Data Classification Tools and Data Classification Software: Sensitive Data Discovery Compared on Verified Pricing

BigID is the strongest option on this page when the honest answer to "where is our regulated data" is that nobody knows. Its differentiator is correlation: rather than only matching a column against a pattern, it links records back to a specific identity across systems, which is what subject-access requests and privacy work actually require. Classification covers structured databases, warehouses, file shares, SaaS and unstructured stores. The trade is weight, because it is a program purchase with a rollout, not something a data team switches on in an afternoon. Its BigID Next listing carries the highest 12-month list price we have found in this category, $175,000.00, and the vendor description attached to that same price reads "Please contact BigID for custom pricing." Both things are true at once. Full table on our BigID comparison.

Varonis answers a question most warehouse-native tools cannot: of the twelve million files, mailboxes and SharePoint sites nobody has audited since 2019, which contain regulated data and who can currently open them. Classification and effective-permissions mapping are welded together, which is the right design for unstructured data, because knowing a file holds Social Security numbers is useless until you know that 4,000 people can read it. It is also the only vendor in this category you can estimate from the bottom up, because its Marketplace listing publishes seventeen separate per-connector unit prices rather than one platform fee. Those prices span a factor of about 97, from $310 to cover a SaaS application to $30,000 to cover Snowflake, which tells you plainly where the vendor thinks the risk sits. Connector by connector in our guide to Varonis pricing.

Purview is the only platform here that publishes exact metered rates you can query from a public API before you ever speak to a salesperson, which matters a lot when you have to build a business case. Sensitivity labels, trainable classifiers and DLP are genuinely strong inside Microsoft 365 and Azure, and they get weaker the further you travel from Redmond. Two traps. The naming is a mess, because three different products have carried the Purview label and the classic Data Catalog is in customer support mode. And the meters are per asset per day, so cost scales with how much you point it at rather than with how many people use it. We break the meters down in our guide to Microsoft Purview pricing.

Cyera is agentless cloud data security posture management: it connects to your cloud accounts, discovers and classifies data at scale, and scores which identity-to-data combinations are dangerous. What makes it unusual on this page has nothing to do with the technology. Cyera is the only vendor in this comparison whose published price states what you get for the money. Its three Marketplace packages name a data volume ceiling, up to 25TB, up to 100TB and up to 250TB, where almost every rival sells an undefined "unit". That single fact makes it the easiest platform here to sanity-check against your own estate before a demo. The limitation is scope: like every DSPM tool it will tell you where the exposure is and will not stop a named analyst from reading a specific column at query time.

Sentra competes directly with Cyera and reaches higher. Its Marketplace listing runs four tiers to $500,000.00 a year, the largest single published figure anywhere in this comparison, which is consistent with a product aimed at estates where the unstructured problem is measured in petabytes. It classifies across cloud object storage, databases, SaaS and on-premises, and its own material emphasizes OCR and clustering for content that regex-era tools simply miss. The caveat is the one Cyera does not have: Sentra prices in gigabytes but its listing never says how many gigabytes any tier includes. The meter is published and the entitlement is not, so the four prices are starting coordinates rather than quotes.

Securiti sells a broad data command center covering discovery, classification, DSPM, privacy operations, consent and, since 2025, AI governance. It is a credible single-vendor answer when your buying committee is led by a privacy office or general counsel rather than a data platform team, because the subject-rights and consent machinery is built in rather than bolted on. It overlaps heavily with BigID and you should expect to see both on the same shortlist. Its AWS Marketplace listing sells a single dimension named Platform Fee at $100,000.00 for 12 months. Note that the dimension is one Unit and the listing does not define what a Unit entitles you to, so the figure is a floor rather than a quote.

Immuta classifies for a specific reason: it wants to enforce a rule on what it finds. Its sensitive data discovery tags warehouse columns, and those tags then drive attribute-based access policy compiled down into the native controls of Snowflake, Databricks, BigQuery and Starburst. If your goal is to mask a column rather than to inventory a file estate, buying a discovery platform and an enforcement platform separately is often the more expensive path. It is a poor fit for unstructured data, where Varonis and BigID are far stronger. Its listing sells 960 Immuta Units for $96,000.00, exactly $100.00 per Unit, and never defines a Unit. See our Immuta comparison.

Collibra approaches classification as one input to a governance program rather than as the product. It will classify, but what you are really buying is the record around it: who approved this classification, against which written policy, reviewed on what date, and the evidence pack an auditor will accept without arguing. That is worth a great deal when a regulator holds a named person in your organization accountable, and close to nothing when a platform engineer just needs to find the PII in a Snowflake schema this week. Its Marketplace listing is $170,000.00 for 12 months, re-verified 1 September 2026 and unchanged. Details on our Collibra comparison.

Netwrix is the pragmatic mid-market answer to the problem Varonis solves at the top of the market. If your sensitive data genuinely lives on Windows file shares and in Microsoft 365 rather than in a warehouse, and your access reviews currently happen in a spreadsheet once a year, it is frequently the correct purchase and materially cheaper than the enterprise DSPM platforms. It is not a warehouse classification engine and does not claim to be. Worth noting for context: Netwrix publishes widely read roundups of data classification tools, and unlike Cyera, Sentra, Securiti, BigID and Varonis it has no transactable AWS Marketplace listing we could find, so we have no verified price to quote for it.

Fortra sits in a different tradition from the cloud scanners. Its Data Classification Suite is built around labels applied at the point of creation, often by the person writing the document, and then enforced downstream by DLP and rights management. That model is still the right answer in defense, government and regulated manufacturing, where the classification of a document depends on context a scanner cannot see and where an auditor expects a human decision on the record. It is the wrong answer if you want an automated inventory of a cloud warehouse with no user involvement. Fortra does not publish a rate card we could verify.

Before you buy anything on this page, check what your warehouse already ships. Snowflake Horizon includes sensitive data classification, tagging, row access policies, dynamic masking and column-level lineage, with lineage requiring Enterprise Edition or higher. Unity Catalog covers tagging, grants, column masks and lineage across workspaces. For a single-platform estate with a manageable number of classifications, that is genuinely sufficient, and buying a third-party classifier to sit on top of native controls is a common and expensive mistake. The cost nuance people repeat wrongly is that Unity Catalog is not free, because the governance tier is Premium and Premium Jobs Compute runs at exactly double the Standard rate per DBU-hour. Meter detail in our Unity Catalog lineage guide.