- \n
- A Centralized AI Gateway for Every Agent: <\/b>Snowflake\u2019s new Cortex AI Gateway acts as the connective layer for all trusted agent activity, enabling governed agent interoperability, while giving enterprises visibility and control over AI consumption costs\n<\/li>\n
- Secure Third-Party Agent Access: <\/b>Snowflake introduces the first wave of integrations with 1Password, Aembit, Linx Security, Okta, SailPoint, and Saviynt that help organizations consistently govern and audit agents across platforms\n<\/li>\n
- Built-in AI Security for the Agentic Era: <\/b>BlackRock and Thomson Reuters enhance their security with Snowflake\u2019s zero-trust principles for the agentic enterprise\n<\/li>\n<\/ul>\n
No-Headquarters\/BOZEMAN, Mont.–(BUSINESS WIRE<\/a>)–Snowflake<\/a> (NYSE: SNOW), the AI Data Cloud company, today introduced Cortex AI Gateway<\/b><\/a>2<\/sup> and several AI security innovations that establish the foundation for trusted agent interoperability, enabling organizations to securely scale their agentic enterprises.Cortex AI Gateway addresses two of the biggest barriers to enterprise AI adoption today by helping organizations secure AI agents, while providing centralized visibility and control over AI consumption costs.<\/p>\n
This press release features multimedia. View the full release here: https:\/\/www.businesswire.com\/news\/home\/20260728681656\/en\/<\/a><\/p>\n
![\"Snowflake](\"https:\/\/mms.businesswire.com\/media\/20260728681656\/en\/2861239\/4\/Snowflake_Advances_the_Trusted_Agentic_Enterprise_Era_with_Unified_Monitoring_and_Cost_Management.jpg\")
<\/p>\nSnowflake establishes the foundation for trusted agent interoperability with new AI security innovations<\/p>\n<\/div>\n
\nAs AI agents increasingly collaborate across enterprise data, apps, and platforms, they introduce unprecedented security and governance risks, while driving growing AI consumption across models and workloads. Traditional security architectures were not designed for this level of cross-system agent activity, and organizations often lack a centralized way to govern AI usage. This requires a new security and cost model where trust enables interoperability across every AI interaction. Today, Snowflake is solidifying the foundation for a secure agent ecosystem where agents can interoperate across the enterprise with the trust, visibility, control, and cost oversight businesses need.<\/p>\n
\nSnowflake is unveiling Cortex AI Gateway, a major advancement that enables enterprises to securely control, orchestrate, and govern both first-party AI agents built within Snowflake, such as Snowflake CoWork<\/a> and Snowflake CoCo<\/a>, and third-party AI agents developed on external platforms such as Claude Code<\/b> and Cursor<\/b>. Cortex AI Gateway gives enterprises a unified foundation to govern how agents access models, tools, MCP servers, and enterprise systems; intelligently route agent requests; and optimize AI consumption across models and workloads. As a result, teams gain greater visibility and control across AI access, agent activity, and token usage to help prevent runaway AI costs.<\/p>\n
\nCortex AI Gateway builds on Snowflake\u2019s acquisition of Natoma<\/a> (May 2026), bringing Natoma’s enterprise MCP platform capabilities directly into the Snowflake platform for secure, enterprise-grade agent interoperability. Snowflake also announced new secure third-party agent access integrations4<\/sup> with Aembit<\/b>, 1Password<\/b>, Linx Security<\/b>, Okta<\/b>, SailPoint<\/b>,and Saviynt<\/b>, setting a new standard for how enterprises govern and audit AI agents across the security ecosystem.<\/p>\n
\n\u201cEnterprise AI is moving from data interoperability to agent interoperability, and security has to be at the center of that shift,\u201d said Mayank Upadhyay, Chief Security and Trust Officer, Snowflake. \u201cAgent interoperability only works when enterprises can trust how agents from different platforms access data, invoke tools, and take action on behalf of users. Snowflake provides the visibility, governance, and control capabilities needed to make that interoperability secure for production AI. The future of the agentic enterprise will not be built in closed agent ecosystems, and Snowflake is the trusted control plane that enables secure enterprise work.\u201d<\/p>\n
Powering the Centralized AI Gateway for the Agentic Enterprise<\/b><\/p>\n
\nFor AI agents to deliver real business value, they need secure access to the models, data, applications, and tools that provide the full context of the enterprise. Today, those resources are fragmented across systems and providers, forcing teams to build and maintain custom connections while managing access, activity, and costs through disconnected controls.<\/p>\n
\nCortex AI Gateway advances Snowflake\u2019s role as a secure AI interoperability layer for the agentic enterprise by establishing the gateway that helps enterprises centrally govern how AI agents access and use models, data, applications, and tools. For organizations like Meltwater<\/b>, Cortex AI Gateway offers a path to make agents more useful, observable, and production-ready.<\/p>\n
\n\u201cAt Meltwater, we help organizations make sense of fast-moving external data and turn insights into action. As AI becomes more embedded in that work, security and trust are critical to delivering value,\u201d said Chief Technology Officer, Aditya Jami, Meltwater<\/b>. \u201cWe see Cortex AI Gateway as a step towards ensuring our agents can securely connect to the right data and tools, helping us deliver trusted AI-powered insights faster while maintaining the security and control our customers expect.\u201d<\/p>\n
\nCortex AI Gateway enables enterprises to:<\/p>\n
- \n
- Govern Every Agent Connection:<\/b> Enterprises need a consistent way to control which models, data, applications, MCP servers, and tools each agent can access. With support for more than 100 MCP servers, Cortex AI Gateway centralizes agent access policies, authentication, permissions, and controls.\n<\/li>\n
- See and Understand Every Agent Action: <\/b>As agents take action across enterprise systems, organizations need visibility into what each agent did, which systems and tools it accessed, and the sequence of steps it took. Cortex AI Gateway provides a centralized, end-to-end record of agent activity, giving teams the visibility needed to operate agents safely at scale.\n<\/li>\n
- Keep AI Consumption Costs Under Control:<\/b> Fragmented AI usage across models, teams, and workloads makes AI consumption costs difficult to track and control. Cortex AI Gateway gives IT and finance teams a unified view of AI consumption, attributes costs to the teams, agents, or workloads driving them, and enforces spending limits to help prevent runaway costs before they occur.\n<\/li>\n
- Optimize Model Selection and Performance:<\/b> Enterprises need the flexibility to use multiple models while ensuring each request is routed to the right model for the task. Cortex AI Gateway intelligently routes requests to enterprise-approved models, optimizing quality, cost, latency, and availability while maintaining centralized governance.\n<\/li>\n<\/ul>\n
Advancing Secure Third-Party Agent Access with Ecosystem Partners<\/b><\/p>\n
\nFor AI agents to deliver meaningful impact, they need to work securely across platforms. Yet many vendors still default to closed ecosystems, making it difficult for third-party agents to operate across organizational boundaries. Security is the key to unlocking that interoperability by establishing the trust, identity, and access controls agents need to work safely across platforms.<\/p>\n
\nSnowflake is laying the foundation for secure third-party agent access across the security ecosystem, with the first wave of integrations from leading security vendors including 1Password<\/b>, Aembit<\/b>, Linx Security<\/b>, Okta<\/b>, SailPoint<\/b>,and Saviynt.<\/b><\/p>\n
\nTo enable enterprises to deploy third-party agents with consistent security and control, these integrations are designed to:<\/p>\n
- \n
- Make Third-Party Agents Governable:<\/b> Enterprises can now move beyond the blind spot of agents acting under broad user credentials. With the new integrations, security teams have a clearer view into which agent accessed what data, through which platform, and under whose authority.\n<\/li>\n
- Enable Task-Scoped Agent Access:<\/b> Third-party agents should not inherit every permission a user has just because they are acting on the user\u2019s behalf. Snowflake\u2019s approach limits agent access to only what the task requires, creating a safer model for using agents across an enterprise\u2019s data ecosystem.\n<\/li>\n
- Extend Consistent Governance Across Agent Ecosystems:<\/b> These integrations represent an important milestone for the security industry by helping unlock a pathway toward secure cross-platform agent interoperability.\n<\/li>\n<\/ul>\n
Expanding AI Security for the Agentic Era<\/b><\/p>\n
\nSnowflake is advancing enterprise security foundations across the areas that matter most for production-ready AI. This includes new advancements that enable security teams to better understand their AI risk posture1<\/sup>, provide agents with a verified identity1<\/sup>, protect sensitive data from improper use1<\/sup>, apply more context-aware controls3<\/sup>, and limit agent sessions to the scope required for the task3<\/sup>. By bringing zero-trust security to the agentic enterprise, Snowflake is helping enterprises like BlackRock<\/b> and Thomson Reuters<\/b> strengthen security, visibility, and control as they scale AI.<\/p>\n
\n\u201cAt Thomson Reuters, building trusted AI for professionals requires strong security, governance, and visibility into how AI systems access data, use tools, and take action,\u201d said Caitlin Halferty, Head of Data & Analytics, Thomson Reuters<\/b>. \u201cAs AI becomes more deeply embedded in professional workflows, organizations need the ability to protect sensitive information and maintain clear controls without limiting innovation. Snowflake\u2019s continued investment in AI security and governance supports the kind of trusted foundation enterprises need as they move agentic AI into production.\u201d<\/p>\n
Ecosystem Comments on the News<\/b><\/p>\n
\n\u201cAI agents are moving from assisting people to acting on their behalf across critical enterprise systems. The hard problem is no longer whether an agent can do useful work; it\u2019s knowing which agent is acting, who authorized it, and what it is allowed to access,\u201d said Nancy Wang, Chief Technology Officer, 1Password<\/b>. \u201cOur work with Snowflake is designed to give third-party agents short-lived, task-scoped access with clear human-to-agent attribution, so enterprises can move agents into production without giving them standing access to sensitive data.\u201d<\/p>\n
\n\u201cAI agents are becoming active participants in enterprise systems, but securing them requires a fundamentally different approach than managing human access,\u201d said David Goldschlag, CEO and Co-Founder, Aembit<\/b>. \u201cThrough our work with Snowflake, we\u2019re helping enterprises give third-party agents trusted, policy-based access to the resources they need, without relying on long-lived credentials, so they can reduce risk while enabling agents to operate securely at machine speed.\u201d<\/p>\n
\n\u201cAI agents are introducing an entirely new class of identities into the enterprise that operate continuously, move across systems, and act on behalf of users,\u201d said Niv Goldenberg, CPO and Co-Founder, Linx Security<\/b>. \u201cTogether with Snowflake, Linx is helping organizations build a more complete picture of those agent identities and the access patterns around them, so security teams can identify risk earlier and govern agent activity without slowing innovation.\u201d<\/p>\n
\n\u201cOne of the biggest gaps in building a secure agentic enterprise is not knowing what your agents can connect to or what they\u2019re allowed to do with that access,\u201d said Ely Kahn, Chief Product Officer, Okta<\/b>. \u201cThrough our work with Snowflake and our broader effort to advance Cross App Access as an open protocol for secure AI agent connections, our joint customers can bring third-party AI agents within the identity perimeter. Together, we\u2019re helping ensure agents can operate within centralized identity policy, where every action is logged, and access is tightly scoped, before unlocking valuable enterprise data in Snowflake.\u201d<\/p>\n
\n\u201cAgentic AI creates a major opportunity for productivity, but enterprises need trust, visibility, governance, and protection before they can capture that value at scale,\u201d said Chandra Gnanasambandam, EVP of Product and Chief Technology Officer, SailPoint<\/b>. \u201cThrough our integration with Snowflake, SailPoint helps organizations govern third-party agent access, giving them the visibility, accountability, and control needed to move agents into production with confidence.\u201d<\/p>\n
\n\u201cTraditional identity security models were built for human users, not AI agents, creating a critical gap in enterprise security,\u201d said Akhil Kapoor, Senior Vice President, Business Development, Saviynt<\/b>. \u201cOur integration with Snowflake addresses this challenge through Saviynt\u2019s Access Gateway, which evaluates agent intent, context, permissions, and risk at runtime to ensure AI agents are only authorized to perform the actions required for a specific task. It prevents privilege misuse and anomalous activity before it can impact the business.\u201d<\/p>\n
Learn More:<\/b><\/p>\n
- \n
- \nSee how Snowflake\u2019s AI security innovations are securing and governing AI at scale in this blog post<\/a>.<\/p>\n<\/li>\n
- \nStay on top of the latest news and announcements from Snowflake on LinkedIn<\/a> and X<\/a>.<\/p>\n<\/li>\n<\/ul>\n
1<\/sup> Snowflake product is now generally available.
\n
<\/b>2<\/sup> Snowflake product will be public preview soon.
\n
<\/b>3<\/sup> Snowflake product is now in private preview.
\n
<\/b>4<\/sup> 1Password, Aembit, Linx Security, SailPoint, and Saviynt integrations will be private preview soon<\/b>; Okta integration is currently planned for private preview in Q4 2026<\/b>.<\/p>\nAbout Snowflake<\/b><\/p>\n
\nSnowflake is the platform for the AI era, making it easy for enterprises to innovate faster and get more value from data. More than 13,900 customers around the globe, including hundreds of the world\u2019s largest companies, use Snowflake\u2019s AI Data Cloud to build, use and share data, applications and AI. With Snowflake, data and AI are transformative for everyone. Learn more at snowflake.com<\/a> (NYSE: SNOW).<\/p>\n
Forward\u2011Looking Statements<\/b><\/p>\n
\nThis press release contains express and implied forward-looking statements, including statements regarding (i) our future operating results, targets, or financial position; (ii) our business strategy, plans, opportunities, or priorities; (iii) the release, adoption, and use of our new or enhanced products, services, and technology offerings, including those that are under development or not generally available; (iv) market size and growth, trends, and competitive considerations; (v) our vision, strategy and expected benefits relating to artificial intelligence (AI), the enterprise AI revolution, Snowflake Cortex AI, Snowpark, Snowflake Marketplace, the AI Data Cloud, and AI Data Clouds for specific industries or product categories, including the expected benefits and network effects of the AI Data Cloud; and (vi) the integration, interoperability, and availability of our products, services, and technology offerings with and on third-party products and platforms, including public cloud platforms and AI models. These forward-looking statements are subject to a number of risks, uncertainties and assumptions, including those described under the heading \u201cRisk Factors\u201d and elsewhere in the Quarterly Reports on Form 10-Q and the Annual Reports on Form 10-K that Snowflake files with the Securities and Exchange Commission. In light of these risks, uncertainties, and assumptions, actual results could differ materially and adversely from those anticipated or implied in the forward-looking statements. As a result, you should not rely on any forward-looking statements as predictions of future events.<\/p>\n
\n\u00a9 2026 Snowflake Inc. All rights reserved. Snowflake, the Snowflake logo, and all other Snowflake product, feature and service names mentioned herein are registered trademarks or trademarks of Snowflake Inc. in the United States and other countries. All other brand names or logos mentioned or used herein are for identification purposes only and may be the trademarks of their respective holder(s). Snowflake may not be associated with, or be sponsored or endorsed by, any such holder(s).<\/p>\n
<\/p>\n
View source version on businesswire.com: <\/span>https:\/\/www.businesswire.com\/news\/home\/20260728681656\/en\/<\/a><\/span><\/p>\n
Media Contacts:
\n<\/b>
Sandya Kola
\n
Product PR Specialist, Snowflake
\n
press@snowflake.com
\n<\/a>
Source: Snowflake Inc.<\/p>\nKEYWORDS:<\/b> Montana United States North America Canada<\/p>\n
INDUSTRY KEYWORDS:<\/b> Data Management Security Apps\/Applications Technology Software Artificial Intelligence<\/p>\n
- \nStay on top of the latest news and announcements from Snowflake on LinkedIn<\/a> and X<\/a>.<\/p>\n<\/li>\n<\/ul>\n
- Enable Task-Scoped Agent Access:<\/b> Third-party agents should not inherit every permission a user has just because they are acting on the user\u2019s behalf. Snowflake\u2019s approach limits agent access to only what the task requires, creating a safer model for using agents across an enterprise\u2019s data ecosystem.\n<\/li>\n
- See and Understand Every Agent Action: <\/b>As agents take action across enterprise systems, organizations need visibility into what each agent did, which systems and tools it accessed, and the sequence of steps it took. Cortex AI Gateway provides a centralized, end-to-end record of agent activity, giving teams the visibility needed to operate agents safely at scale.\n<\/li>\n
- Secure Third-Party Agent Access: <\/b>Snowflake introduces the first wave of integrations with 1Password, Aembit, Linx Security, Okta, SailPoint, and Saviynt that help organizations consistently govern and audit agents across platforms\n<\/li>\n
![\"Photo\"](\"https:\/\/mms.businesswire.com\/media\/20260728681656\/en\/2861239\/3\/Snowflake_Advances_the_Trusted_Agentic_Enterprise_Era_with_Unified_Monitoring_and_Cost_Management.jpg\")
<\/td>\n<\/tr>\n![\"Logo\"](\"https:\/\/mms.businesswire.com\/media\/20260728681656\/en\/798477\/3\/HI_RES_Snowflake_Logo_Blue_1800x550.jpg\"){kind=logo}
<\/td>\n<\/tr>\n