Salt Security

Active

Protects organizations from getting breached through their APIs.

Winter 2016Founded 2016200 peoplePalo Alto, CA, USA; Tel Aviv-Yafo, Tel Aviv District, Israel

salt.security/ ↗LinkedIn ↗X ↗GitHub ↗Crunchbase ↗See on the Idea Map B2B momentum

About

Salt Security protects the APIs that form the core of every modern application. Its patented API Protection Platform is the only API security solution that combines the power of cloud-scale big data and time-tested ML/AI to detect and prevent API attacks. By correlating activities across millions of APIs and users over time, Salt delivers deep context with real-time analysis and continuous insights for API discovery, attack prevention, and shift-left practices. Deployed quickly and seamlessly integrated within existing systems, the Salt platform gives customers immediate value and protection, so they can innovate with confidence and accelerate their digital transformation initiatives. Salt pioneered API security and is the industry leader for API security with a proven record of success. You can watch a 90-second overview video of the Salt Security API Protection Platform here: https://youtu.be/Z5nzavnBJj4

From their website

as of Jun 7, 2026salt.security ↗

SaaSSubscription

Salt Security provides security for APIs and AI-enabled workflows by mapping and protecting the entire Agentic Security Graph. It aims to discover all agents, MCP servers, and APIs, then enforce policies and detect threats across runtime and posture management.

Salt offers an Agentic Security Platform comprising: Agentic Discovery to automatically find agents, MCP servers, and APIs (including shadow/zombie APIs); Posture Management to identify misconfigurations and exposed credentials; Runtime Protection for real-time detection of abuse and anomalous behavior across the full graph; and a unified API inventory and attack-surface mapping across agent, MCP, and API layers. The platform emphasizes end-to-end protection from agent deployment to runtime actions, with integrations across cloud and security tools (e.g., AWS, Microsoft, Google, Kong).

Who it’s for: Enterprises using API-first architectures seeking comprehensive visibility and protection across agents, MCP servers, and APIs, including shadow and zombie APIs.

Features