CISO Tribune

Vendor comparison · 2 companies

Salt Security vs SplxAI

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. SplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Salt Security
  • SplxAI
Salt Security vs SplxAI: Products, Customers and Funding Compared
Salt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.salt.securitySplxAISplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems.splx.ai
What it sells
  • Agentic Security Graph[4][8]Maps and correlates the full environment out-of-band.
  • Salt Surface[5][9]Provides agentless, outside-in discovery of MCP servers and APIs.
  • Salt Connect[5][9]Provides cloud and code inventory.
  • Agentic Radar[1][5]An open-source security scanner for agentic AI.
Categories
Headquarters
Palo Alto, United States[1][3]Not stated on its pages
Founded
2016[1][11]2023[2]
Ownership and funding
Not stated on its pagesOwned by Zscaler since 2025[3]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 1, 2026Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.[17]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability. Its asset management messaging speaks to organisations that want visibility and control over the AI assets used in the organisation. Its runtime messaging addresses teams with AI systems in production. Its governance messaging speaks to teams working with global AI security frameworks and internal risk policies.
Last verified
September 27, 2026September 30, 2026

Where they overlap

  • Salt Security and SplxAI are both filed under AI model and agent security.

Where they differ, field by field

  • Salt Security's primary category is API security; SplxAI's is AI model and agent security.
  • SplxAI is also filed under AI governance, AI firewalls and guardrails and Static application security testing.
  • Salt Security lists Agentic Security Graph, Salt Surface and Salt Connect. SplxAI lists Agentic Radar.
  • Salt Security is headquartered in Palo Alto, United States.
  • Salt Security was founded in 2016. SplxAI was founded in 2023.
  • SplxAI is owned by Zscaler, since 2025.

What it sells: Salt Security

What Agentic Security Graph does[4][8]
Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.
What Salt Surface does[5][9]
Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.
What Salt Connect does[5][9]
Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

Questions about Salt Security and SplxAI

What do Salt Security and SplxAI sell?
Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect. SplxAI sells Agentic Radar.
Are Salt Security and SplxAI in the same category?
They share AI model and agent security. Salt Security's primary category is API security and SplxAI's is AI model and agent security.
Where are Salt Security and SplxAI headquartered?
Salt Security is headquartered in Palo Alto, United States.
When were Salt Security and SplxAI founded?
Salt Security was founded in 2016. SplxAI was founded in 2023.
Who owns Salt Security and SplxAI?
SplxAI is owned by Zscaler, since 2025.
Who are Salt Security and SplxAI sold to?
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability.
What have Salt Security and SplxAI announced recently?
June 1, 2026: Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.

About Salt Security

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one. Salt states that AI agents and MCPs run on APIs. Salt Security, Inc. is a Delaware corporation with its principal place of business in Palo Alto, California. Roey Eliyahu and Michael Nicosia founded Salt in 2018.[4][8][9][10][13]

Salt covers every agent, LLM, MCP server and API, with depth into the exposure, code, configuration and runtime behind each one. Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt delivers protection without proxying all MCP traffic through an inline gateway. Salt maps agent posture to the EU AI Act, NIST and SOC 2.[6][8][12]

Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Connect provides cloud and code inventory. Salt uses collectors where runtime analysis is needed. Salt Code scans repositories and pull requests for risky API integrations, shadow MCP servers and dangerous agentic patterns before they ship. Salt discovers every agent, MCP server and tool, including shadow MCPs. Salt flags exposed endpoints, hardcoded secrets and over-scoped access. Salt detects prompt injection and context manipulation, and Salt tells legitimate agents apart from malicious bots. Salt blocks machine-speed abuse in real time.[8][9][12][13]

Salt provides one living inventory, with owners, of everything agents can reach. Salt also offers a solution to stop fraud, abuse and agent hijacking that look like valid traffic.[13]

Salt generates up-to-date specs for APIs and feeds them into application security testing tools, including SAST, DAST and IasT. Salt continuously assesses security posture compliance in CI/CD pipelines and staging. Salt compares findings to OAS and Swagger files to show where documentation and live API traffic diverge. Salt sends Jira tickets and Slack notifications directly from the Salt platform.[14]

Salt describes its deployment as starting with agentless discovery, then adding protection through the gateways, WAFs and SOC tools a customer already runs. Salt lists 40+ technology integrations across cloud, gateways, edge, code and the SOC.

Salt provides DeinDeal with an updated inventory of all its APIs and exposed sensitive data. Armis uses the dynamic reporting in Salt for compliance audits and to demonstrate FedRAMP adherence. Salt helps Navan validate the pen testing activities of its internal testers and bug bounty program.[15]

Salt Labs research into agent, MCP and API threats informs the Salt platform. The H2 2026 State of AI and API Security report examines how companies are securing AI and APIs.[2][4][9][13][15][16]

Salt Security on the record

Sources

Salt Security full record

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A

SplxAI full record

  1. [1]splx.aiSplxAI · splx.ai · undated page, accessed September 30, 2026 · Tier A
  2. [2]SplxAI Closes $7M Seed Funding Round to Help Organizations Secure Agentic AI SystemsBusiness Wire · businesswire.com · published March 26, 2025 · Tier A
  3. [3]Zscaler acquires splxSplxAI · splx.ai · published November 3, 2025 · Tier A
  4. [4]SPLX Platform | End-to-End Security for the AI LifecycleSPLX · undated page, accessed October 31, 2026 · Tier A
  5. [5]SPLX | End-to-End Security for AISPLX · undated page, accessed October 31, 2026 · Tier A
  6. [6]AI Governance & Compliance | Stay Aligned with AI PoliciesSPLX · undated page, accessed October 31, 2026 · Tier A
  7. [7]Remediation | Harden your LLM system prompts to mitigate risksSPLX · undated page, accessed October 31, 2026 · Tier A
  8. [8]AI Asset Management | Unified Inventory & Security for Enterprise AISPLX · undated page, accessed October 31, 2026 · Tier A
  9. [9]Probe | Automated & Continuous Red Teaming for Conversational AISPLX · undated page, accessed October 31, 2026 · Tier A
  10. [10]AI Runtime Protection | Real-Time AI Threat DetectionSPLX · undated page, accessed October 31, 2026 · Tier A
  11. [11]SplxAI | The future of automated AI Red TeamingSPLX · undated page, accessed November 10, 2026 · Tier A
  12. [12]Monitoring | Analyze LLM Logs to proactively identify malicious user activitySPLX · undated page, accessed November 10, 2026 · Tier A
  13. [13]LLM Benchmarks | Compare and Evaluate the Security of Leading AI ModelsSPLX · undated page, accessed November 10, 2026 · Tier A
  14. [14]Security and TrustSPLX · undated page, accessed November 10, 2026 · Tier A
  15. [15]Pricing & PlansSPLX · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.