Systems Evaluation

Decide on evidence,
not on decks.

Panaptico runs vendor evaluations against your live stack — real workloads, real identity, real topology. Every decision ships with a signed record procurement can defend and engineering can build from.

EVAL-0481Data platform · Analytics workload
Running against prod mirror

Snowflake

Composite score

78

/ 100

Cost

$0.042 / GB-scan

+18% vs baseline

P95 query latency

2.4s

on 1.2B row join

Integration fit

Partial

No native Iceberg write — Tabular bridge required

Identity

Okta SSO · SCIM ok

Recommended

Databricks

Composite score

86

/ 100

Cost

$0.031 / GB-scan

baseline

P95 query latency

1.7s

on 1.2B row join

Integration fit

Full

All connectors resolved

Identity

Okta SSO · SCIM ok

Sourced from
Snowflake query history
Databricks SQL warehouse
CloudWatch · cost & egress
Okta · SCIM audit
Confidence 94% · 1,820 traces

The gap

Vendor decks lie.
Your environment doesn't.

Most evaluations happen in slide decks and sandbox tenants. You pick between Databricks and Snowflake by reading Gartner. You choose an observability platform from a call with a sales engineer. You guess whether Cloudflare One will play nice with Tailscale by skimming docs. Nobody runs the comparison against your workloads, your identity setup, or your topology — so the tool that looked great in the demo breaks against your reality three months in.

1

Sandbox ≠ production

Demo tenants run 50k rows. You run 1.2B. The vendor's p95 was measured on their data, not yours.

2

Reference architectures hide cost

Integration work — identity, egress, bridge connectors — is 40% of TCO and lives nowhere in the deck.

3

Procurement loses the why

Six months later nobody can reconstruct the criteria. The next evaluation starts from zero.

Real-environment benchmarking

Your workloads. Your data. Real numbers.

BENCH-2091Replayed 24h prod window · 1.6TB scanned
Snowflake
vs
Databricks
QueryRowsSnowflakeDatabricksConfidence
Q1 · Revenue attribution join1.24B × 48M2.41s1.67s98%
Q2 · Cohort funnel scan840M × 2.1M3.82s4.14s96%
Q3 · Daily rollup materialization2.8B11.2s7.9s99%
Q4 · Ad-hoc BI query · 95pmixed1.12s1.38s92%
Q5 · Iceberg write · 500M rows500Mfail · bridge required41s100%
Replay service · CloudWatch traces · 48 runs per query
Composite · Databricks +9.2%

Integration feasibility

Prove they talk
before you sign.

Most integration failures hide in the boundary — identity handoff, DNS, policy evaluation, egress routing. Panaptico spins up a shadow pairing, runs the four boundary checks, and returns an evidence-backed pass/fail.

PAIRING · INT-0074Cloudflare One ↔ Tailscale
Pass · 7/8 gates
CLOUDFLARE ONEZero Trust · Gateway12 policies · 3 appsTAILSCALEMesh · ACL184 nodes · 6 tagsBOUNDARY4 gates testedidentityDNS · splitACL syncegressSHADOW PAIRING · 48h SYNTHETIC TRAFFICOkta SSO · Panaptico replay · 3,180 probes

Boundary gates

Identity handoff · Okta → CF → Tailscale

OIDC token exchange · 840 probes

pass

Split DNS resolution

Tail-net records propagate · 280ms p95

pass

Policy evaluation · CF Access + TS ACL

No conflicts across 12 policies

pass

Egress routing · stable IP to SaaS

No flapping over 48h

pass

MTU / fragmentation

No reassembly drops

pass

Connector failover

Regional cutover in 4.1s

pass

Audit log interleave

Correlated via request-id

pass

Device posture passthrough

CF posture not forwarded · workaround available

warn
Cloudflare Zero Trust
Tailscale admin

Cross-vendor scorecard

Score on what matters to you,
not the category report.

Pick

Databricks

86

/ 100

Cost82
Coverage88
Performance91
Integration fit84

Recommended · Iceberg native · workload cost-optimal

Snowflake

78

/ 100

Cost71
Coverage86
Performance82
Integration fit72

Strong BI path · Iceberg via Tabular bridge

BigQuery

74

/ 100

Cost79
Coverage68
Performance80
Integration fit70

Lowest cost · weakest on identity parity with Okta

Decision record

Every evaluation exits as
a signed artifact.

Procurement gets evidence they can defend. Engineering gets a baseline they can build from. Six months in, when someone asks why you chose X — the record is still there, still reconcilable to the state of the stack.

DR-2026-0481Data platform selection · signed
Ratified

Decision

Adopt Databricks as primary warehouse. Retain Snowflake for BI-facing marts through 2026-Q3.

Criteria weight

Cost 30 · Coverage 25 · Performance 25 · Fit 20 — set by Finance + Data platform lead.

Decision owner

D. Park · VP Data Platform · ratified by CTO council 2026-04-18

Evidence

BENCH-2091 · INT-0074 · 1,820 query traces · 3,180 boundary probes · 48h replay window

Reversal trigger

Rebench if p95 regresses > 15% or cost delta > 20% at any monthly reconciliation.

Open risks

Device posture passthrough (CF → TS) unresolved — workaround documented in INT-0074-R2.

Traceable to
Databricks SQL
Snowflake
Cloudflare One
Tailscale
Okta
sha256 · 8f21…c04a

Close the tab on vendor decks.

Run the next evaluation against your real stack. Ship a decision you can defend — and a baseline Panaptico will keep reconciled after go-live.