Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Formal serves as a reverse proxy that is aware of protocols, enhancing security measures for databases, APIs, infrastructure, and AI tools by implementing least privilege principles at the wire-protocol layer. This tool is deployed as a singular stateless binary within a Virtual Private Cloud (VPC) using platforms like Terraform, Kubernetes, or Docker, effectively positioning itself between users and resources without necessitating alterations to applications, SDKs, or agents. Formal supports the analysis of over 15 distinct protocols, such as PostgreSQL, MySQL, MongoDB, Snowflake, SSH, Kubernetes, HTTP, MCP, S3, Redis, RDP, BigQuery, ClickHouse, and DynamoDB, which empowers it to make decisions based on specific queries rather than relying solely on broad network filtering. Furthermore, its policies can oversee user authentication and authorization, mask or filter data fields, modify requests, prohibit certain actions, mandate multi-factor authentication, isolate sessions, revoke access, or enable impersonation throughout the stages of session, request, and response. Additionally, teams have the capability to protect AI agents and MCP servers by eliminating personally identifiable information before it is processed by a model, preventing unauthorized calls to tools, and meticulously auditing each action taken. This comprehensive approach not only enhances security but also ensures compliance with data protection regulations.
Description
Identity and Data Protection for AWS and Azure, Google Cloud, and Kubernetes. Sonrai's cloud security platform offers a complete risk model that includes activity and movement across cloud accounts and cloud providers. Discover all data and identity relationships between administrators, roles and compute instances. Our critical resource monitor monitors your critical data stored in object stores (e.g. AWS S3, Azure Blob), and database services (e.g. CosmosDB, Dynamo DB, RDS). Privacy and compliance controls are maintained across multiple cloud providers and third-party data stores. All resolutions are coordinated with the relevant DevSecOps groups.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Kubernetes
Yes
Redis
Yes
Splunk Cloud Platform
Yes
Amazon DynamoDB
Yes
Amazon Web Services (AWS)
No
Datadog
Yes
Google Cloud BigQuery
Yes
Google Cloud Container Security
No
Google Cloud Platform
No
Google Kubernetes Engine (GKE)
No
Integrations
Kubernetes
Yes
Redis
Yes
Splunk Cloud Platform
Yes
Amazon DynamoDB
No
Amazon Web Services (AWS)
Yes
Datadog
No
Google Cloud BigQuery
No
Google Cloud Container Security
Yes
Google Cloud Platform
Yes
Google Kubernetes Engine (GKE)
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
Contact us for pricing information.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Formal
Country
United States
Website
formal.ai/
Vendor Details
Company Name
Sonraí Security
Founded
2017
Country
United States
Website
sonraisecurity.com
Product Features
Data Security
Alerts / Notifications
No
Antivirus/Malware Detection
No
At-Risk Analysis
No
Audits
No
Data Center Security
No
Data Classification
No
Data Discovery
No
Data Loss Prevention
No
Data Masking
No
Data-Centric Security
No
Database Security
No
Encryption
No
Identity / Access Management
No
Logging / Reporting
No
Mobile Data Security
No
Monitor Abnormalities
No
Policy Management
No
Secure Data Transport
No
Sensitive Data Compliance
No
Product Features
Cloud Security
Antivirus
No
Application Security
Yes
Behavioral Analytics
Yes
Encryption
No
Endpoint Management
No
Incident Management
Yes
Intrusion Detection System
Yes
Threat Intelligence
No
Two-Factor Authentication
Yes
Vulnerability Management
Yes
Cloud Workload Protection
Anomaly Detection
No
Asset Discovery
No
Cloud Gap Analysis
No
Cloud Registry
No
Data Loss Prevention (DLP)
No
Data Security
No
Governance
No
Logging & Reporting
No
Machine Learning
No
Security Audit
No
Workload Diversity
No
Container Security
Access Roles / Permissions
No
Application Performance Tracking
No
Centralized Policy Management
No
Container Stack Scanning
No
Image Vulnerability Detection
No
Reporting
No
Testing
No
View Container Metadata
No
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
Yes
Endpoint Management
No
IOC Verification
No
Incident Management
Yes
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
No
Data Loss Prevention
Compliance Reporting
No
Incident Management
No
Policy Management
No
Sensitive Data Identification
No
Web Threat Management
No
Whitelisting / Blacklisting
No
Data Security
Alerts / Notifications
No
Antivirus/Malware Detection
No
At-Risk Analysis
No
Audits
No
Data Center Security
No
Data Classification
No
Data Discovery
No
Data Loss Prevention
No
Data Masking
No
Data-Centric Security
No
Database Security
No
Encryption
No
Identity / Access Management
No
Logging / Reporting
No
Mobile Data Security
No
Monitor Abnormalities
No
Policy Management
No
Secure Data Transport
No
Sensitive Data Compliance
No
DevOps
Approval Workflow
Yes
Dashboard
Yes
KPIs
No
Policy Management
Yes
Portfolio Management
No
Prioritization
Yes
Release Management
No
Timeline Management
Yes
Troubleshooting Reports
Yes
IT Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Event Tracking
Yes
IP Protection
Yes
Internet Usage Monitoring
No
Intrusion Detection System
No
Spyware Removal
No
Two-Factor Authentication
No
Vulnerability Scanning
No
Web Threat Management
No
Web Traffic Reporting
No
Log Management
Archiving
Yes
Audit Trails
Yes
Compliance Reporting
Yes
Consolidation
Yes
Data Visualization
Yes
Event Logs
Yes
Network Logs
Yes
Remediation
Yes
Syslogs
Yes
Thresholds
Yes
Web Logs
Yes
Policy Management
Approval Process Control
No
Attestation
No
Audit Trails
No
Policy Creation
No
Policy Library
No
Policy Metadata Management
No
Policy Training
No
Reporting / Analytics
No
Version Control
No
Workflow Management
No
Privileged Access Management
Application Access Control
Yes
Behavioral Analytics
Yes
Credential Management
Yes
Endpoint Management
No
For MSPs
No
Granular Access Controls
Yes
Least Privilege
Yes
Multifactor Authentication
Yes
Password Management
No
Policy Management
Yes
Remote Access Management
Yes
Threat Intelligence
Yes
User Activity Monitoring
Yes
SIEM
Application Security
No
Behavioral Analytics
No
Compliance Reporting
No
Endpoint Management
No
File Integrity Monitoring
No
Forensic Analysis
No
Log Management
No
Network Monitoring
No
Real Time Monitoring
No
Threat Intelligence
No
User Activity Monitoring
No