Apache Drill vs Query
Apache Drill
drill.apache.orgQuery
query.aiSide by side
| Figure | Apache Drill | Query |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 0 |
| Spec score · Query Engine Software | 8.9 (#2) | 7.1 (#18) |
| Authentication | Documented authentication options include Kerberos, username and password through Plain or a custom authenticator, and Digest. | The product supports single sign-on through identity providers such as Google, Microsoft, and Okta, and supports Google SSO through OAuth 2.0. |
| Security | Documented security features include Kerberos, username and password authentication, Digest authentication, authorization and user impersonation. | Query says its product design follows a “secure by design” principle and that it has an active bug bounty policy. |
| Support | The project directs questions to its drill-dev mailing list and welcomes contributions. | Standard support is included with subscriptions during weekday business hours, and paid Platinum support is available. |
Plans
In their own words
Apache Drill
Apache Drill is a schema-free SQL query engine for Hadoop, NoSQL databases, and cloud storage. It can query raw data where it resides without first loading it, defining schemas, or transforming it. Its JSON data model supports complex and nested structures, and a single query can join data across multiple datastores. Listed sources include HBase, MongoDB, HDFS, Amazon S3, Azure Blob Storage, Google Cloud Storage, Swift, NAS, and local files. JDBC and ODBC drivers connect Drill to tools including Tableau, Qlik, MicroStrategy, Spotfire, SAS, and Excel; developers can also use its REST API in custom applications. Drill can run embedded on a laptop or in distributed mode on a server cluster, and the homepage lists Mac, Windows, and Linux. Documented security options include Kerberos, username and password authentication, Digest, authorization, and impersonation. The software is free under Apache License 2.0. A compatibility limit: official support for Hadoop 2 and Java 8 was dropped with Drill 1.22.0.
Query
Query is a cloud security data mesh that searches distributed security sources without copying their data into a central store. Federated search queries connected systems in parallel and normalizes results to OCSF, while Federated Search Query Language translates general queries into each source’s native language at query time. Query Workers are AI agents that triage, investigate, hunt, and detect across connected sources; analysts review recommendations or inconclusive findings. Federated Detections run SPL, KQL, or Sigma rules where the data resides. Query says it supports more than 50 sources, including Splunk, Microsoft Sentinel, CrowdStrike Falcon, Okta, Snowflake, and Google BigQuery. Static connectors map fixed schemas; dynamic connectors let customers configure custom mappings. Access is read-only, with no ingestion required and data staying at its source. The SaaS product runs on AWS data centers in us-east-1. Single sign-on supports Google, Microsoft, and Okta providers. Query states SOC 2 certification, uses NIST CSF 800-53 as a control baseline, and offers weekday standard support plus paid Platinum support.