CISO Tribune

Company record · security vendor

Salt Security

CISO Tribune company record: Salt Security, security vendor (API security)

Where Salt Security appears on the record (85)

Every page on CISO Tribune and its network that carries this company, 85 in all.

Compared with (83)

vs 42Crunch, vs A10 Networks, vs Abnormal AI, vs AIShield, vs Alice, vs Apiiro, vs Apono, vs Appdome, vs AppOmni, vs Archipelo, vs Assail, vs Astra Security, vs Asymptote Labs, vs Bay, vs Beagle Security, vs C1.ai, vs Cequence Security, vs Clutch Security, vs Cranium, vs Credo AI, vs Data Theorem, vs DataDome, vs Daylight, vs Dreadnode, vs DTEX Systems, vs Enkrypt AI, vs Escape, vs Exaforce, vs F5, vs Fastly, vs Fiddler AI, vs Harmonic Security, vs HiddenLayer, vs Holistic AI, vs Impart Security, vs Imperva, vs Indusface, vs Invicti, vs Knostic, vs KnowBe4, vs Lakera, vs Lasso Security, vs Levo.ai, vs Mend.io, vs Miggo, vs Mindgard, vs Nametag, vs Neo, vs Noma Security, vs NowSecure, vs Oasis Security, vs Obsidian Security, vs Oligo, vs Onyx Security, vs Operant AI, vs Orchid Security, vs P0 Security, vs Pangea, vs Pillar Security, vs Plerion, vs Pluto Security, vs Prompt Security, vs Promptfoo, vs Protectt.ai, vs Pynt, vs Raven.io, vs Reco, vs Singulr, vs Skyflow, vs Socure, vs SplxAI, vs StackHawk, vs Straiker, vs StratoKey, vs Stream.Security, vs Sweet Security, vs Terra Security, vs Token Security, vs Traceable AI, vs Trail of Bits, vs Upwind, vs Wallarm, vs Zenity

In the vendor directory (2)

What the company sells

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one. Salt states that AI agents and MCPs run on APIs. Salt Security, Inc. is a Delaware corporation with its principal place of business in Palo Alto, California. Roey Eliyahu and Michael Nicosia founded Salt in 2018.

Salt covers every agent, LLM, MCP server and API, with depth into the exposure, code, configuration and runtime behind each one. Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt delivers protection without proxying all MCP traffic through an inline gateway. Salt maps agent posture to the EU AI Act, NIST and SOC 2.

Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Connect provides cloud and code inventory. Salt uses collectors where runtime analysis is needed. Salt Code scans repositories and pull requests for risky API integrations, shadow MCP servers and dangerous agentic patterns before they ship. Salt discovers every agent, MCP server and tool, including shadow MCPs. Salt flags exposed endpoints, hardcoded secrets and over-scoped access. Salt detects prompt injection and context manipulation, and Salt tells legitimate agents apart from malicious bots. Salt blocks machine-speed abuse in real time.

Salt provides one living inventory, with owners, of everything agents can reach. Salt also offers a solution to stop fraud, abuse and agent hijacking that look like valid traffic.

Salt generates up-to-date specs for APIs and feeds them into application security testing tools, including SAST, DAST and IasT. Salt continuously assesses security posture compliance in CI/CD pipelines and staging. Salt compares findings to OAS and Swagger files to show where documentation and live API traffic diverge. Salt sends Jira tickets and Slack notifications directly from the Salt platform.

Salt describes its deployment as starting with agentless discovery, then adding protection through the gateways, WAFs and SOC tools a customer already runs. Salt lists 40+ technology integrations across cloud, gateways, edge, code and the SOC.

Salt provides DeinDeal with an updated inventory of all its APIs and exposed sensitive data. Armis uses the dynamic reporting in Salt for compliance audits and to demonstrate FedRAMP adherence. Salt helps Navan validate the pen testing activities of its internal testers and bug bounty program.

Salt Labs research into agent, MCP and API threats informs the Salt platform. The H2 2026 State of AI and API Security report examines how companies are securing AI and APIs.[2][4][6][8][9][10][12][13][14][15][16]

Categories
Headquarters
Palo Alto, United States[1][3]
Founded
2016[1][11]
Ownership
Not established from our sources
CISO on record
Not yet on our record. Send a verified source
Website
salt.security

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

  • Agentic Security Graph[4][8]

    Maps and correlates the full environment out-of-band.

    Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.

  • Salt Surface[5][9]

    Provides agentless, outside-in discovery of MCP servers and APIs.

    Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.

  • Salt Connect[5][9]

    Provides cloud and code inventory.

    Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Salt Security's categories, then alphabetical. A list from the record, never a ranking.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

  • G2 · 4.0 out of 5 · 12 reviews[7]seen November 10, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

  • June 1, 2026

    Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle. Salt Security[17]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A: the company, a regulator or a filing
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A: the company, a regulator or a filing
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Salt Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Salt Security. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Salt Security

What does Salt Security sell?
Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect. Agentic Security Graph: Maps and correlates the full environment out-of-band. Salt Surface: Provides agentless, outside-in discovery of MCP servers and APIs. Salt Connect: Provides cloud and code inventory.
Who does Salt Security fit?
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.
How does CISO Tribune file Salt Security?
CISO Tribune files Salt Security under API security, with AI model and agent security as a secondary category.
Where is Salt Security headquartered?
Salt Security is headquartered in Palo Alto, United States.
When was Salt Security founded?
Salt Security was founded in 2016.

Related guides