Salt Security

What is Salt Security?

Salt Security is an API and agentic AI security platform for enterprise security teams, founded in 2016 and based in Palo Alto. It discovers APIs, AI agents and MCP servers, checks their posture and detects attacks at runtime. The vendor reports more than 100 enterprise deployments.

Key features of Salt Security

• Agentic Discovery: find agents, MCP servers and APIs, including shadow and zombie APIs.
• Posture Management: check components for misconfigurations, excessive permissions and exposed credentials.
• Runtime Protection: detect abuse, anomalous behavior and active attacks.
• Path visibility: trace a request across agent, MCP server, tool, API and data layers.
• Agentic Security Graph: map relationships between agents, APIs and data.
• Free assessment: an Agentic Security Assessment that maps your attack surface at no cost.

How Salt Security works

Salt connects to cloud, gateway and edge sources, which the vendor says can start agentless, and discovers APIs and agents. It maps them in a graph, flags risky configuration and watches live traffic for attacks. It works alongside existing gateways and WAFs.

Who uses Salt Security?

Salt serves large enterprises in financial services, healthcare technology and retail. Logos on the vendor site include Scotiabank, Luxottica, Stryker, SoFi, Cathay Bank, Hyundai, Carrefour Spain and Flutterwave.

Salt Security pricing

Salt Security does not publish pricing. Plans are quoted by the vendor, and demos can be requested. A free Agentic Security Assessment is offered at $0.

Salt Security integrations

Salt cites more than 40 integrations across cloud, gateways, edge, code and the SOC, including Cloudflare WAF, Akamai, Wiz, Apigee, AWS, Google Cloud, Azure, CrowdStrike, Kong, MuleSoft, F5 and Kubernetes.

Salt Security alternatives

Wiz is a cloud security platform where API visibility is one part of a wider product. Orca Security is another cloud security platform with agentless scanning. Noname Security, now part of Akamai, was a direct API security competitor. Snyk focuses on developer security and code.