved for classification, discarded after classification, and only metadata and classification results are kept.[2] The relationship of the DatAdvantage Cloud name to the current platform packaging is not stated on the pages reviewed. See DatAdvantage Cloud.
Database activity monitoring
Varonis’ database activity monitoring page describes an agentless, cloud-native service that monitors cloud, on-premises, managed or unmanaged databases, and names SQL Server, Oracle, MySQL, PostgreSQL, MongoDB and cloud-native databases in AWS, Azure and Google Cloud, along with Snowflake in the identity-mapping discussion.[4] It states that the monitoring is part of the overall platform and integrates with discovery, classification and posture management. Whether database monitoring is a separate subscription line is not stated. See Next-Gen Database Activity Monitoring.
Data lifecycle management
Varonis introduced Data Lifecycle Management as a capability to manage data “from creation to deletion”, targeting redundant, obsolete and trivial (ROT) data, applying retention and privacy policies, quarantining duplicates and containing overexposed data; the page says every action is reversible so nothing is deleted until the customer is sure.[7] The platform page announces it with the words “Introducing Varonis Data Lifecycle Management”.[1] See Data Lifecycle Management.
Identity protection
Varonis announced Identity Protection on 2025-06-03 as a “fully integrated suite of solutions” providing identity resolution, identity posture management and identity threat detection and response, woven through the platform. The announcement says the integrated approach covers the blind spot of identity “without needing a separate identity tool or XDR add-on”, and describes integrations with identity providers such as Entra ID, Okta and local Active Directory.[6] How Identity Protection is entitled is not stated. See Varonis Identity Protection.
AI security and AI features
Atlas
Varonis Atlas is described as “the complete AI security platform”, with AI inventory, AI security posture management, AI pen testing, runtime guardrails, activity monitoring, detection and response, compliance management and AI third-party risk management.[3] The privacy whitepaper refers to “the Atlas AI license” and says that when a customer adds a corporate GenAI platform such as Copilot, Agentforce, ChatGPT or Gemini as a data source, or uses the Atlas AI licence, Varonis collects, analyses and stores the relevant prompts and responses on the platform. Only customer users assigned a special role can retrieve them, and they are protected by tenant segregation.[2] The whitepaper’s wording is the only public statement found that names a separately identified AI licence. The same whitepaper gives the default retention of Subscriber Data on the SaaS platform as a sliding window of 180 days during the subscription term.[2] See Varonis Atlas AI Security.
Athena AI
Athena AI is described as embedded in the platform and appearing in various interfaces, for investigations and natural-language search. Varonis states it is built on Azure OpenAI, does not use customer data to train its models, and that “customers can opt out of AI features at anytime”.[8] The page does not say whether Athena AI is priced separately. See Athena AI.
Interceptor
Varonis Interceptor is described as AI-native, API-based email security that protects users from phishing, business email compromise and social engineering via email and collaboration apps, with an extension to the browser that blocks malicious websites.[5] On the privacy side, the whitepaper explains that each email is analysed momentarily and then deleted unless it is detected as malicious, and that email samples submitted in false positive or false negative investigations are deleted 30 days after the case is closed.[2] The platform navigation lists email security and browser security as separate Interceptor items.[1] See Varonis Interceptor.
MDDR and services
MDDR is presented as a managed service announced on 2024-03-05, with a 30-minute response target for ransomware attacks and 120 minutes for other alerts, delivered on top of the Data Security Platform.[10] The platform page presents it as an upgrade, and a January 2026 article says its team triages and responds to alerts around the clock “even during a POC”.[1][12] The support article in this series, Varonis support and service levels, discusses the targets. The platform page also names Varonis Concierge as a service; no terms for it were found in the documents reviewed. See Managed Data Detection and Response.
Deployment components that matter for scope
Three deployment statements help a licence manager understand what is being counted or connected.
- Collector. Customer data is retrieved and processed by Collector servers installed in the customer premises, and only metadata, not the data itself, is stored on the platform.[2] The Subscription Services Agreement licenses the Subscriber Program, the application installed in the subscriber’s environment, solely for use with the Subscription Services.[13]
- Data sources. Varonis’ deployment article says a data source such as Microsoft 365 or AWS is added through guided workflows, and that after an AWS account is onboarded it automatically discovers resources such as S3 buckets, RDS databases and EC2 instances.[12] The Authorized Usage definition lists “the data, number of folders, events tracked or monitored” as possible factors, so discovered resources may be relevant to the quantity recorded in a Purchase Confirmation, but the documents do not say which discovered items are counted.[13]
- Region. The platform can be set to operate from the geography the customer chooses at onboarding.[2]
Reading the product list against a Purchase Confirmation
Because the public pages describe capabilities and not entitlements, a practical review compares the list above with the order record:
- Identify which products and services the Purchase Confirmation names, and the Authorized Usage for each.
- Check whether items that the public pages treat as distinct (Atlas, Interceptor, MDDR, Identity Protection, database monitoring, data lifecycle management) appear as separate lines.
- Confirm whether features announced after the order date are within scope, using the SLA language on new modules as the baseline.[14]
- Where a GenAI platform is added as a data source, confirm the retention and role settings for stored prompts.[2]
Out of scope
This article does not cover competitive positioning, analyst ratings, customer testimonials, security certifications, integration lists beyond those named above, or the legacy self-hosted products, which are covered in Varonis self-hosted licensing.