Formal
Engineering and product updates from the Formal team.
- Posts
- 20 from 19 Nov 2024 to 6 Nov 2026
- Posting
- monthly (13 in the last year)
- Kind
- company blog
- Feed
- https://formal.ai/blog/index.xml
2026 12
- Claude Code Hooks: What They Can't Stop
- MCP vs Skills: When to Use Each, Govern Both
- Claude dangerously-skip-permissions, Safely
- Claude Code Sandbox: What It Misses
- Giving Cloud Agents Production Access with OIDC, Not Secrets
- PSA: fork() considered harmful in macOS
- The Metabase Zero Day and the Case for Enhanced Data-Layer Security
- Announcing Connector v2.0.0
- Security Debt We Never Created
- Stop Building Scaffolding: Who Cares About MCP vs CLI
- Editing Code Visually Without Sacrificing Fidelity
- Using Proxies to Hide Secrets from Claude Code
2025 7
- Introducing Fine Grained Control for Connector Logs
- Allowlisting Some Bash Commands is Often the Same as Allowlisting All with Claude Code
- From Security Problem to Security Solution
- Formal Named Cloud Security Segment Leader in Latio Market Report
- The Permission Pitfall: Securing MCP Servers Without Limiting Value
- Down the Rabbit Hole: Implementing SSH Port Forwarding over AWS Session Manager
- Building a Protocol-Aware Reverse Proxy: Lessons from Handling MongoDB's Unique Framing