All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Unity Catalog is Databricks' product for governing access to data, AI models, and AI agents' tools on its platform. In workspaces where it is enabled, it checks permissions when someone queries a table or calls a model, and logs that activity for audit. Databricks includes it in its Premium and Enterprise plans with no separate license. Databricks, founded in 2013, said it closed a $5 billion funding round in August 2026. It reports more than 14,000 organizations governing data and AI on the catalog, including Block, PepsiCo, FedEx, and the FDA. Databricks ships prompt-injection guardrails in a second product, Unity Gateway, so a buyer wanting them would use both. Governance vendor Immuta applies customer access rules as native Unity Catalog controls, so the catalog still enforces them.
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Databricks pitches Unity Catalog to organizations that want one access-policy model, lineage, and audit across their data, models, and agent tools. Block's customer story ties that need to GDPR and CCPA compliance for personal data. The cited sources include no independent sizing of the pain. [s1, s2, s8] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 4/5 | The documentation details privileges on securable objects, attribute-based policies on governed tags, row filters and column masks, an audit log system table, and registered models governed as FUNCTION objects. Databricks publishes an open-source Unity Catalog server under the Apache 2.0 license, and Immuta and Collibra each publish integrations built on the catalog. Snowflake's comparison page says the open-source release is a subset of the managed product, and no independent benchmark of the capability is in the record. [s2, s3, s4, s12, s10, s22, s15] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | Databricks frames the timing around AI agents acting on enterprise data, and in June 2026 it announced Unity Gateway, built on the catalog, to govern external models, MCP services, agents, and skills alongside data. Databricks reports adoption by more than 14,000 organizations and an IDC Leader placement in AI governance. The cited sources include no independent confirmation of those claims. [s7, s19] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Databricks says it was founded by the original creators of Apache Spark, Delta Lake, MLflow and Unity Catalog, and its June 2026 announcement credits the Unity Catalog product and engineering team with releasing the catalog five years earlier. The open source Unity Catalog project, with its API specification under the Apache 2.0 license, makes that build concrete. These are Databricks' own sources, so they show relevant build experience without the independent, multiply evidenced recognition rung 4 needs. [s6, s7, s12] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 | Databricks publishes line-specific customer accounts. Block adopted Unity Catalog for centralized governance, PepsiCo calls it an integral part of its data foundation, and BP adopted it for enterprise-wide governance. Databricks also says more than 14,000 organizations govern their data and AI on Unity Catalog. Each of these is Databricks' own published claim, and no independent source corroborates the catalog's traction, so the named references meet rung 3 but not the multiply sourced test of rung 4. [s8, s1, s21, s7] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Databricks ships Unity Catalog features visibly, with attribute-based policies for row filtering and column masking generally available and external lineage reaching assets outside Databricks. Databricks includes the catalog in its Premium and Enterprise tiers without a separate license. The cited sources include no separate revenue or cost figures for the catalog. Databricks' funding and cash-flow figures describe the whole company rather than this line. [s7, s1, s17, s18] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 | Databricks documents Unity Catalog as the unified governance layer for data and AI built into Databricks. Immuta describes it as a unified governance solution for data, analytics and AI, and Snowflake places it as Databricks' governance and catalog layer. The placement is recognizable, but each placement comes from Databricks, a partner or a rival. Rung 4 needs buyers and analysts to place it without vendor explanation, multiply evidenced. [s2, s10, s15] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Unity Catalog enforces access control when a table is queried or a model is called, tracks lineage and logs activity for auditing, and Block's case study credits it with a unified view of its data estate. Immuta reflects its policies as native Unity Catalog controls. Those integrations add real friction to replacement. Snowflake ships a competing built-in catalog on open Apache Iceberg and Polaris APIs, and no independent source shows protection against bundling, so the score is 3. [s2, s8, s10, s15] |
Unity Catalog enforces who can use which data, models, and agent tools inside the Databricks platform, and it records that use. Databricks pitches one policy model across a customer's data estate, enforced through attributes, tags, and automated classification, with lineage and audit over the same objects.
The pain is clearest for regulated buyers. Block's customer story describes a requirement for uniform governance policies that keep personal data compliant with GDPR and CCPA. The FDA, quoted on a Databricks blog, describes standardizing on Unity Catalog within a FedRAMP High environment on AWS GovCloud.
Databricks now applies the catalog to AI assets. External MCP servers register as Unity Catalog securables, and Unity Gateway, which Databricks built on the catalog, governs external models, agents, and skills alongside data with the same access controls, lineage, and auditing. Databricks frames the need around AI agents acting on enterprise data. The cited sources include no independent sizing of the problem. [s1, s2, s8, s24, s7, s5]
Unity Catalog treats every governed asset as a securable object with grants to users, service principals, and groups. When enabled for a workspace, it enforces access control on table queries and model calls, tracks lineage, and logs activity for audit. Access control combines privileges and ownership, attribute-based policies on governed tags, and row filters and column masks, and Databricks recommends the attribute-based route for scale.
Databricks applies that machinery to AI assets. A registered model is a subtype of the FUNCTION securable object, granted with GRANT ON FUNCTION, and carries the same access control, auditing, and lineage as data. For agents, Unity Gateway controls access to tools and MCP servers, while Unity Catalog enforces the permissions and manages the credentials.
Unity Catalog keeps its records through column-level lineage and an audit log system table. Databricks announced external lineage as generally available in June 2026, extending lineage to assets outside Databricks. Databricks publishes an open-source Unity Catalog server with an OpenAPI specification under the Apache 2.0 license. Snowflake's comparison page notes that it covers a subset of the managed product, so the public code does not show every managed capability. [s2, s4, s3, s5, s1, s7, s12, s15]
Unity Catalog is the built-in catalog of the Databricks platform. Snowflake publishes a comparison that sets its own built-in Horizon catalog against Unity Catalog as the catalog of record. It also warns that Snowflake workloads that depend on Unity Catalog's availability create a cross-platform dependency, an argument aimed at buyers who run both.
Independent governance vendors build on the catalog. Immuta describes its attribute-based policies as running as native Unity Catalog controls. Collibra announced a bi-directional integration with Unity Catalog in June 2026, when Databricks named it Governance Partner of the Year.
Partners add business context on top of Databricks' enforcement. Collibra describes its role as enriching Unity Catalog with data ownership, quality certifications, regulatory classifications, and business definitions that span environments beyond Databricks. [s15, s10, s22]
Unity Catalog reaches customers inside the Databricks platform rather than through a separate sale. Databricks includes it in its Premium and Enterprise tiers with no separate license and enables it automatically in new workspaces. It reports that more than 14,000 organizations govern their data and AI on the catalog.
Databricks publishes catalog-specific customer accounts. Block uses Unity Catalog to centralize access controls across 70 teams, and PepsiCo calls it an integral part of a data foundation holding over 6 petabytes. FedEx, BP, Navy Federal, and Rabobank appear in Databricks' customer use cases for the catalog.
Databricks' own scale is context rather than catalog traction. CNBC reported Databricks' statement that it closed a $5 billion round at a $190 billion valuation in August 2026 and crossed a $7 billion revenue run rate. Those figures, like the more than 20,000 organizations on the platform, describe Databricks as a whole. [s1, s7, s8, s21, s18, s6]
Databricks was founded in 2013 by the original creators of Apache Spark, Delta Lake, MLflow, and Unity Catalog. The company therefore has several named builds in data and AI infrastructure, the catalog among them.
Sources beyond Databricks' own pages document the catalog build. Its open-source server is a sandbox project of the LF AI and Data Foundation, part of the Linux Foundation, and Snowflake's comparison page calls that release Databricks-led.
The cited sources tie the team's record to data infrastructure and governance. They describe no research program on attacks against models or agents connected to this line. [s6, s12, s15]
Regulated buyers use Unity Catalog for compliance work. Block's story describes uniform governance policies for GDPR and CCPA compliance, and Rabobank uses the catalog for an audit-ready data architecture in credit analytics. The FDA describes standardizing on Unity Catalog within a FedRAMP High environment on AWS GovCloud.
Databricks lists Unity Catalog among the products GovCloud customers can use while meeting FedRAMP High and DoD IL5 requirements. The cited sources document no authorization granted to the catalog itself.
The catalog's own access machinery has had a serious flaw. CVE-2026-27478 let an attacker bypass authentication in the open-source Unity Catalog server through version 0.4.0, and the GitHub advisory lists 0.4.1 as the patched version, so teams running that server need the patched release. NVD also lists a server-side request forgery in Azure Databricks that let an unauthorized attacker elevate privileges over a network. That entry concerns the hosted platform, so a buyer's protection depends on platform patching as well as on catalog permissions. [s8, s21, s24, s27, s13, s14, s23]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Snowflake Horizon | competes with | Snowflake publishes a comparison that sets its Horizon catalog against Unity Catalog as the catalog of record. | |
| Collibra | adjacent | Databricks named Collibra its Governance Partner of the Year, and Collibra describes a bi-directional integration with Unity Catalog. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| Immuta | adjacent | Immuta describes its access policies as running as native Unity Catalog controls on the same Databricks workloads. | |
| Alation | adjacent | Snowflake's comparison page groups Alation with Collibra as business and governance catalogs, a layer apart from operational catalogs such as Unity Catalog. | N/AWe scored these companies at different scopes, so the totals measure different things. |
Add analyzed competitors to compare them side by side with Unity Catalog.
A closer look at this line's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
When a customer enables it for a workspace, Unity Catalog checks permissions on each table query and model call, and agents reach tools and data through the credentials it manages. Partners such as Immuta and Collibra build their own controls on top of the catalog. A customer that leaves would rebuild its grants, tags, policies, and lineage elsewhere. Databricks does not document the size of that rebuild. It describes no data asset that it retains behind the product. Block uses the catalog for GDPR and CCPA compliance, and the FDA uses it on Databricks on AWS GovCloud, a FedRAMP High environment. For buyers like these, a replacement would have to take over the permission checks on every governed query and, in GovCloud deployments, run inside that FedRAMP High environment.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Customers' own teams run Unity Catalog's grants, policies, lineage, and audit over their data and AI assets, and Databricks includes the software in its Premium and Enterprise tiers rather than selling a managed outcome. The customer's team operates the product and owns the outcomes, the software level of this dimension. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Leaving Unity Catalog means rebuilding grants, attribute-based policies, governed tags, and lineage. Agents reach tools at runtime through the permissions and credentials the catalog manages, Collibra integrates with it in both directions, and Snowflake warns of a cross-platform dependency on its availability. The cited sources do not quantify the migration's cost or duration. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Databricks says customers on AWS GovCloud can use products including Unity Catalog while meeting FedRAMP High and DoD IL5 requirements. A testimonial on Databricks' blog describes the FDA standardizing on Unity Catalog within that FedRAMP High foundation. Replacing the catalog in those deployments would need validation inside an authorized environment, the rung-2 treatment of FedRAMP-class requirements. Both sources are Databricks-hosted, and no mandate specific to the catalog is shown, so it stays below rung 3. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | When enabled, Unity Catalog enforces access control at the moment of each table query or model call, evaluates attribute-based policies on governed tags, and tracks column-level lineage across data and AI assets. That is real-time policy enforcement and lineage across a whole data estate, the real-time systems work the top level names. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Regulated and government buyers use the catalog itself. Block, a financial services company, adopted Unity Catalog to keep personal data compliant with GDPR and CCPA. Rabobank and Navy Federal use it in their data architectures. The FDA describes standardizing on it in a FedRAMP High environment. Databricks pitches the catalog for regulatory and compliance requirements. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 | When enabled for a workspace, Unity Catalog enforces access control each time a user queries a table or calls a model, and agents reach tools and data only through the permissions and credentials it manages. Those requests proceed only once the catalog authorizes them, so applications on Databricks depend on it as infrastructure, and Snowflake warns of the dependency on its availability. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The cited documentation describes lineage, tags, and audit records about each customer's own estate and documents no Databricks-retained corpus built from them. A granted Databricks patent on data lineage tracking is on record, but the captured patent page does not mention Unity Catalog, so the cited sources do not connect that patent to this line. The open-source server is public under Apache 2.0, so its code is available to rivals as well as customers. |
Databricks sells Unity Catalog to organizations that run data and AI on its platform, inside the Premium and Enterprise tiers rather than as a separate product. Databricks reports that more than 14,000 organizations govern their data and AI on the catalog. It reports more than 20,000 organizations on the platform as a whole.
Regulated industries are a named segment. Databricks pitches the catalog for regulatory and compliance requirements, and its catalog accounts include Block's GDPR and CCPA work, Rabobank's credit analytics, and Navy Federal. Government buyers reach it through Databricks on AWS GovCloud, where the FDA describes standardizing on Unity Catalog.
The cited documentation centers data-governance and platform workflows. It describes no separate AI-security buyer for the catalog.
Unity Catalog models every governed asset as a securable object, from tables and volumes to functions, registered models, and model and MCP services. When enabled for a workspace, it enforces access control on table queries and model calls, tracks lineage, and logs activity for audit. Databricks recommends attribute-based policies on governed tags to scale that control.
The advantage for AI assets is one governance model shared with data. A registered model is a FUNCTION securable granted with GRANT ON FUNCTION, and external MCP servers register as Unity Catalog securables. Agents reach tools and data only through the permissions and credentials the catalog manages.
Databricks ships its prompt-injection and PII guardrails in Unity Gateway, a separate product built on the catalog. The catalog's own documented controls are permissions, policies, lineage, and audit, so a buyer that wants those guardrails would also need Unity Gateway.
Unity Catalog reaches customers inside the Databricks platform rather than through a separate sale. Databricks includes it in the Premium and Enterprise tiers and enables it automatically in new workspaces, so customers adopt it as they use the platform.
Databricks publishes catalog-specific customer accounts. Block uses Unity Catalog to centralize access controls across 70 teams, PepsiCo calls it an integral part of its data foundation, and FedEx, BP, Navy Federal, and Rabobank appear among Databricks' catalog use cases. Databricks reports more than 14,000 organizations on the catalog. These figures and accounts are Databricks' own publications.
Partners extend the motion. Immuta announced general availability of a native Unity Catalog integration, and Collibra announced a bi-directional integration in June 2026 when Databricks named it Governance Partner of the Year.
Databricks does not sell Unity Catalog separately. Its product page says no separate license is required and that the catalog is included with the Premium and Enterprise tiers, where customers pay for the compute and storage they use.
Databricks therefore earns from the catalog through platform consumption, and the cited pages list no catalog-specific price or meter. A buyer gets governance as part of the platform. The cited sources include no figure for the line's own revenue, so a reader cannot separate the catalog's commercial results from the platform's.
Unity Catalog runs as a managed layer inside Databricks. Databricks enables it automatically for workspaces created after November 8, 2023, and it directs owners of other workspaces to check whether the catalog is enabled and to configure it.
Operating the catalog means configuring grants, governed tags, attribute-based policies, and row and column controls in Databricks itself. Databricks recommends attribute-based policies as the way to scale that work.
Teams that self-host the open-source server patch it themselves. A team that delayed upgrading past version 0.4.0 would have left its server open to the authentication bypass fixed in 0.4.1.
Regulated buyers use Unity Catalog for compliance work. Block's story describes uniform governance policies for GDPR and CCPA compliance, and Rabobank uses the catalog for an audit-ready data architecture in credit analytics. The FDA describes standardizing on Unity Catalog within a FedRAMP High environment on AWS GovCloud.
Databricks lists Unity Catalog among the products GovCloud customers can use while meeting FedRAMP High and DoD IL5 requirements. The cited sources document no authorization granted to the catalog itself.
The catalog's own access machinery has had a serious flaw. CVE-2026-27478 let an attacker impersonate any user of the open-source Unity Catalog server through version 0.4.0, and the GitHub advisory lists 0.4.1 as the patched version, so teams running that server need the patched release. NVD also lists a server-side request forgery in Azure Databricks that let an unauthorized attacker elevate privileges over a network. That entry concerns the hosted platform, so a buyer's protection depends on platform patching as well as on catalog permissions.
Databricks and its partners build products on Unity Catalog. Databricks built Unity Gateway on it, and Immuta and Collibra integrate their controls and business context with it.
Databricks also publishes an open-source Unity Catalog server under the Apache 2.0 license, hosted as a sandbox project of the LF AI and Data Foundation. Snowflake's comparison page describes that release as Databricks-led and as a subset of the managed product, so the public code covers part of what the managed catalog does.
Snowflake offers the competing built-in catalog, Horizon. Its comparison warns that Snowflake workloads that depend on Unity Catalog's availability create a cross-platform dependency, an argument Snowflake aims at buyers who run both.
Databricks was founded in 2013 by the original creators of Apache Spark, Delta Lake, MLflow, and Unity Catalog. The company therefore has several named builds in data and AI infrastructure, the catalog among them.
Sources beyond Databricks' own pages document the catalog build. Its open-source server is a sandbox project of the LF AI and Data Foundation, part of the Linux Foundation, and Snowflake's comparison page calls that release Databricks-led.
The cited sources tie the team's record to data infrastructure and governance. They describe no research program on attacks against models or agents connected to this line.
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.