What Formal is
Formal is a complete PAM solution based on deploying flexible binaries that allow complete control of data access. They offer unique data aliasing to make them especially strong at controlling sensitive data access. The vendor site is joinformal.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Formal covers
Formal is in the catalog for these capabilities. Categories: Identity and Data Security. Catalog tags: Best for Enterprise.
How to evaluate Formal in a security program
Use Formal as a stack candidate, not as diligence evidence. The oneNorma score for Formal is 6.3/10 (percentile 89). If the real gap is in Identity and Data Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what joinformal.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
