Forms of Restricted Stock Unit Award Grant Notice and Restricted Stock Unit Award Agreement under the 2023 Omnibus Equity Incentive Plan

Varonis Systems, Inc. (the “Company”), pursuant to its 2023 Omnibus Equity Incentive Plan (the “Plan”), attached hereto as Exhibit B, hereby grants to the individual listed below (the “Participant”), an Award of restricted stock units (“Restricted Stock Units” or “RSUs”). Each vested Restricted Stock Unit represents the right to receive, in accordance with the Restricted Stock Unit Award Agreement attached hereto as Exhibit A (together, the “Agreement”), one share of the Common Stock of the Company (“Share”). This Award of Restricted Stock Units is subject to all of the terms and conditions set forth herein and in the Agreement and the Plan, which are incorporated herein by reference.

Capitalized terms not specifically defined herein shall have the meanings specified in the Plan. Participant:    [●]

Grant Date:    [●]

Total Number of RSUs Subject to Grant:    [●] Vesting Schedule:    [●]

By his or her signature, the Participant agrees to be bound by the terms and conditions of the Plan, the Agreement and this Notice. The Participant has reviewed the Agreement, the Plan and this Notice in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Notice and fully understands all provisions of this Notice, the Agreement and the Plan. The Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions arising under the Plan or relating to the Award of RSUs

VARONIS SYSTEMS, INC.     PARTICIPANT

__________________________                __________________________                                

Pursuant to the Restricted Stock Unit Award Grant Notice (the “Notice”) to which this Restricted Stock Unit Award Agreement (together, this “Agreement”) are attached, Varonis Systems, Inc. (the “Company”) has granted to the Participant an Award of restricted stock units (“Restricted Stock Units” or “RSUs”) under the Company’s 2023 Omnibus Equity Incentive Plan (the “Plan”). Each vested Restricted Stock Unit represents the right to receive one share of Common Stock of the Company (“Share”) subject to the terms and conditions set forth in the Plan and this Agreement. Capitalized terms not specifically defined herein shall have the meanings specified in the Plan and Notice.

1.1Incorporation of Terms of Plan. The RSUs are subject to

the terms and conditions of the Plan, which are incorporated herein by reference. In the event of any inconsistency between the Plan and this Agreement, the terms of the Plan shall control.

2.1Grant of RSUs. Effective as of the Grant Date set forth in the Notice, the Company hereby grants to the Participant an Award of RSUs under the Plan, upon the terms and conditions set forth in the Notice, the Plan and this Agreement.

2.2Unsecured Obligation. Unless and until the RSUs have vested in the manner set forth in Article II hereof, the Participant will have no right to receive Shares with respect to any such RSUs. Prior to the actual settlement of any vested RSUs, such RSUs will represent an unsecured obligation of the Company, payable (if at all) only from the general assets of the Company.

2.3Vesting Schedule. Subject to Sections 2.5 and 3.1 hereof, the RSUs shall vest and become nonforfeitable with respect to the applicable portion thereof according to the vesting schedule set forth in the Notice (rounded down to the nearest whole Share).

2.4Consideration to the Company. In consideration of the grant of RSUs pursuant hereto, the Participant agrees to render faithful and efficient employment or other service to the Company or any Affiliate. Nothing in the Plan or this Agreement shall confer upon the Participant any right to continue in the employment or service of the Company or any Affiliate or shall interfere with or restrict in any way the rights of the Company and its Affiliates, which rights are hereby expressly reserved, to discharge or terminate the employment or service of the Participant at any time for any reason whatsoever, with or without Cause.

2.5Forfeiture, Termination and Cancellation Upon Termination of Employment or Service.

(i)In the event that the employment or service of the Participant with the Company and all Affiliates shall terminate for any reason other than Cause, unvested RSUs granted to the Participant shall terminate at the close of business on the date of such termination.

(ii)In the event of the termination of the Participant’s employment or service for Cause, all outstanding RSUs (whether vested or not) granted to the Participant shall terminate at the commencement of business on the date of such termination.

(c)For purposes of the RSUs, as determined in the Administrator’s or its delegate’s exclusive discretion, the Participant’s employment or service relationship will be considered terminated as of the date the Participant is no longer actively providing services to the Company or any Affiliate (regardless of the reason for such termination and whether or not later to be found invalid or in breach of Applicable Laws in the jurisdiction where the Participant is employed or retained or the terms of the Participant’s employment or service agreement, if any), and unless otherwise expressly provided in this Agreement or determined by the Administrator or its delegate, the Participant’s right to vest in the RSUs, if any, will terminate as of such date and will not be extended by any notice period (e.g., the Participant’s period of service would not include any contractual notice period or any period of “garden leave” or similar period mandated under Applicable Laws in the jurisdiction where the Participant is employed or retained or the terms of the Participant’s employment or service agreement, if any).

2.6Issuance of Shares upon Vesting.

Participant’s legal representative shall have paid or otherwise satisfied in full the amount of all Tax-Related Items.

2.7Conditions to Delivery of Shares. The Shares deliverable hereunder may be either previously authorized but unissued Shares, treasury Shares or issued Shares which have then been reacquired by the Company. Such Shares shall be fully paid and nonassessable. The Company shall not be required to issue or deliver any certificates or make any book entries evidencing Shares deliverable hereunder prior to fulfillment of the conditions set forth in Section 20 of the Plan.

3.1Change in Control. In the event of a Change in Control, the RSUs shall be treated in accordance with Section 13 of the Plan.

4.1Administration. The Administrator shall have the power and authority to interpret and construe the terms and provisions of this Agreement and to adopt such rules for the administration, interpretation and application of this Agreement as are consistent therewith and to interpret, amend or revoke any such rules. All decisions made by the Administrator shall be final, conclusive and binding on all persons, including the Participant, the Company and any other interested persons and entities.

4.2Transferability of Grant. Except as otherwise set forth in the Plan:

4.3Responsibility for Taxes. Regardless of any action the Company or, if different, the Affiliate to which the Participant provides services takes with respect to any or all income tax, social insurance, payroll tax, fringe benefits tax, payment on account or other tax related items related to the Participant’s participation in the Plan and legally applicable to the Participant (“Tax-Related Items”), the Participant acknowledges that the ultimate liability for all Tax-Related Items is and remains the Participant’s responsibility and may exceed the amount actually withheld by the Company or the Affiliate. The Participant further acknowledges that the Company and/or the Affiliate (i) make no representations or undertakings regarding the treatment of any Tax-Related Items in connection with any aspect of the RSUs, including, but not limited to, the grant, vesting or settlement of the RSUs, the subsequent sale of Shares acquired pursuant to such settlement and the receipt of any dividends and/or dividend

equivalent; and (ii) do not commit to and are under no obligation to structure the terms of the grant or any aspect of the RSUs to reduce or eliminate the Participant’s liability for Tax-Related Items or achieve any particular tax result. Further, if the Participant has become subject to tax in more than one jurisdiction, the Participant acknowledges that the Company and/or the Affiliate may be required to withhold or account for Tax-Related Items in more than one jurisdiction.

4.4Withholding of Taxes. Prior to any relevant taxable or tax withholding event, as applicable, the Participant agrees to make adequate arrangements satisfactory to the Company and/or the Affiliate to satisfy all Tax-Related Items. In this regard, the Participant authorizes the Company and/or the Affiliate, or their respective agents, at their discretion, to satisfy any applicable withholding obligations with regard to all Tax-Related Items by one or a combination of the following:

Depending on the withholding method, the Company and/or the Affiliate may withhold or account for Tax-Related Items by considering applicable minimum statutory withholding rates or other applicable withholding rates, including maximum applicable rates, in which case the Participant may receive a refund of any over-withheld amount in cash and will have no entitlement to the Share equivalent. If the obligation for Tax-Related Items is satisfied by withholding in Shares, for tax purposes, the Participant is deemed to have been issued the full number of Shares subject to the vested RSUs, notwithstanding that a number of the Shares are held back solely for the purpose of paying the Tax-Related Items.

Finally, the Participant agrees to pay to the Company or the Affiliate any amount of Tax-Related Items that the Company or the Affiliate may be required to withhold or account for as a result of the Participant’s participation in the Plan that cannot be satisfied by the means previously described. The Company may refuse to issue or deliver the Shares or the proceeds of the sale of Shares, if the Participant fails to comply with his or her obligations in connection with the Tax- Related Items.

4.5No Advice Regarding Grant. The Participant represents that the Participant has consulted with any tax consultants the Participant deems advisable in connection with the grant of RSUs and the issuance of Shares with respect thereto and that the Participant is not relying on the Company for any tax advice. The Company makes no warranties or representations whatsoever to the Participant regarding the tax consequences of the grant of RSUs or the receipt of Shares with respect thereto. The Participant shall be solely responsible for any taxes in respect of the RSUs.

4.6Equitable Adjustments. The Participant acknowledges that the RSUs are subject to modification and termination in certain events as provided in this Agreement and Section 5 of the Plan.

4.7Notices. Any notice to be given under the terms of this Agreement to the Company shall be addressed to the Company in care of the Legal Department at the Company’s principal office, and any notice to be given to the Participant shall be addressed to the Participant at the Participant’s last address reflected on the Company’s records. Any notice which is required to be given to the Participant shall, if the Participant is then deceased, be given to the person entitled to the RSUs pursuant to Section 4.2(a) hereof by written notice under this Section 4.7.

4.8Participant’s Representations. If the Shares issuable hereunder have not been registered under the Securities Act or any Applicable Laws on an effective registration statement at the time of such issuance, the Participant shall, if required by the Company, concurrently with such issuance, make such written representations as are deemed necessary or appropriate by the Company and/or its counsel.

4.9Titles. Titles are provided herein for convenience only and are not to serve as a basis for interpretation or construction of this Agreement.

4.10Governing Law and Venue. The laws of the State of Delaware shall govern the interpretation, validity, administration, enforcement and performance of the terms of this Agreement regardless of the law that might be applied under principles of conflicts of laws. For purposes of litigating any dispute that arises under this grant or this Agreement, the parties hereby submit to and consent to the exclusive jurisdiction of the State of New York, agree that such litigation shall be conducted in the courts of New York County, New York, or the federal courts for the U.S. for the Southern District of New York, where this grant is made and/or to be performed.

4.11Conformity to Securities Laws. The Participant acknowledges that the Plan and this Agreement are intended to conform to the extent necessary with all provisions of the Securities Act and the Exchange Act and any and all regulations and rules promulgated by the U.S. Securities and Exchange Commission thereunder, and state and foreign securities laws and regulations. Notwithstanding anything herein to the contrary, the Plan shall be administered, and the RSUs be granted and settled, only in such a manner as to conform to such laws, rules and regulations. To the extent permitted by Applicable Laws, the Plan and this Agreement shall be deemed amended to the extent necessary to conform to such laws, rules and regulations.

4.14Successors and Assigns. The Company may assign any of its rights under this Agreement to single or multiple assignees, and this Agreement shall inure to the benefit of the successors and assigns of the Company. Subject to the restrictions on transfer herein set forth in Section 4.2 hereof, this Agreement shall be binding upon the Participant and his or her heirs, executors, administrators, successors and assigns.

4.15Limitations Applicable to Section 16 Persons. Notwithstanding any other provision of the Plan or this Agreement, if the Participant is subject to Section 16 of the Exchange Act, then the Plan, the RSUs and this Agreement shall be subject to any additional limitations set forth in any applicable exemptive rule under Section 16 of the Exchange Act (including any amendment to Rule 16b-3 of the Exchange Act) that are

requirements for the application of such exemptive rule. To the extent permitted by Applicable Laws, this Agreement shall be deemed amended to the extent necessary to conform to such applicable exemptive rule.

4.16Entire Agreement. The Plan, the Notice and this Agreement (including all Exhibits thereto, if any) constitute the entire agreement of the parties and supersede in their entirety all prior undertakings and agreements of the Company and the Participant with respect to the subject matter hereof.

4.17Section 409A for U.S. Taxpayers. This Award of RSUs is intended to comply with Code Section 409A to the extent subject thereto and shall be interpreted in accordance with Code Section 409A and Department of Treasury regulations and other interpretive guidance issued thereunder, including, without limitation, any such regulations or other guidance that may be issued after the Grant Date. Notwithstanding any provision in the Plan or Agreement to the contrary, no payment or distribution under this Agreement that constitutes an item of deferred compensation under Code Section 409A and becomes payable by reason of the Participant’s termination of employment or service with the Company will be made to the Participant until the Participant’s termination of employment or service constitutes a “separation from service” (as defined in Code Section 409A). For purposes of this Agreement, each amount to be paid or benefit to be provided shall be construed as a separate identified payment for purposes of Code Section 409A. If the Participant is a “specified employee” (as defined in Code Section 409A), then to the extent necessary to avoid the imposition of taxes under Code Section 409A, the Participant shall not be entitled to any payments upon a termination of his or her employment or service until the earlier of: (i) the expiration of the six (6)-month period measured from the date of the Participant’s “separation from service” or (ii) the date of the Participant’s death. Upon the expiration of the applicable waiting period set forth in the preceding sentence, all payments and benefits deferred pursuant to this Section 4.17 (whether they would have otherwise been payable in a single lump sum or in installments in the absence of such deferral) shall be paid to the Participant in a lump sum as soon as practicable, but in no event later than sixty (60) calendar days, following such expired period, and any remaining payments due under this Agreement will be paid in accordance with the normal payment dates specified for them herein. The Administrator may, in its discretion, adopt such amendments to the Plan, this Agreement or the Notice or adopt other policies and procedures (including amendments, policies and procedures with retroactive effect), or take any other actions, as the Administrator determines are necessary or appropriate to comply with the requirements of Code Section 409A.

4.18Electronic Signature; Electronic Delivery and Acceptance. The Participant’s electronic signature of this Agreement shall have the same validity and effect as a signature affixed by hand. The Company may, in its sole discretion, decide to deliver any documents related to the Participant’s current or future participation in the Plan by electronic means. The Participant hereby consents to receive such documents by electronic delivery and agrees to participate in the Plan through an on-line or electronic system established and maintained by the Company or a third party designated by the Company.

4.19Waiver. The Participant acknowledges that a waiver by the Company of a breach of any provision of this Agreement shall not operate or be construed as a waiver of any other provision of this Agreement, or of any subsequent breach by the Participant or any other participants.

4.20Severability. The provisions of this Agreement are severable and if any one or more provisions are determined to be illegal or otherwise unenforceable, in whole or in part, the remaining provisions shall nevertheless be binding and enforceable.

(a)What personal data we collect and for which purpose? The Company collects, processes and uses personal data of the Participant, including, but not limited to, his or her name, home address and telephone number, email address, date of birth, social insurance, passport or other identification number (e.g., resident registration number), nationality, job title, any Shares or directorships held in the Company, details of all RSUs or any other entitlement to Shares awarded, canceled, exercised, vested, unvested or outstanding in the Participant’s favor. If the Company offers the Participant a grant of RSUs under the Plan, then the Company will collect the Participant’s personal data for purposes of allocating stock and implementing, administering and managing the Plan.

(b)Legal basis for processing of personal data. The Company’s legal basis for the processing of the Participant’s personal data would be his or her consent, and where applicable, the performance of the Company's legal duties as an employer and/or issuer of RSUs.

(c)To whom do we disclose such personal data? The Company transfers participant data to Stock Plan Administration Service Providers such as Morgan Stanley, an independent service provider based in the United States, which assists the Company with the implementation, administration and management of the Plan. In the future, the Company may select a different service provider and may share the Participant’s data with another company that serves in a similar manner. The Company’s service provider(s) will open an account for the Participant to receive and trade Shares.

(d)What safeguards are applied to your personal data? We apply and contractually enforce on any service provider or recipient with which we share personal data, separate terms and data processing agreements, to protect the personal data, including by applying various technical and organizational safeguards. Where required we also rely on additional data transfer mechanisms, as further described in the 'International Data Transfers' section below.

(e)Data Retention. The Company will use the Participant’s personal data only as long as is necessary to implement, administer and manage the Participant’s participation in the Plan or as required to comply with legal or regulatory obligations, including under tax and securities laws. When the Company no longer needs the Participant’s personal data, which will generally be seven years after the Participant is granted RSUs under the Plan, the Company will remove it from its systems. If the Company keeps data longer, it would be to satisfy legal or regulatory obligations and the Company’s legal basis would be relevant laws or regulations.

(f)Voluntariness and Consequences of Consent Denial or Withdrawal. The Participant’s participation in the Plan and the Participant’s grant of consent is purely voluntary. The Participant may deny or withdraw his or her consent at any time. If the Participant does not consent, or if the Participant withdraws his or her consent, the Participant cannot participate in the Plan. This would not affect the Participant’s salary as an employee or his or her career; the Participant would merely forfeit the opportunities associated with the Plan.

We use the data types described in the table above, as described in sections 5 and 6 of this notice. 

Selling or Sharing Personal Data - We do not "sell" nor "Share" your Personal Data. We only disclose Personal Data as described in this notice.

4.21Insider-Trading/Market-Abuse Laws. The Participant acknowledges that, depending on his or her country of residence or the country of residence of the Participant’s broker, the Participant may be subject to insider-trading restrictions and/or market-abuse laws, which may affect his or her ability to accept, acquire, sell or otherwise dispose of Shares, rights to Shares (e.g., RSUs) or rights linked to the value of Shares during

such times as the Participant is considered to have “inside information” regarding the Company, as defined by the laws or regulations in the Participant’s country. Local insider trading laws and regulations may prohibit the cancellation or amendment of orders placed by the Participant before the Participant possessed inside information. Furthermore, the Participant could be prohibited from (i) disclosing the inside information to any third party (other than on a “need to know” basis) and (ii) “tipping” third parties or causing them otherwise to buy or sell securities. Note that third parties include fellow employees. Any restrictions under these laws or regulations are separate from and in addition to any restrictions that may be imposed under any applicable Company insider trading policy. The Participant acknowledges that it is his or her responsibility to be informed of and compliant with such regulations, and the Participant should speak to his or her personal legal advisor on this matter.

4.22Language. If the Participant has received this Agreement or any other document related to the Plan translated into a language other than English and if the meaning of the translated version is different than the English version, the English version will control.

4.23Imposition of Other Requirements. The Company reserves the right to impose other requirements on the Participant’s participation in the Plan, on the RSUs and on any Shares acquired under the Plan, to the extent the Company determines it is necessary or advisable for legal or administrative reasons, and to require the Participant to sign any additional agreements or undertakings that may be necessary to accomplish the foregoing.