Snowflake has agreed to acquire Natoma, a startup focused on securing how AI agents connect to enterprise applications, databases, APIs, and internal tools. Terms were not disclosed. The target gives Snowflake a missing control layer as customers move from AI copilots that answer questions to agents that can take actions inside corporate systems.
That distinction matters. Snowflake already governs data access well inside its own platform. What it has lacked is a native way to manage what happens when an AI agent reaches beyond the data warehouse into Slack, Jira, CRM systems, internal APIs, cloud environments, and on-prem infrastructure. Natoma’s Model Context Protocol platform addresses that gap with identity-aware authorization, policy enforcement, and auditability for agent activity.
Snowflake is trying to become the operating control plane for enterprise AI, not just the place where data sits. Buying Natoma suggests management sees governance as the bottleneck to wider AI deployment. Enterprises are not hesitating because models are unavailable. They are hesitating because autonomous software introduces a new attack surface, raises exfiltration risk, and blurs accountability when an agent can trigger workflows across multiple systems.
The acquisition also has a defensive edge. Cloud data platforms are under pressure to prove they can capture more of the AI stack before customers stitch together separate security, orchestration, and agent-management vendors. If Snowflake can embed secure connectivity directly into Cortex Agents, Snowflake Intelligence, and Cortex Code, it increases switching costs and makes its platform harder to displace with a modular rival architecture.
Acquire.fyi data shows technology M&A volume is down 10.7% year to date, while median deal size has jumped 58.8%, a sign that buyers are becoming more selective and paying up for assets that solve immediate platform gaps. Natoma fits that pattern. This is not a scale acquisition. It is infrastructure insurance.
Integration risk remains. Security products often lose value if folded too tightly into a broader platform or if customers fear vendor lock-in. But Snowflake is making a calculated bet that enterprises will accept tighter coupling in exchange for one thing the current agent market still struggles to offer: clear control over what AI is allowed to do.
Source: Company press release and Acquire.fyi's proprietary data
