CISO Tribune

Vendor comparison · 2 companies

Noma Security vs Salt Security

Noma Security sells an Agent Security & Governance Platform for enterprise security teams. Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Noma Security
  • Salt Security
Noma Security vs Salt Security: Products, Customers and Funding Compared
Noma SecurityNoma Security sells an Agent Security & Governance Platform for enterprise security teams.noma.securitySalt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.salt.security
What it sells
  • AI DiscoveryFinds every AI agent, model, MCP server and tool across cloud, SaaS and developer environments.
  • AI Security Posture Management[7]Defines which agents are approved, what data they can access and what actions they can take, and enforces those policies in real time.
  • AI Red Teaming[4][13]Probes AI applications and agents with multi-turn tests for prompt injection, jailbreak, data leakage and goal drift.
  • Runtime Protection[2]Monitors the full chain of an agent session, including prompts, tool calls and data access, and detects prompt injection and data exfiltration in real time.
  • Agentic Security Graph[4][8]Maps and correlates the full environment out-of-band.
  • Salt Surface[5][9]Provides agentless, outside-in discovery of MCP servers and APIs.
  • Salt Connect[5][9]Provides cloud and code inventory.
Categories
Headquarters
Not stated on its pagesPalo Alto, United States[1][3]
Founded
2023[3]2016[1][11]
Ownership and funding
Privately held[4]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 26, 2026Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer.[15]
  • February 27, 2026Noma Security announced its AI security platform is available through the Extended plan in AWS Security Hub.[16]
  • June 1, 2026Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.[17]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its coverage spans AI assets across endpoint, SaaS, and cloud environments. The pages address organisations whose employees use agents. The pages address organisations whose agents run on SaaS platforms or on cloud platforms.From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Noma Security and Salt Security are both filed under AI model and agent security.

Where they differ, field by field

  • Noma Security's primary category is AI model and agent security; Salt Security's is API security.
  • Noma Security is also filed under AI firewalls and guardrails and AI governance.
  • Noma Security lists AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection. Salt Security lists Agentic Security Graph, Salt Surface and Salt Connect.
  • Salt Security is headquartered in Palo Alto, United States.
  • Noma Security was founded in 2023. Salt Security was founded in 2016.
  • Noma Security is privately held.

What it sells: Salt Security

What Agentic Security Graph does[4][8]
Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.
What Salt Surface does[5][9]
Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.
What Salt Connect does[5][9]
Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

Questions about Noma Security and Salt Security

What do Noma Security and Salt Security sell?
Noma Security sells AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection. Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect.
Are Noma Security and Salt Security in the same category?
They share AI model and agent security. Noma Security's primary category is AI model and agent security and Salt Security's is API security.
Where are Noma Security and Salt Security headquartered?
Salt Security is headquartered in Palo Alto, United States.
When were Noma Security and Salt Security founded?
Noma Security was founded in 2023. Salt Security was founded in 2016.
Who owns Noma Security and Salt Security?
Noma Security is privately held.
Who are Noma Security and Salt Security sold to?
Its coverage spans AI assets across endpoint, SaaS, and cloud environments. From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse.
What have Noma Security and Salt Security announced recently?
October 26, 2026: Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer. June 1, 2026: Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.

About Noma Security

Noma Security sells an Agent Security & Governance Platform for enterprise security teams. Noma Security says AI adoption is outpacing security across every enterprise.[1][5]

Noma Security finds every AI component in an organisation. Noma Security provides continuous visibility and risk assessments on agents, MCPs, skills, and models across every environment. Noma Security finds AI assets across endpoint, SaaS, and cloud environments. Noma Security shows what those AI assets can reach and which risks need attention.[1][6][7]

Noma Security discovers agents across Agentforce, Microsoft Copilot, Claude Enterprise and other SaaS platforms. Noma Security identifies risk and prevents agents from taking dangerous actions in runtime. Noma Security discovers agents across cloud platforms and surfaces their risks. Noma Security tests agents on cloud platforms for AI-specific risks. Noma Security controls the actions that agents on cloud platforms take in runtime.[8][9]

Noma Security secures the identity, access, and actions of each agent. Noma Security discovers the agents that employees are using. Noma Security defines what each of those agents is allowed to do and stops the ones that break the rules at runtime. Noma Security defines what actions each agent can take and scopes permissions by identity. Noma Security enforces policies at the moment a connection or action is attempted.[1][10][11]

Noma Security discovers, governs, and protects MCP servers. Noma Security discovers MCP servers and assesses their risks. Noma Security controls tool access for MCP servers and stops threats at runtime.

Noma Security stops dangerous agent behavior at runtime. Noma Security describes agents as able to go rogue or be manipulated. Noma uses context to detect dangerous behavior and enforce policies.[12]

Noma Security tests AI applications and agents for security, compliance, and privacy risks. Noma Security tests AI applications and agents to find weaknesses before attackers or customers do. Noma Security answers questions about AI risk with evidence. Noma Security brings together AI inventory, evaluation results, and runtime records. Noma Security shows what an organisation runs, how it tests it, and how controls are enforced.[1][2][8][9][10][13][14]

Noma Security on the record

Sources

Noma Security full record

  1. [1]Agent Security and Governance | NomaNoma Security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Noma security raises 100m to drive adoption of ai agent security 302518641Noma Security via PR Newswire · prnewswire.com · published July 31, 2025 · Tier A
  3. [3]Noma security raises 100 million for ai security platformSecurityWeek · securityweek.com · published July 31, 2025 · Tier B
  4. [4]MCP Security: Discover, Govern, and Protect MCP Servers | NomaNoma Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]AI Security Solutions for Secure AI, Everywhere | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Shadow AI Discovery: Find Every Agent in Your Organization | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI-SPM: AI Security Posture Management | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]SaaS Agent Security for Copilot Studio & AgentForce | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Application Security for Bedrock, Azure & Databricks | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Agentic Identity: Know Who Your Agents Are and What They're Doing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Agent Access Control | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI-DR: AI Detection and Response | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI Red Teaming: Automated Adversarial Testing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI Compliance and Reporting | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]Noma Security Appoints Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer OfficerPRNewswire · published October 26, 2026 · Tier A
  16. [16]Noma AI Security Integrates with New Extended Plan for AWS Security HubPRNewswire · published February 27, 2026 · Tier A

Salt Security full record

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A

Spot a factual error? Request a correction.