Thursday Jun 4
PRODUCTOther

Snowflake Claims the Agent Control Plane

4JUN
SNOWFLAKEACCESS

Snowflake just bought the access layer for AI agents. The Natoma acquisition gives every enterprise agent identity, governance, and audit — the controls security teams demand before letting AI touch real systems.

Three things enterprises need before deploying agents: who is the agent allowed to be, what can it touch, what did it touch. Natoma answers all three.

Snowflake already owns the data layer. Now it owns the agent-permission layer above it.

Same playbook Okta + ServiceNow + Splunk ran for human users. Done for agents.

full brief & sources

⚡ Why this matters

  • First major data-platform acquisition of an AI-agent identity company. Sets the M&A template.
  • Closes the #1 enterprise objection to agent deployment: 'we don't know what it can touch.'
  • Locks Snowflake customers into the Snowflake agent stack — competitors must now match or build.

🔍 What happened

  • Snowflake announced the Natoma acquisition at Snowflake Summit on June 2-3.
  • Natoma provides three things: identity (who is this agent), governance (what is it allowed to do), audit (what did it do).
  • Integration target: ship as a native feature in Snowflake's agent platform by Q4.
  • Pricing: bundled with existing Snowflake enterprise tiers.

💬 Smart takes

  • Sridhar Ramaswamy (Snowflake CEO): framed Natoma as 'the missing control plane' for enterprise agents.
  • Skeptic: Natoma is a young startup with limited deployment scale — Snowflake will need 12+ months to integrate at Fortune 500 production grade.

🧭 Where this goes

  1. LikelyDatabricks, AWS, and GCP announce competing agent control-plane plays within 90 days.
  2. Likely'agent identity + audit' becomes a standard enterprise procurement requirement by Q4.
  3. Possiblea wave of acquisitions hits the agent-permission startup category (3-5 deals).
  4. Wild CardMicrosoft folds agent control into Entra and undercuts the standalone vendors entirely.

🥄 The Spoon Take

AI security used to mean 'prompt injection.' Now it means 'who is this agent and what was it allowed to do.' Snowflake just bought the answer. Every other cloud will need a Natoma — expect Databricks, AWS, and GCP to acquire-or-build within 90 days.

🤔 Pushback

Natoma is a young company with limited production scale — Snowflake announcing it is one thing, shipping it into Fortune 500 production is another.

·Snowflake - Natoma acquisition announcement·Futurum Group - Agent control plane analysis·Zawya - Summit announcement coverage