CISO Tribune

Vendor comparison · 2 companies

Alice vs Salt Security

Alice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails. Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Alice
  • Salt Security
Alice vs Salt Security: Products, Customers and Funding Compared
AliceAlice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails.alice.ioSalt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.salt.security
What it sells
  • WonderSuite[1][2][4][5]WonderSuite is the AI security platform for teams launching customer-facing AI in regulated industries.
  • WonderBuild[1][6][9]WonderBuild red teams customer-facing AI apps, agents, and agentic workflows before launch.
  • WonderFence[1][3][4][6][7][8][9]WonderFence sits between external-facing AI and users, intercepting harmful, non-compliant, and off-policy responses before they land.
  • WonderCheck[1][4][7][9]WonderCheck's ongoing automated red-teaming detects drift, regression, and emerging risks.
  • Rabbit Hole[1][6][10][11]Rabbit Hole is an adversarial network of in-house researchers and data.
  • ActiveFence[3][8]Alice's ActiveFence is a UGC trust and safety layer that detects, prevents, and responds to online harm.
  • Agentic Security Graph[4][8]Maps and correlates the full environment out-of-band.
  • Salt Surface[5][9]Provides agentless, outside-in discovery of MCP servers and APIs.
  • Salt Connect[5][9]Provides cloud and code inventory.
Categories
Headquarters
New York, USA[1]Palo Alto, United States[1][3]
Founded
Not stated on its pages2016[1][11]
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • June 1, 2026Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.[17]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 10, 2026[14]
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Alice offers WonderSuite to teams launching customer-facing AI in regulated industries. The pages describe WonderSuite giving security, product, and compliance teams red teaming and real-time guardrails. Foundation model labs, global enterprises and platforms deploying AI are the customers Alice names. Alice describes its ActiveFence layer as serving social platforms and marketplaces with UGC trust and safety. ActiveFence's deep web investigations serve enterprises and governments tracing malicious operations.From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.
Last verified
October 29, 2026September 27, 2026

Where they overlap

  • Alice and Salt Security are both filed under AI model and agent security.

Where they differ, field by field

  • Alice's primary category is AI model and agent security; Salt Security's is API security.
  • Alice is also filed under AI firewalls and guardrails.
  • Alice lists WonderSuite, WonderBuild, WonderFence, WonderCheck, Rabbit Hole and 1 more. Salt Security lists Agentic Security Graph, Salt Surface and Salt Connect.
  • Alice is headquartered in New York, USA. Salt Security is headquartered in Palo Alto, United States.
  • Salt Security was founded in 2016.

What it sells: Alice

What WonderSuite does[1][2][4][5]
WonderSuite tests security and safety posture before launch, protects the AI experience in production, and catches what changes over time. WonderSuite covers pre-launch red teaming, real-time guardrails, and continuous post-launch testing in a single platform. WonderSuite provides end-to-end security coverage for agentic systems, from adversarial testing before deployment to real-time behavioral guardrails in production.
What WonderBuild does[1][6][9]
WonderBuild identifies gaps between policies and the system prompt, across text, multimodal, and agentic systems. WonderBuild gives CISO, legal, and compliance teams test documentation with findings mapped to regulatory requirements. WonderBuild red-teaming findings integrate into WonderFence.
What WonderFence does[1][3][4][6][7][8][9]
WonderFence reviews every prompt coming in and every response going out, and blocks harmful inputs before they hit the LLM. WonderFence trains a dedicated detector for each policy using real-world adversarial data, deployed at sub-100ms latency. WonderFence maps guardrails to EU AI Act, ISO 42001, NIST, MITRE ATLAS, and OWASP.
What WonderCheck does[1][4][7][9]
WonderCheck integrates directly into CI/CD pipelines for on-demand, scheduled, and ongoing testing. WonderCheck ranks issues by severity and pairs each one with clear remediation guidance. WonderCheck findings flow directly into WonderFence guardrails, or back into WonderBuild for deeper refinement.
What Rabbit Hole does[1][6][10][11]
Rabbit Hole collects real attacks and uses them to secure AI. Alice's solutions are powered by Rabbit Hole, an adversarial threat intelligence engine built on billions of real-world data samples.
What ActiveFence does[3][8]
ActiveFence live feeds surface harmful content, viral narratives, and coordinated manipulation in real time, across languages and regions. ActiveFence conducts deep web investigations to expose networks, specific threat actors, and emerging tactics. ActiveFence's SaaS tools are built for content moderation.

What it sells: Salt Security

What Agentic Security Graph does[4][8]
Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.
What Salt Surface does[5][9]
Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.
What Salt Connect does[5][9]
Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

Questions about Alice and Salt Security

What do Alice and Salt Security sell?
Alice sells WonderSuite, WonderBuild, WonderFence, WonderCheck, Rabbit Hole and 1 more. Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect.
Are Alice and Salt Security in the same category?
They share AI model and agent security. Alice's primary category is AI model and agent security and Salt Security's is API security.
Where are Alice and Salt Security headquartered?
Alice is headquartered in New York, USA. Salt Security is headquartered in Palo Alto, United States.
When were Alice and Salt Security founded?
Salt Security was founded in 2016.
Who are Alice and Salt Security sold to?
From its own pages, Alice offers WonderSuite to teams launching customer-facing AI in regulated industries. From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse.
What have Alice and Salt Security announced recently?
June 1, 2026: Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.

About Alice

Alice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails. ActiveFence Ltd does business as Alice. WonderSuite is the AI security platform for teams launching customer-facing AI in regulated industries. WonderSuite tests security and safety posture before launch, protects the AI experience in production, and catches what changes over time. WonderSuite combines automated adversarial testing with expert-led red teaming and real-time protection. WonderSuite covers pre-launch red teaming, real-time guardrails, and continuous post-launch testing in a single platform. In WonderSuite, automated red teaming assesses how an agent behaves before any guardrails are deployed. WonderSuite aligns every test, guardrail, and finding to customer policies and to compliance frameworks, including OWASP, NIST, MITRE ATLAS, and the EU AI Act.[2][3][4][5]

WonderBuild red teams customer-facing AI apps, agents, and agentic workflows before launch. WonderBuild runs thousands of adversarial tests based on custom policies that surface prompt injections, jailbreaks, data leakage risks, and compliance and regulatory gaps. WonderBuild uses adversarial data from Rabbit Hole to expose the path attackers take. WonderBuild identifies gaps between policies and the system prompt, across text, multimodal, and agentic systems. WonderBuild gives CISO, legal, and compliance teams test documentation with findings mapped to regulatory requirements. WonderBuild red-teaming findings integrate into WonderFence.[6]

WonderFence sits between external-facing AI and users, intercepting harmful, non-compliant, and off-policy responses before they land. WonderFence deploys runtime guardrails tuned to the customer's application and policies, intercepting harmful, non-compliant, or off-brand responses. WonderFence reviews every prompt coming in and every response going out, blocks harmful inputs before they hit the LLM, and blocks harmful outputs in real time before they impact users. WonderFence trains a dedicated detector for each policy using real-world adversarial data, deployed at sub-100ms latency. WonderFence watches every message in both directions, 24/7, blocking, masking, or alerting in real time, with activity tracked in a dashboard. WonderFence maps guardrails to the regulatory frameworks that legal and compliance teams care about: EU AI Act, ISO 42001, NIST, MITRE ATLAS, and OWASP. WonderFence is now a Databricks Unity AI Gateway External Policy that can be attached once in Unity Catalog to screen every governed model call, with no SDK and no code changes.[3][4][7][8]

WonderCheck runs continuous automated red teaming in production. WonderCheck's ongoing automated red-teaming detects drift, regression, and emerging risks. WonderCheck watches for drift, surfacing behavioral changes before they become incidents. WonderCheck integrates directly into CI/CD pipelines for on-demand, scheduled, and ongoing testing. WonderCheck ranks issues by severity and pairs each one with clear remediation guidance. WonderCheck findings flow directly into WonderFence guardrails, or back into WonderBuild for deeper refinement.[4][7][9]

Rabbit Hole is an adversarial network of in-house researchers and data that connects online attacks with the real world. Rabbit Hole collects real attacks and uses them to secure AI. Alice's solutions are powered by Rabbit Hole, an adversarial threat intelligence engine built on billions of real-world data samples collected across nearly a decade. Alice produces safety, security, multimodal, agentic, and skills-based datasets for model, application, and agent training. Alice combines expert-led and automated red-teaming to stress-test models across text, image, audio, and video under real adversarial conditions. Alice's evaluation and benchmark datasets are based on Alice's harms taxonomy or customized to customer policies. Alice provides AIGC and harmful content learning sets purpose-built for guardrail and content classifier creation. Alice provides simulated, high-fidelity environments and scenarios for training and testing AI agents and agentic models. Alice and AI21 post-trained NVIDIA's open Nemotron 3.5 Super to resist indirect prompt injection. Alice and Inflection AI are releasing a multi-turn red-teaming dataset covering risks such as emotional dependency and misplaced belief.[8][10][11][12]

Alice names foundation model labs, global enterprises and platforms deploying AI as its customers. WonderSuite provides end-to-end security coverage for agentic systems, from adversarial testing before deployment to real-time behavioral guardrails in production. WonderSuite covers prompt injection, unsafe tool calls, data leakage, and multi-step exploits across the entire agentic architecture. Alice connects directly through existing third-party Customer Experience (CX) agent extensions, so there is no need to swap vendors or rebuild integrations. Alice goes past literal translation to catch regional slang, dialect, euphemism, and coded phrasing. Alice watches every message in both directions, blocking, masking, or alerting in real time, at P99 under 120ms.[2][3][10][12]

Alice's ActiveFence is a UGC trust and safety layer that detects, prevents, and responds to online harm. ActiveFence live feeds surface harmful content, viral narratives, and coordinated manipulation in real time, across languages and regions. ActiveFence delivers datasets of adversarial indicators, domains, IPs, and hashes. ActiveFence uncovers vulnerabilities across code, systems, and infrastructure. ActiveFence conducts deep web investigations to expose networks, specific threat actors, and emerging tactics. ActiveFence's SaaS tools are built for content moderation. ActiveMind, powered by in-house large language models, helps moderation teams validate, flag, and respond to harmful content.[8][13]

Alice on the record

Sources

Alice full record

  1. [1]alice.ioAlice · alice.io · undated page, accessed October 29, 2026 · Tier A
  2. [2]GenAI Apps & Agents Security | WonderSuite by AliceAlice · undated page, accessed November 10, 2026 · Tier A
  3. [3]Alice for third-party CX agentsAlice · undated page, accessed November 10, 2026 · Tier A
  4. [4]AI Governance & Safety Platform for Enterprise | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Detection Response | Alice Red Teaming and GuardrailsAlice · undated page, accessed November 10, 2026 · Tier A
  6. [6]WonderBuild: Pre-Launch AI Red Teaming | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  7. [7]WonderFence: Real-Time AI Guardrails | Sub-150ms LatencyAlice · undated page, accessed November 10, 2026 · Tier A
  8. [8]ActiveFence UGC Protection | Alice Trust & Safety PlatformAlice · undated page, accessed November 10, 2026 · Tier A
  9. [9]WonderCheck | Ongoing AI Red Teaming for Production | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  10. [10]Alice | Secure, Safe, & Trustworthy AIAlice · undated page, accessed November 10, 2026 · Tier A
  11. [11]Foundation Models | AI Security, Safety & Trust Ecosystem | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  12. [12]Multilingual AI Guardrails, Every Language & Dialect | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  13. [13]Internal AgentsAlice · undated page, accessed November 10, 2026 · Tier A
  14. [14]Alice Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 10, 2026 · Tier C

Salt Security full record

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A

Spot a factual error? Request a correction.