Formal

Formal is a network security proxy positioned between identities—engineers, AI agents, CI/CD pipelines, and BI tools—and resources such as databases, infrastructure, APIs, and MCP servers. It addresses the problem of controlling and auditing access to sensitive data infrastructure without requiring application changes or SDKs. The proxy deploys as a single stateless binary in your VPC via Terraform, Kubernetes, or Docker, evaluating policies in real time on every query, session, and tool call.

Formal parses 15+ wire protocols natively, including Postgres, MySQL, MongoDB, Snowflake, SSH, Kubernetes, HTTP, MCP, S3, Redis, RDP, gRPC, BigQuery, ClickHouse, and DynamoDB. It supports nine policy actions (allow, block, mask, filter, rewrite, quarantine, suspend, MFA, impersonate) evaluated across session, request, and response stages using an OPA policy engine with Rego. Capabilities include query-level PII/PHI masking, column-level restrictions for BI tools, session recording for SSH/Kubernetes/RDP with LLM-powered anomaly detection, and the Panopticon audit log with export to Splunk, Datadog, or S3. Policies can be backtested against historical logs before enforcement, and resources are managed through Terraform, Pulumi, or an API.

Formal is aimed at security and platform teams governing access to production datastores and AI agent activity. The pages describe a demo and documentation as entry points but do not specify pricing, plans, or packaging details.