VARONIS SYSTEMS INC (VRNS) stock intrinsic value fair value estimate & owner earnings analysis

Varonis sells data-security software. It maps where a company's sensitive files and records sit (in Microsoft 365, cloud storage, databases and on-premises file servers), shows who can reach them, and automatically removes excess access and flags suspicious behaviour. Customers are mostly large and mid-sized organisations. About 71% of revenue comes from the United States, 21% from Europe, the Middle East and Africa, and 8% from the rest of the world. Revenue was $623.5 million in 2025, up from $165.9 million in 2016. Renewal rates have stayed above 90% every year. The company is near the end of a big change in how it sells. Until about 2022 most customers bought licences they ran on their own servers, and most of that revenue was booked up front. Varonis has since moved almost everyone onto a cloud subscription (SaaS) that is booked month by month over the contract. It plans to stop supporting the self-hosted product on December 31, 2026. SaaS was 86% of the $745.4 million annual recurring revenue at the end of 2025. By June 2026 SaaS recurring revenue was $726.0 million, up 25% in a year if customers switching from the old product are left out. The switch makes reported results hard to read. Revenue lagged billings, which is why deferred revenue rose by $148 million in 2025 alone. Gross margin also fell from about 86% in 2023 to about 75% in mid-2026, because Varonis now pays to host the software for its customers. What the business earns for its owners: we measure the cash the business produces in a normal year. We take operating cash flow, strip out swings in receivables, payables and deferred revenue, and subtract stock-based pay and the capital spending needed to keep the business running. On that basis Varonis has lost money for owners in every one of the last ten years: from about -$0.20 a share in 2016-2017 to -$0.77 in 2024 and -$1.45 in 2025. The median for 2021-2025, the years at today's scale, is about -$1.08 a share. The first half of 2026 was worse than the first half of 2025. The main reason is stock-based pay. It has run at $127-143 million a year since 2022, about 21% of 2025 revenue. Before stock-based pay, Varonis has roughly broken even for ten years, with operating margins between about -5% and +5%. It has never earned enough to cover the stock it issues to employees. The company reports positive free cash flow ($132 million in 2025, guided at $105-110 million for 2026). That figure counts customer prepayments as cash earned and leaves out the cost of stock-based pay. Share buybacks ($115 million in 2025 and $135 million in the first half of 2026) have mostly offset the dilution from that pay rather than returning cash to owners. Accounting choices that affect the result: (1) We count sales commissions when they are paid in cash, not spread over later years. This cost $39 million more than the accounting charge in 2025 because of the wave of customers switching to SaaS. We assume the gap shrinks to its old $5-8 million a year once the switch is done. (2) We count rent as a cost, and we count interest earned on the company's roughly $911 million of cash and investments as income. (3) Amortisation of acquired intangibles, from the 2025 SlashNext purchase and others, is added back as a sunk cost. We give no growth credit for those acquired products. Base case (median outcome): revenue of about $737 million in 2026, in line with first-half results. Growth then slows from 16% in 2027 to 7% by 2036. It starts close to the growth in recurring revenue from new business the company has shown, then eases off, because we can see no evidence that the current pace will last a decade. Ending the self-hosted product on December 31, 2026 removes the cost of running two platforms and the extra commissions on conversions. That is the specific, dated reason we expect 2027 to be better than 2026, which we set at the first-half 2026 pace of about -$200 million. Operating margin before stock-based pay reaches 4% by 2029, the top of the company's ten-year range. We give no credit for higher margins because the company has never shown them. Stock-based pay grows 2% a year, in line with its roughly flat record since 2022. Interest income largely disappears after the $460 million of 1% convertible notes are repaid in 2029. On these assumptions owners still lose about $0.75-1.05 a share each year through 2036, and the value comes to about -$9.23 a share. In plain terms, the business as it is run today hands employees more value in stock than it earns for shareholders. The company still has about $450 million more in cash and investments than it owes on the notes, so this is not a solvency problem. The losses are borne by shareholders through dilution and through the cash spent on buybacks. Bear case (about 10th percentile): some self-hosted customers leave instead of switching when support ends. The company's own risk disclosures name this, along with worries about pricing, data residency and vendor lock-in. Competition from larger platforms, such as Microsoft's own data-security tools, holds growth to 9% in 2027, fading to 4%. Operating margin before stock-based pay stays around the 2025-2026 level of about -1% to +1%, and stock-based pay grows 4% a year. Value is about -$16.22 a share. Bull case (about 90th percentile): the company's own levers work. SaaS recurring revenue keeps growing at 20-21%, the pace it has shown and guided for 2026, slowing to 10% by 2036. Gross margin recovers toward the 79% seen in mid-2025 as hosting gets more efficient, and ending the old product frees up support and engineering spend. Operating margin before stock-based pay reaches 10% by 2031, and stock-based pay holds flat at about $137 million. Owners start earning money in about 2031 and make around $167 million by 2036. Beyond 2036 we let that earning power shrink by about 10% a year, in line with customers renewing at about 90%. Value is about $5.39 a share. What would change our view: two things would have to happen at once. Stock-based pay would need to stay near $135 million, and operating margin before it would need to rise well above the 5% ceiling of the past ten years. The 2027 results matter most. They will be the first year without self-hosted customers, and they will show whether costs fall once the conversion work is done. Until owner earnings after stock-based pay actually turn positive, the shares carry no value for owners that we can support with evidence. The margin-of-safety price sits well below the bull-case value and applies only after that turn has happened.