CISO Tribune

Vendor comparison · 2 companies

Salt Security vs Socure

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. Socure sells an identity and risk platform designed to make risk decisions in real time across the user journey. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Salt Security
  • Socure
Salt Security vs Socure: Products, Customers and Funding Compared
Salt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.salt.securitySocureSocure sells an identity and risk platform designed to make risk decisions in real time across the user journey.socure.com
What it sells
  • Agentic Security Graph[4][8]Maps and correlates the full environment out-of-band.
  • Salt Surface[5][9]Provides agentless, outside-in discovery of MCP servers and APIs.
  • Salt Connect[5][9]Provides cloud and code inventory.
  • RiskOS[1][4][15]RiskOS is used to build a risk stack that covers fraud, compliance and trust.
  • Sigma First-Party Fraud[7]Sigma First-Party Fraud is used with cross-institution intelligence to expose hidden risk and stop abuse.
  • Socure Verify[1][8]Socure Verify automates the customer onboarding process.
  • Predictive DocV[1][9]Predictive DocV combines patented fake ID detection, biometric verification and Level 2 liveness.
  • Digital Intelligence[1][10]Digital Intelligence binds an identity with associated devices, online behavior and historical consumer interactions.
  • Global Watchlist Screening with Monitoring[13]Global Watchlist Screening with Monitoring uses AI and machine learning for matching and compliance processes.
Categories
Headquarters
Palo Alto, United States[1][3]Not stated on its pages
Founded
2016[1][11]Not stated on its pages
Ownership and funding
Not stated on its pagesPrivately held[14][18]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 1, 2026Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.[17]
  • August 11, 2026Socure was named to the 2026 Inc. 5000 list of fastest growing private companies for the fifth consecutive year.[14]
  • June 25, 2026Socure appointed Mark Carter as its Chief Information Security Officer.[17]
  • May 7, 2026Socure appointed Chung-Man Tam as Chief Product Officer and Pablo Abreu as its first Chief AI and Innovation Officer.[16]
  • February 3, 2026Socure launched SocureGov RiskOS, a government-focused identity and fraud platform that is now FedRAMP Moderate authorized.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[18]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.From its own pages, Socure sells to customers whose problems range from workforce to prediction markets. Socure's cross-industry consortium data covers organizations across financial services, gaming and eCommerce. Graph Intelligence is aimed at fraud and data science teams. Digital Intelligence is aimed at financial institutions.
Last verified
September 27, 2026November 5, 2026

Where they overlap

  • Salt Security and Socure are both filed under AI model and agent security.

Where they differ, field by field

  • Salt Security's primary category is API security; Socure's is Identity verification.
  • Socure is also filed under Fraud prevention.
  • Salt Security lists Agentic Security Graph, Salt Surface and Salt Connect. Socure lists RiskOS, Sigma First-Party Fraud, Socure Verify, Predictive DocV, Digital Intelligence and 1 more.
  • Salt Security is headquartered in Palo Alto, United States.
  • Salt Security was founded in 2016.
  • Socure is privately held.

What it sells: Salt Security

What Agentic Security Graph does[4][8]
Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.
What Salt Surface does[5][9]
Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.
What Salt Connect does[5][9]
Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

What it sells: Socure

What RiskOS does[1][4][15]
Socure Launch is a self-serve entry point into RiskOS. RiskOS includes a dynamic workflow builder with a no-code interface, third-party data integrations and real-time testing.
What Sigma First-Party Fraud does[7]
A dispute abuse model and real-time risk score identify identities likely to exploit dispute processes across organizations. Instant alerts are sent when a consumer's risk profile changes.
What Predictive DocV does[1][9]
Predictive Document Verification (DocV) 3.0 includes a capture experience, a forensic engine and data extraction. DocV can be combined with Socure's full stack of identity, fraud and compliance solutions.
What Digital Intelligence does[1][10]
Digital Intelligence can be integrated through a RESTful API interface and client-side SDKs for iOS, Android and JavaScript. Device intelligence gathers device attributes, history, velocity metrics and risk indicators to identify compromised devices, proxies, VPNs and more.
What Global Watchlist Screening with Monitoring does[13]
Customers can screen, monitor and disposition customers in real time against sanctions, enforcement lists, politically exposed persons databases, adverse media information and custom lists. All parties in a payment can be screened in a single API call in real time.

Questions about Salt Security and Socure

What do Salt Security and Socure sell?
Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect. Socure sells RiskOS, Sigma First-Party Fraud, Socure Verify, Predictive DocV, Digital Intelligence and 1 more.
Are Salt Security and Socure in the same category?
They share AI model and agent security. Salt Security's primary category is API security and Socure's is Identity verification.
Where are Salt Security and Socure headquartered?
Salt Security is headquartered in Palo Alto, United States.
When were Salt Security and Socure founded?
Salt Security was founded in 2016.
Who owns Salt Security and Socure?
Socure is privately held.
Who are Salt Security and Socure sold to?
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. From its own pages, Socure sells to customers whose problems range from workforce to prediction markets.
What have Salt Security and Socure announced recently?
June 1, 2026: Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle. August 11, 2026: Socure was named to the 2026 Inc. 5000 list of fastest growing private companies for the fifth consecutive year.

About Salt Security

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one. Salt states that AI agents and MCPs run on APIs. Salt Security, Inc. is a Delaware corporation with its principal place of business in Palo Alto, California. Roey Eliyahu and Michael Nicosia founded Salt in 2018.[4][8][9][10][13]

Salt covers every agent, LLM, MCP server and API, with depth into the exposure, code, configuration and runtime behind each one. Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt delivers protection without proxying all MCP traffic through an inline gateway. Salt maps agent posture to the EU AI Act, NIST and SOC 2.[6][8][12]

Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Connect provides cloud and code inventory. Salt uses collectors where runtime analysis is needed. Salt Code scans repositories and pull requests for risky API integrations, shadow MCP servers and dangerous agentic patterns before they ship. Salt discovers every agent, MCP server and tool, including shadow MCPs. Salt flags exposed endpoints, hardcoded secrets and over-scoped access. Salt detects prompt injection and context manipulation, and Salt tells legitimate agents apart from malicious bots. Salt blocks machine-speed abuse in real time.[8][9][12][13]

Salt provides one living inventory, with owners, of everything agents can reach. Salt also offers a solution to stop fraud, abuse and agent hijacking that look like valid traffic.[13]

Salt generates up-to-date specs for APIs and feeds them into application security testing tools, including SAST, DAST and IasT. Salt continuously assesses security posture compliance in CI/CD pipelines and staging. Salt compares findings to OAS and Swagger files to show where documentation and live API traffic diverge. Salt sends Jira tickets and Slack notifications directly from the Salt platform.[14]

Salt describes its deployment as starting with agentless discovery, then adding protection through the gateways, WAFs and SOC tools a customer already runs. Salt lists 40+ technology integrations across cloud, gateways, edge, code and the SOC.

Salt provides DeinDeal with an updated inventory of all its APIs and exposed sensitive data. Armis uses the dynamic reporting in Salt for compliance audits and to demonstrate FedRAMP adherence. Salt helps Navan validate the pen testing activities of its internal testers and bug bounty program.[15]

Salt Labs research into agent, MCP and API threats informs the Salt platform. The H2 2026 State of AI and API Security report examines how companies are securing AI and APIs.[2][4][9][13][15][16]

Salt Security on the record

Sources

Salt Security full record

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A

Socure full record

  1. [1]socure.comSocure · socure.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Strategic growth investment fravity acquisitionSocure · socure.com · undated page, accessed November 5, 2026 · Tier A
  3. [3]Identity Verification Platform for AI Risk Decisioning | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  4. [4]RiskOS®: Data Orchestration Platform & Risk Decisioning | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  5. [5]Third-Party Fraud Detection Software | Sigma Identity Fraud V4.5Socure · undated page, accessed November 10, 2026 · Tier A
  6. [6]Synthetic Identity Fraud Detection | Sigma Synthetic V4.5 | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  7. [7]Sigma First-Party Fraud Detection Software | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  8. [8]KYC Verification Software | Socure VerifySocure · undated page, accessed November 10, 2026 · Tier A
  9. [9]Document Verification Software for Onboarding | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  10. [10]Device Intelligence Software for Fraud Prevention | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  11. [11]Identity Graph Intelligence: Actionable Insights for Fraud PreventionSocure · undated page, accessed November 10, 2026 · Tier A
  12. [12]Email Risk Score Software for Fraud Teams | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  13. [13]Sanctions Screening Software for Compliance | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  14. [14]Socure Named to Inc. 5000 for Fifth Consecutive YearSocure · published August 11, 2026 · Tier A
  15. [15]Socure Launches SocureGov RiskOS® for Government FraudSocure · published February 3, 2026 · Tier A
  16. [16]Socure Names New CPO and Chief AI OfficerSocure · published May 7, 2026 · Tier A
  17. [17]Socure Reinforces Security-First Strategy with Chief Information Security Officer AppointmentBusiness Wire · published June 25, 2026 · Tier A
  18. [18]RiskOS - Socure ReviewsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.