CISO Tribune

Vendor comparison · 2 companies

HiddenLayer vs Salt Security

HiddenLayer sells AI security that analyzes AI applications, models, and assets, identifies their risks, and protects them as teams build. Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HiddenLayer
  • Salt Security
HiddenLayer vs Salt Security: Products, Customers and Funding Compared
HiddenLayerHiddenLayer sells AI security that analyzes AI applications, models, and assets, identifies their risks, and protects them as teams build.hiddenlayer.comSalt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.salt.security
What it sells
  • Model Scanning[1][4][6]Scans third-party and proprietary machine learning models to detect hidden risks.
  • Red Teaming[1][6][10]Runs continuous testing intended to identify threats early and validate AI defenses.
  • AI Guardrails[1][11]Applies policy-based controls intended to prevent misuse, data leakage and adversarial attacks on AI systems.
  • Agentic and MCP Protection[1][4][5][6]Monitors autonomous AI agents and MCP connections and is intended to guard against rogue behavior.
  • Agentic Security Graph[4][8]Maps and correlates the full environment out-of-band.
  • Salt Surface[5][9]Provides agentless, outside-in discovery of MCP servers and APIs.
  • Salt Connect[5][9]Provides cloud and code inventory.
Categories
Headquarters
Austin, United States[2]Palo Alto, United States[1][3]
Founded
2022[2]2016[1][11]
Ownership and funding
Privately held[3]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • August 12, 2026HiddenLayer announced the appointment of Mike Gesnaldo as Chief Revenue Officer.[14]
  • June 1, 2026Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.[17]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. HiddenLayer offers protection of agentic, generative, and predictive AI systems for mission assurance. HiddenLayer describes deployment through APIs, gateways, SDKs, or lightweight on-device integrations.From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.
Last verified
November 2, 2026September 27, 2026

Where they overlap

  • HiddenLayer and Salt Security are both filed under AI model and agent security.
  • Both are headquartered in the United States.

Where they differ, field by field

  • HiddenLayer's primary category is AI model and agent security; Salt Security's is API security.
  • HiddenLayer is also filed under AI firewalls and guardrails.
  • HiddenLayer lists Model Scanning, Red Teaming, AI Guardrails and Agentic and MCP Protection. Salt Security lists Agentic Security Graph, Salt Surface and Salt Connect.
  • HiddenLayer is headquartered in Austin, United States. Salt Security is headquartered in Palo Alto, United States.
  • HiddenLayer was founded in 2022. Salt Security was founded in 2016.
  • HiddenLayer is privately held.

What it sells: Salt Security

What Agentic Security Graph does[4][8]
Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.
What Salt Surface does[5][9]
Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.
What Salt Connect does[5][9]
Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

Questions about HiddenLayer and Salt Security

What do HiddenLayer and Salt Security sell?
HiddenLayer sells Model Scanning, Red Teaming, AI Guardrails and Agentic and MCP Protection. Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect.
Are HiddenLayer and Salt Security in the same category?
They share AI model and agent security. HiddenLayer's primary category is AI model and agent security and Salt Security's is API security.
Where are HiddenLayer and Salt Security headquartered?
HiddenLayer is headquartered in Austin, United States. Salt Security is headquartered in Palo Alto, United States.
When were HiddenLayer and Salt Security founded?
HiddenLayer was founded in 2022. Salt Security was founded in 2016.
Who owns HiddenLayer and Salt Security?
HiddenLayer is privately held.
Who are HiddenLayer and Salt Security sold to?
HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse.
What have HiddenLayer and Salt Security announced recently?
August 12, 2026: HiddenLayer announced the appointment of Mike Gesnaldo as Chief Revenue Officer. June 1, 2026: Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.

About HiddenLayer

HiddenLayer sells AI security that analyzes AI applications, models, and assets, identifies their risks, and protects them as teams build. HiddenLayer builds an inventory of the AI applications, models, and assets in a customer environment. HiddenLayer offers a firewall that monitors, detects, and responds in real time to adversarial threats on agentic and generative AI applications. HiddenLayer continually identifies threats and validates defenses for agentic and generative AI applications.[1]

HiddenLayer says developers are embedding AI into tools and workflows faster than security teams can track. HiddenLayer says third-party models introduce unknown code and vulnerabilities. HiddenLayer says coding agents can read sensitive files, execute shell commands, install dependencies, or expose credentials. HiddenLayer says attackers can manipulate AI systems through prompts, retrieved content, tool output, or other untrusted inputs.[1][4][5]

HiddenLayer automatically builds a living inventory of AI across an environment, including shadow AI. HiddenLayer scans cloud accounts, repos, endpoints, and pipelines to detect every model and associated agent. HiddenLayer scans AWS, Azure, GCP, VMs, containers, and APIs for AI assets. HiddenLayer automatically associates AI assets with owners, business units, sensitivity, and risk levels. HiddenLayer aligns AI assets with NIST, OWASP, and ATLAS frameworks.[6][7]

HiddenLayer analyzes models for malware, vulnerabilities, backdoors, and unknown components before they reach production. HiddenLayer scans model files and URLs for malware, CVEs, backdoors, and integrity issues before deployment. HiddenLayer analyzes architectures, layers, weights, and artifacts for tampering or anomalies. HiddenLayer tests commercial models for safety and security before integration. HiddenLayer identifies where models come from, including origin and licensing.[4][6][7][8]

HiddenLayer continuously tests AI systems against evolving attacks and uncovers weaknesses early. HiddenLayer tests for jailbreaks, injection, role confusion, and harmful response patterns. HiddenLayer probes for extraction of PHI, PII, or proprietary data. HiddenLayer simulates unauthorized actions through agent tools and APIs.[6][9][10]

HiddenLayer detects and responds to AI attacks in production. HiddenLayer monitors prompts, outputs, memory, and agent actions in real time to detect and block prompt injection, data leakage, model theft, and unsafe tool use. HiddenLayer observes and reconstructs agent interactions across tools, data, and workflows in real time. HiddenLayer detects, blocks, or redacts unsafe actions and sensitive information according to policy and platform capabilities. HiddenLayer integrates runtime detections and enforcement events with existing SIEM, SOAR, and security operations workflows. HiddenLayer extends Runtime Security into AI coding agents through lightweight, on-device integration.[5][6][10]

HiddenLayer enforces boundaries around content, toxicity, bias, and regulatory restrictions. HiddenLayer detects and prevents PII, PHI, and proprietary data exposure in generated content. HiddenLayer enforces safe, compliant, and policy aligned AI behavior across applications, models, and business units. HiddenLayer combines safety guardrails with real time threat detection and prompt injection blocking. HiddenLayer protects autonomous agents and MCP based systems from prompt injection, unsafe tool use, and harmful autonomous actions.[1][6][11]

HiddenLayer says its platform deploys across any architecture without exposing intellectual property, weights, prompts, or customer data. HiddenLayer offers deployment through APIs, gateways, SDKs, or lightweight on-device integrations. HiddenLayer offers services modeled after active adversarial campaigns targeting enterprise AI applications. HiddenLayer services evaluate every layer from AI asset discovery to data and model supply chains to runtime environments. HiddenLayer services provide detailed remediation playbooks tailored to models, infrastructure, and compliance needs. HiddenLayer services work in concert with the HiddenLayer AI Security Platform for ongoing protection. HiddenLayer services align with emerging AI governance standards, including NIST AI RMF and EU AI Act requirements.[4][6][12]

HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. HiddenLayer describes establishing governance controls aligned with FFIEC and OCC frameworks. HiddenLayer detects malware, tampered artifacts, and backdoored weights in pretrained models and libraries. HiddenLayer protects agentic, generative, and predictive AI systems for mission assurance.[1][4][6][10][13]

HiddenLayer on the record

Sources

HiddenLayer full record

  1. [1]HiddenLayer | Total AI SecurityHiddenLayer · undated page, accessed September 27, 2026 · Tier A
  2. [2]Hiddenlayer launches the first security solution to protect ai powered products 301587864HiddenLayer via PR Newswire · prnewswire.com · published July 19, 2022 · Tier A
  3. [3]Hiddenlayer 100m series b ai securityHiddenLayer · hiddenlayer.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Application Developers | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Runtime Security | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  6. [6]Platform | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Discovery | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Supply Chain Security | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Attack Simulation | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  10. [10]CISO | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Guardrails | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  12. [12]Services | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  13. [13]Financial Services | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  14. [14]HiddenLayer Appoints Mike Gesnaldo as Chief Revenue OfficerHiddenLayer · published August 12, 2026 · Tier A

Salt Security full record

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A

Spot a factual error? Request a correction.