Formal provides a protocol-aware reverse proxy for datastores and APIs, enabling security teams to monitor data flows and enforce least-privilege access policies in real-time. This technology addresses the complexity and risks associated with data management in modern enterprises, ensuring better control and protection against data breaches.
Funding
$6.8M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
MCFounders
Product
Problem
Modern enterprises face challenges in managing data access and ensuring data security due to the increasing complexity of their data stacks. It's difficult to maintain a clear understanding of data flows and enforce least-privilege access policies, leading to vulnerabilities and potential data breaches.
Solution
Formal provides a protocol-aware reverse proxy for datastores and APIs, enabling security teams to monitor data flows and enforce least-privilege access policies in real-time. The Formal Data Graph dynamically learns from an organization’s data flow, classifies data, and automatically recommends and enforces least-privilege policies. By understanding the who, what, and where of data consumption, Formal empowers security teams to control their entire data stack in one place. The platform offers collaboration features, allowing teams to align on data security strategies and integrate with tools like Slack, Jira, and Linear.
Target Audience
Formal is designed for security teams within enterprises that are seeking to understand and control their data flows, enforce access policies, and reduce the risk of data breaches.
Features
- Protocol-aware reverse proxy for datastores and APIs
- Real-time data flow monitoring and analysis
- Dynamic data classification, including PII and PHI
- Automated least-privilege policy recommendations and enforcement
- Integration with modern tools like Slack, Jira, and Linear for collaboration
- Support for Infrastructure as Code (IaC) tools like Terraform and Pulumi
- API-first design for seamless integration with existing stacks
- Distroless Docker image for simplified deployment and enhanced security