Immuta

Attribute-based access control and masking applied inside Snowflake, Databricks and BigQuery

As of 31 August 2026, Immuta's pricing is not published; the vendor quotes on request. Immuta replaces thousands of hand-maintained database roles with policies written once and enforced natively by the warehouse. Softwr lists it under Databases. Immuta is available on Web, API, Cloud.

Visit siteVisit Immuta

Overview

What Immuta does

Immuta is a data access governance platform for cloud data platforms. Instead of granting access through per-table roles, teams write policies in plain terms, such as analysts may see transaction data with account numbers masked unless they are in the fraud team, and Immuta compiles those into native controls enforced by Snowflake, Databricks, BigQuery, Starburst and similar engines. It handles dynamic masking, row-level filtering, purpose-based access, tag-driven policy and audit logging of who queried what. The commercial argument is role explosion. A data platform with many tables, many teams and several regulatory constraints ends up with tens of thousands of roles and grants that no one can reason about, and the practical outcome is that access reviews become guesswork and sensitive columns end up broadly readable because tightening them would break something. Attribute-based policy collapses that into a small number of readable rules. Because enforcement happens natively in the warehouse rather than through a proxy, query performance is not mediated by Immuta and users keep their existing tools, which is the technical detail that separates it from proxy-based competitors that sit in the query path. What vendor pages do not say is the price floor. Market data puts mid-market deployments at roughly one hundred to two hundred thousand US dollars a year, with large enterprise deployments above five hundred thousand depending on platforms, users and policy count. That makes Immuta a purchase for organisations with a real regulatory driver, typically financial services, healthcare or government, rather than a data team that would simply prefer tidier permissions. Immuta remains independently owned, which is worth noting in a category where several rivals have been absorbed.

What people use it for

A bank whose Snowflake estate has grown to tens of thousands of roles that no one can review before an audit
A healthcare analytics team that must let researchers query patient data with identifiers masked unless a specific purpose is recorded
A multinational applying different residency and access rules per jurisdiction to the same tables without duplicating datasets
An organisation running both Snowflake and Databricks that wants one policy set rather than two divergent implementations

Where it falls short

Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Immuta.

Contracts commonly start around one hundred to two hundred thousand US dollars a year for mid-market deployments and exceed five hundred thousand at enterprise scale, which excludes most data teams without a regulatory mandate.
Policy is only as good as the data classification underneath it, so an organisation with poorly tagged columns will spend months on classification before Immuta enforces anything useful.
Native enforcement means capability varies by platform, and a feature available on Snowflake may be absent or behave differently on BigQuery, which undermines the promise of one policy set everywhere.
Adding an access governance layer creates a new dependency in the path to data: a misconfigured policy silently returns fewer rows rather than erroring, and analysts can act on incomplete results without noticing.
It governs cloud data platforms, so personal data in operational databases, files and SaaS applications sits outside its scope and needs separate controls, meaning Immuta is rarely the whole answer.

Cross-shopped

What people choose instead of Immuta

Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.

Immutavs
Snowflake
Snowflake: If your estate is a single warehouse and its own masking and row access policies are sufficient
Immutavs
Databricks
Databricks: If Unity Catalog governance covers your needs and you do not have multi-platform policy requirements
Immutavs
SailPoint
SailPoint: If your problem is enterprise identity and entitlement review rather than fine-grained data policy

Pricing

What Immuta costs

Taken from the vendor's own pricing page. Prices move, so check before you buy.

Immuta Platform

On request

Attribute-based policy authoring
Native enforcement in supported data platforms
Dynamic masking and row-level security
Audit logging and monitoring
Quoted by platforms, users and policy scope

Capabilities

Features

Attribute-based policy
Access rules written against user and data attributes rather than per-table roles
Native enforcement
Compiles policies into the warehouse's own controls rather than proxying queries
Dynamic masking
Redacts, hashes or generalises column values by user context at query time
Row-level filtering
Restricts which rows a user sees based on attributes and purpose
Purpose-based access
Grants access tied to a declared and recorded analytical purpose
Sensitive data tagging
Classifies columns and drives policy from tags rather than table names
Audit logging
Records queries against sensitive data for regulatory review
Multi-platform
One policy set applied across Snowflake, Databricks, BigQuery and Starburst

Answered, with sources

Questions people ask

Each answer names the page it came from, so you can check it rather than take our word for it.

Does Immuta sit in the query path?

No. It compiles policies into the data platform's own native controls, so queries run at normal speed through your existing tools.

What does it cost?

Not published. Market data suggests roughly 100,000 to 200,000 US dollars a year for mid-market deployments and considerably more at enterprise scale.

Is Immuta still independent?

Yes. It remains independently owned, unlike several competitors in data access governance that have been acquired.

Does it work across more than one warehouse?

Yes, one policy set can target Snowflake, Databricks, BigQuery and Starburst, though enforcement capability varies by platform.

Keep looking

Where to go from Immuta

Best Databases software for

Compare Immuta with

Other Databases software

Privacera
Centralised data access governance from the creators of Apache Ranger, now rebranding as Trust3 AI
Pricing on request13 researched notes
BigQuery
Google Cloud's serverless analytical warehouse, billed either by bytes scanned per query or by reserved compute slots.
Free plan13 researched notes
Teradata
Long-established enterprise MPP data warehouse, rebranded in 2026 as the Autonomous Knowledge Platform, sold for cloud, on-premises and hybrid.
Pricing on request14 researched notes
Dgraph
Apache 2.0 distributed graph database written in Go, maintained by Hypermode, queried through GraphQL or its own DQL language.
Free plan14 researched notes
Knack
Hosted no-code database and web app builder priced by stored records and storage, with unlimited user accounts on every plan.
From $59/mo14 researched notes
Elasticsearch
The heart of the Elastic Stack for search and analytics
Free, then $16.4/mo11 researched notes
Apache Druid
Real-time analytics database for sub-second OLAP queries
Free plan10 researched notes
DuckDB
MIT-licensed analytical SQL database that runs inside your process, with no server, no dependencies and one writer at a time.
Free plan14 researched notes
DynamoDB
AWS-only managed key-value and document database with fixed per-partition throughput limits and no ad hoc queries.
Free, then $0.625/million writes14 researched notes
Oracle Database
The world's most complete, reliable, and secure database
Free, then $47,500/processor10 researched notes
CosmosDB
Globally distributed, multi-model database service from Azure
Free plan14 researched notes
DataStax
The real-time data company for AI applications
Free plan10 researched notes
dbt
SQL transformation framework enabling analytics engineers to version, test and deploy models
Free plan12 researched notes
EMQX
Erlang MQTT broker for large IoT fleets, relicensed to BSL with production free use limited to one node
Free, then $234/mo12 researched notes
FaunaDB
Document-relational database whose hosted service closed in 2025 and whose core is now unmaintained Apache 2.0 code.
Free plan14 researched notes
Firebase Realtime Database
Store and sync data in real-time across all clients
Free plan12 researched notes
Cassandra
Manage massive amounts of data with linear scalability
Free plan15 researched notes
Amazon Redshift
Fast, scalable cloud data warehouse from AWS
Free plan12 researched notes

Softwr does not host reviews and shows no star rating for Immuta, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.

Best Databases software alternatives

View all Databases software