Lean

Lean pairs functional programming with theorem proving, for work where correctness must be established formally. It is best suited to mathematicians, theorem provers and programmers tackling verification; its trusted kernel and broad mathematical library are compelling strengths, but the formal-proof focus makes it a specialist choice.

Overview

Lean lets users write programs and formalize mathematics in the same language, then check proofs through a minimal trusted kernel. That foundation is intended to support correctness claims in mathematics and software and hardware verification. It is valuable when a proof needs to be machine-checked, but formalization demands a different kind of work from relying on conventional testing alone.

Created by Leonardo de Moura in 2013, Lean is open source under Apache 2.0. The Lean FRO became a nonprofit under Convergent Research in July 2023. The license allows others to use and extend Lean and its mathematical libraries.

Key features

Mathlib is a community-driven library of more than a million lines, spanning algebra, analysis, topology, probability and computer science. Its breadth gives formalization work substantial material to build on, though its value is greatest for users working in areas it covers.

Lean’s Grind tool automates complex pattern matching, case analysis and systems of linear inequalities. This can reduce repetitive proof work, while metaprogramming lets experienced users add domain-specific notation and automation. Those extension options make Lean adaptable, but are most relevant to users prepared to work with its programming and proof concepts.

Lean projects are managed with Lake, the bundled package manager. The recommended setup uses VS Code and the Lean 4 extension for syntax highlighting and code completion. Neovim with lean.nvim is also well-supported; VSCodium and Cursor support is unofficial. Lean4Web runs Lean code in a browser, offering a way to work without a local editor setup.

Learning resources include textbooks, tutorials, interactive games, core documentation and an API reference. Separate core resources serve programmers, theorem provers and mathematicians learning formalization, giving newcomers different entry points rather than a single route.

A concrete security application comes from AWS, which uses Lean to formally verify Cedar, an authorization policy language, proving security properties and validating them against production code through differential testing.

Pricing

Lean 4 costs nothing. It is open-source software with no paid plans or free trial. That makes it accessible for individual learning and formalization without a subscription; its free model does not change the specialist skills needed to use it effectively.

Platforms

Lean supports Linux, macOS, Windows and web use. Linux, Apple Silicon macOS and x86-64 Windows are Tier 1; x86-64 macOS and Emscripten WebAssembly are Tier 2. The distinction matters when choosing a machine: users on Tier 1 systems have the primary supported targets, while the other listed configurations are Tier 2.

Who it's for

Lean is a strong fit for mathematicians formalizing results, theorem provers building checked proofs, and programmers working on code whose correctness needs a formal argument. Its general-programming flexibility is useful, but it is not the natural choice for routine application development where formal verification is not a goal.

Questions and collaboration are centered in the Lean Community Zulip, and Lean FRO hosts weekly technical office hours. The privacy policy describes collection of communications when users contact the organization and its practices for transferring, retaining and protecting personal information.

Pros and cons

• Pros: A minimal trusted kernel underpins proof checking, making Lean suited to correctness-sensitive mathematical and verification work.
• Pros: Mathlib’s breadth and Lean’s automation and extension mechanisms offer a substantial foundation for formalization.
• Pros: It is free and open source, with editor options, browser access and learning materials for different audiences.
• Cons: Formal proof work is a specialized approach, so Lean is less suitable when ordinary programming without proof obligations is the priority.
• Cons: Support tiers vary by platform, and VSCodium and Cursor support is explicitly unofficial.

Alternatives

For another free interactive theorem prover and dependently typed programming language, consider Rocq. PVS may suit readers comparing a free noncommercial option with a commercial-use plan at custom pricing. Choose Z3 when its free MIT-licensed downloads and source code fit the need. HOL4 is another free option, distributed under a modified three-clause BSD license; Isabelle is also free and uses open-source licenses, with its main code base under BSD-style regulations. SPIN offers free source and executables under BSD 3-Clause. UPPAAL has a free academic license for eligible non-commercial use. Alloy Analyzer is a free open-source project with a self-contained executable. See the Formal Verification Tools directory to compare options across the category.

Verdict

Choose Lean if you need a free, extensible language for formal mathematics or verification and want a trusted proof-checking kernel backed by a large library. Look elsewhere if formal proofs are not central to your work or your platform falls outside Lean’s Tier 1 targets and you need primary-tier support.