Skip to main content
The Hoop Gateway is Hoop’s full platform. It is a layer 7 gateway that sits between engineers, AI agents, service accounts and your infrastructure, with a web app for administration, agents deployed next to each resource, and a broad feature set built on top: access requests, session recording, runbooks, resource provisioning, identity federation and integrations with Slack, Teams, Jira and your SIEM. It is fully supported, and everything documented under this section works today.
Starting fresh? Begin with the Sidecar. It installs in one command, runs from a single config file, and needs no gateway, agent or database. The Gateway is where you go when you need the full platform. See Getting Started.

​
Gateway or Sidecar?

The two are converging: the Gateway becomes the Control Plane, and the two run in parallel through the transition.

​
The problems it solves

Organizations managing access to critical infrastructure run into the same five things:
  • Security risk from overly permissive access policies
  • Productivity bottlenecks from complex approval workflows
  • Compliance gaps from inadequate audit trails
  • No clear answer to which identity accessed what, and when
  • Sensitive data exposed during ordinary access sessions
The Gateway sits between your users and your infrastructure and enforces controls inline at the wire protocol, for engineers, AI agents and service accounts alike.
Agents reach real data through the same gateway engineers use, with PII masked at the wire, destructive operations blocked, and every session recorded.
Provide secure, audited access to databases while masking sensitive data. Developers run queries without ever handling production credentials.
Make PII, PHI, PCI and credentials invisible in database responses, API payloads and terminal output, so production access does not expose sensitive data.
Meet regulatory requirements with session recordings, access logs and data protection features that document who accessed what and when.

​
Explore

Features

Live Data Masking, access requests, access control, ABAC, guardrails, runbooks, session recording, MCP server and more.

Quickstart

Connect a resource. Databases, cloud services, web applications, development environments, AI and LLMs.

Clients

The hoop CLI, the hsh shell, and the web app.

Setup & Administration

Architecture, deployment, configuration, identity providers, APIs and licensing.

Concepts

Agents and resource roles.

Integrations

Slack, Teams, Jira, SIEM, Svix, AWS and Microsoft Presidio.

​
Get the Gateway

Managed Service

No setup. Register and start connecting resources.
Create an account

Self-Hosted

Deploy in your own infrastructure with Docker, Kubernetes or AWS.
Go to the deployment guide