Varonis (VRNS) Q2 2026 earnings review
Top-Line Beats Obscure the Deceleration of Key SaaS Metrics
Varonis delivered a strong top-line beat in Q2, growing total revenue by 18% year-over-year to $180.0 million and posting positive non-GAAP operating income. Management raised full-year guidance for both revenue and its primary KPI—SaaS ARR excluding conversions. However, beneath the 'beat-and-raise' narrative, the core growth engine is clearly decelerating. SaaS ARR excluding conversions slowed to 25% growth in Q2, down from 29% in Q1 and 32% in Q4, and guidance implies further deceleration. Furthermore, the strategic 'end-of-life' for its legacy on-premise business continues to exact a heavy toll on free cash flow and GAAP profitability.
🐂 Bull Case
The mandate to secure corporate data before feeding it into Large Language Models is driving tangible demand. SaaS ARR from new logos grew more than 20%.
SaaS ARR surged 52% year-over-year to $726.0 million. The deliberate collapse of legacy term licenses is progressing smoothly, replacing low-quality revenue with highly recurring SaaS.
🐻 Bear Case
Management highlights momentum, but their primary KPI (SaaS ARR excluding conversions) dropped from 32% YoY growth in 25Q4 to 25% in Q2, and is guided to 22.5% next quarter.
Six-month Free Cash Flow reversed its growth trajectory, falling to $69.1 million from $82.7 million a year ago, dragged down by the EOL of the legacy self-hosted platform.
⚖️ Verdict: ⚪
Neutral. The SaaS transition is executing beautifully on the top line, and Varonis remains a premier play on AI data security. However, the steady deceleration of 'pure' SaaS ARR growth and constrained cash flow generation cap near-term upside.
Key Themes
The Narrative vs. Data Contradiction on Growth
Management's narrative heavily emphasizes 'accelerating momentum' and 'increasing momentum from newer products.' However, the company's self-selected primary KPI—SaaS ARR excluding conversions—tells a different story. This metric has steadily decelerated from 32% in Q4 2025, to 29% in Q1 2026, to 25% in Q2. Q3 guidance implies further deceleration to 22-23%. While a ~20% sustainable growth rate is impressive at scale, the narrative of 'acceleration' directly contradicts the trajectory of their most important data point.
AI Integration & Ecosystem Expansion
Varonis is successfully positioning itself as the critical 'brakes' necessary to drive AI adoption. The Q2 announcement of support for the AI-native coding tool 'Cursor' and deep integrations with Anthropic’s 'Claude Enterprise' validates their relevance. By securing AI from code to runtime, Varonis is unlocking frozen enterprise AI budgets.
Free Cash Flow Contraction
The structural headwinds from forcing the legacy customer base to SaaS are visibly impacting liquidity. During the first six months of 2026, Free Cash Flow decelerated, generating $69.1 million compared to $82.7 million in the prior year period. Operating cash flow also fell YoY ($80.1M vs $89.3M). Management previously warned that the end-of-life mandate for self-hosted solutions would create a $30-$50 million FCF headwind, and that pain is now evident in the numbers.
GovRAMP Authorization Unlocks Public Sector
Varonis achieved GovRAMP Authorization in Q2. Historically, the federal and government vertical has been the company's weakest segment and the most resistant to SaaS conversion. This macro-level authorization acts as a major catalyst, allowing Varonis to aggressively target public sector entities that are currently modernizing legacy infrastructure.
Widening GAAP Operating Losses due to SBC
While Non-GAAP operating income turned positive ($3.7M), GAAP operating losses worsened to $(40.6) million from $(36.6) million a year ago. This was largely driven by a heavy reliance on stock-based compensation (SBC), which totaled $68.4 million over the first six months. SBC now represents nearly 19% of total revenue, diluting shareholders and masking true operational costs.
Legacy Revenue Collapse Continues as Planned
The intentional cannibalization of legacy revenue is progressing rapidly. Term license subscriptions plummeted 87% YoY (from $32.4M to $4.2M), and Maintenance revenues dropped 70% YoY (from $13.9M to $4.1M). This validates the success of the SaaS transition, with SaaS revenue now comprising 95% of total revenue.
Other KPIs
Accelerating dramatically. Grew 62% year-over-year compared to $105.9 million in 25Q2. This massive volume shift offset the complete collapse of the legacy term license business.
Stable. The company maintains a formidable balance sheet, heavily front-loaded with marketable securities and cash. This provides significant firepower for continued tuck-in M&A (like the recent Atlas/Altu and Interceptor deals) and share repurchases.
Guidance
Decelerating. The midpoint of $186.5M implies year-over-year growth of ~15%, which is a step down from the 18.3% YoY growth achieved in Q2. Sequentially, it implies a mild ~3.6% growth over Q2.
Decelerating. This continues the sequential downward trend from 29% in Q1 and 25% in Q2. The guide suggests that new logo acquisition and upsell momentum are fighting against the gravity of a larger recurring revenue base.
Accelerating slightly vs prior guidance. The midpoint ($737.0M) implies roughly 18.2% YoY growth compared to the $623.5M reported in FY25. This is an upward revision from prior expectations.
Reversing. Down materially from the $131.9M generated in FY25. This confirms that the financial 'trough' created by churning single-threaded, on-premise government and federal customers is impacting the full year exactly as management cautioned previously.
Key Questions
Ex-Conversion Deceleration Floor
SaaS ARR excluding conversions has trended from 32% down to a guided 22.5% for Q3. Does the FY guidance of 20-21% represent the absolute floor, or could we see this drift into the high teens next year as the base grows?
M&A Revenue Contribution
You cited increasing momentum from Atlas, Interceptor, and DAM. What percentage of Q2's new logo ARR was primarily driven by these recently acquired products versus the core data security platform?
GovRAMP Pipeline Timeline
With the recent GovRAMP Authorization, how long is the typical public sector sales cycle, and when do you expect this vertical to transition from a headwind to a material SaaS ARR driver?