Midplane

Application, cloud and data security · by Midplane

A thin access layer / MCP server that sits in front of Postgres, enforcing query-level policies, column masking, and audit logging.

Where it ranks

Current edition · updated Oct 20, 2026

What it does

A thin access layer / MCP server that sits in front of Postgres, enforcing query-level policies, column masking, and audit logging.

  • Safe Postgres access for AI agents
  • Query-level policy enforcement
  • Column masking for sensitive data
  • Append-only audit logging of all queries
Category
Application, cloud and data security
Users
Teams using AI agents that query Postgres databases
Public API
Not offered
Deployment
Self-hosted, On-premises

Not yet disclosed: platforms, languages and support channels.

Pricing

  • Free plan$0

Prices as published by Midplane, checked Oct 2026.

Security and compliance

As reported by Midplane. Ask for audit reports before you buy.

  • AES-256-GCM encryption for database credentials via per-region AWS KMS keys with envelope encryption
  • Machine tokens stored as HMAC-SHA256 digests with constant-time comparison
  • Postgres row-level security for audit log tenant isolation
  • Browser hardening headers: Content-Security-Policy (frame-ancestors 'none'), X-Frame-Options (DENY), X-Content-Type-Options (nosniff), Referrer-Policy (strict-origin-when-cross-origin), Permissions-Policy (camera/microphone/geolocation disabled), Strict-Transport-Security (2-year max-age, includeSubDomains, preload)
  • Per-agent least-privilege scoping with fail-closed on no-grant credentials
  • Per-region cryptographic key separation for credentials and tokens
  • Strictly necessary cookies only; no advertising or third-party advertising trackers

Reviews

No reviews yet

Reviews come from people who use Midplane at work. Share how your team uses it to help other buyers decide.

Is this your product?

Claim it to keep details accurate and submit evidence for the next ranking review.

Claim Midplane