CISO Tribune

Vendor comparison · 2 companies

Salt Security vs Zenity

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. Zenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Salt Security
  • Zenity
Salt Security vs Zenity: Products, Customers and Funding Compared
Salt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.salt.securityZenityZenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate.zenity.io
What it sells
  • Agentic Security Graph[4][8]Maps and correlates the full environment out-of-band.
  • Salt Surface[5][9]Provides agentless, outside-in discovery of MCP servers and APIs.
  • Salt Connect[5][9]Provides cloud and code inventory.
  • AI Observability[5]Builds a live inventory of every agent across an organization's environment and tracks the data those agents access.
  • AI Security Posture Management (AISPM)[7]Evaluates configuration, permissions, and integrations before an agent goes live.
  • Boundaries[4][6][8]Evaluates every agent action in real time against an organization's rules and decides to let it through, block it, or shut the agent down.
  • AI Detection and Response (AIDR)[9]AIDR reads the full sequence of an agent's activity, detecting threats mapped to the OWASP LLM and MITRE ATLAS frameworks.
  • Zenity Security Assessment Hub[13]A set of 10 free, open-source tools built by Zenity Labs to help security teams identify and understand immediate risks.
Categories
Headquarters
Palo Alto, United States[1][3]Not stated on its pages
Founded
2016[1][11]2021[2]
Ownership and funding
Not stated on its pagesPrivately held[3][6][17]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 1, 2026Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle.[17]
  • September 23, 2026Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security.[15]
  • August 3, 2026Zenity announced a $125 million Series C round led by Norwest.[14]
  • June 17, 2026Zenity and Carahsoft announced a partnership under which Carahsoft serves as Zenity's Public Sector distributor.[17]
  • March 17, 2026Zenity announced general availability of runtime security controls for AI agents built on Microsoft Foundry.[16]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. It lists one for Healthcare, described as HIPPAA-grade protection. Transportation is also listed, with secure logistics APIs. Retail is listed, with protect PII at scale. Software is listed, with API-first app security. Its whitepaper page also says security teams face a challenge in which the action layer goes unmonitored.Zenity describes a global financial services firm and a global asset manager as organizations that write policy rules for agents. Zenity covers agents embedded in SaaS tools, home-grown agentic platforms in the cloud, and end-user devices. Zenity gives security and platform teams a single place to surface, enforce, and protect MCP usage.
Last verified
September 27, 2026November 9, 2026

Where they overlap

  • Salt Security and Zenity are both filed under AI model and agent security.

Where they differ, field by field

  • Salt Security's primary category is API security; Zenity's is AI model and agent security.
  • Zenity is also filed under AI governance.
  • Salt Security lists Agentic Security Graph, Salt Surface and Salt Connect. Zenity lists AI Observability, AI Security Posture Management (AISPM), Boundaries, AI Detection and Response (AIDR) and Zenity Security Assessment Hub.
  • Salt Security is headquartered in Palo Alto, United States.
  • Salt Security was founded in 2016. Zenity was founded in 2021.
  • Zenity is privately held.

What it sells: Salt Security

What Agentic Security Graph does[4][8]
Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one.
What Salt Surface does[5][9]
Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Surface discovers these from the outside, without an agent.
What Salt Connect does[5][9]
Salt Connect provides cloud and code inventory. Salt names Salt Connect together with collectors that are used where runtime analysis is needed.

What it sells: Zenity

What AI Observability does[5]
AI Observability is Zenity's discovery and visibility layer for AI agents. Data Lens surfaces sensitive files and pages that are both frequently accessed and broadly exposed across agents.
What AI Security Posture Management (AISPM) does[7]
AISPM evaluates configuration and permissions for agents embedded in platforms like Microsoft Copilot Studio, ChatGPT Enterprise, and Salesforce Agentforce. AISPM applies stricter enforcement in production and more flexible policy in development or sandbox environments.
What Boundaries does[4][6][8]
Boundaries is Zenity's runtime enforcement engine. A rule written once in Boundaries is enforced on Copilot, ChatGPT Enterprise, Agentforce, Bedrock, coding agents, and homegrown builds. Boundaries includes a built-in AI assistant that turns a plain-language request into a working rule.
What AI Detection and Response (AIDR) does[9]
AI Detection and Response (AIDR) is Zenity's runtime security layer for AI agents. AIDR detects direct and indirect prompt injection and blocks execution before the agent acts on them. AIDR breaks every agent interaction into individual steps and groups them by thread in a single activity table.
What Zenity Security Assessment Hub does[13]
The Zenity Security Assessment Hub is built by Zenity Labs. The tools take a Red-Team approach to visualize threats across Microsoft 365, with a focus on 365 Copilot, Copilot Studio, and Power Platform.

Questions about Salt Security and Zenity

What do Salt Security and Zenity sell?
Salt Security sells Agentic Security Graph, Salt Surface and Salt Connect. Zenity sells AI Observability, AI Security Posture Management (AISPM), Boundaries, AI Detection and Response (AIDR) and Zenity Security Assessment Hub.
Are Salt Security and Zenity in the same category?
They share AI model and agent security. Salt Security's primary category is API security and Zenity's is AI model and agent security.
Where are Salt Security and Zenity headquartered?
Salt Security is headquartered in Palo Alto, United States.
When were Salt Security and Zenity founded?
Salt Security was founded in 2016. Zenity was founded in 2021.
Who owns Salt Security and Zenity?
Zenity is privately held.
Who are Salt Security and Zenity sold to?
From its own pages, the company shows an industry solution for Finance, described as stop fraud and abuse. Zenity describes a global financial services firm and a global asset manager as organizations that write policy rules for agents.
What have Salt Security and Zenity announced recently?
June 1, 2026: Salt Security launched Salt Code, a component that enforces security policies on AI-generated code across the development lifecycle. September 23, 2026: Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security.

About Salt Security

Salt Security provides security for the APIs, MCP servers and data infrastructure where agents execute. Salt describes its agentic security platform as one graph of agents, the MCP servers they use and the APIs they call, with the context behind each one. Salt states that AI agents and MCPs run on APIs. Salt Security, Inc. is a Delaware corporation with its principal place of business in Palo Alto, California. Roey Eliyahu and Michael Nicosia founded Salt in 2018.[4][8][9][10][13]

Salt covers every agent, LLM, MCP server and API, with depth into the exposure, code, configuration and runtime behind each one. Salt's Agentic Security Graph maps and correlates the full environment out-of-band. Salt delivers protection without proxying all MCP traffic through an inline gateway. Salt maps agent posture to the EU AI Act, NIST and SOC 2.[6][8][12]

Salt Surface provides agentless, outside-in discovery of MCP servers and APIs. Salt Connect provides cloud and code inventory. Salt uses collectors where runtime analysis is needed. Salt Code scans repositories and pull requests for risky API integrations, shadow MCP servers and dangerous agentic patterns before they ship. Salt discovers every agent, MCP server and tool, including shadow MCPs. Salt flags exposed endpoints, hardcoded secrets and over-scoped access. Salt detects prompt injection and context manipulation, and Salt tells legitimate agents apart from malicious bots. Salt blocks machine-speed abuse in real time.[8][9][12][13]

Salt provides one living inventory, with owners, of everything agents can reach. Salt also offers a solution to stop fraud, abuse and agent hijacking that look like valid traffic.[13]

Salt generates up-to-date specs for APIs and feeds them into application security testing tools, including SAST, DAST and IasT. Salt continuously assesses security posture compliance in CI/CD pipelines and staging. Salt compares findings to OAS and Swagger files to show where documentation and live API traffic diverge. Salt sends Jira tickets and Slack notifications directly from the Salt platform.[14]

Salt describes its deployment as starting with agentless discovery, then adding protection through the gateways, WAFs and SOC tools a customer already runs. Salt lists 40+ technology integrations across cloud, gateways, edge, code and the SOC.

Salt provides DeinDeal with an updated inventory of all its APIs and exposed sensitive data. Armis uses the dynamic reporting in Salt for compliance audits and to demonstrate FedRAMP adherence. Salt helps Navan validate the pen testing activities of its internal testers and bug bounty program.[15]

Salt Labs research into agent, MCP and API threats informs the Salt platform. The H2 2026 State of AI and API Security report examines how companies are securing AI and APIs.[2][4][9][13][15][16]

Salt Security on the record

Sources

Salt Security full record

  1. [1]Salt security raises 140 million series d round led by capitalg at 1 4 billion valuationSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Salt security extends its agentic security platform with native ai detection and responseSalt Security · salt.security · published September 22, 2026 · Tier A
  3. [3]Contact usSalt Security · salt.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Security Graph: A New Framework for the AI EraSalt Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Salt Security: Agentic AI Security, MCP Discovery, and API SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]EU AI Act Compliance 2026: What High-risk AI Systems Must Do Now | Salt SecuritySalt Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Salt Security Reviews & Product Details - G2G2 · undated page, accessed October 28, 2026 · Tier C
  8. [8]Onyx Security vs Salt Security | Secure the Agentic Action LayerSalt Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Securing APIs - API Attack Surface Management SolutionSalt Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Salt Security Master Services AgreementSalt Security · published May 20, 2026 · Tier A
  11. [11]API Security Company - About Us Salt Security API SecuritySalt Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Agentic Security Platform - Complete AI & API Protection PlatformSalt Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]API Security Software - API Security Management SoftwareSalt Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Proactive API Security - “Shift Left" API DevelopmentSalt Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]API Security Customers - Salt Security CustomersSalt Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]API Security Trends - API Attacks, Breaches & Threats ReportSalt Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Salt Security launches Salt CodeSalt Security · published June 1, 2026 · Tier A

Zenity full record

  1. [1]AI Agent Security and Governance | Zenity AI Security PlatformZenity · undated page, accessed September 27, 2026 · Tier A
  2. [2]Zenity announces strategic investment led by m12Zenity · zenity.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Zenity raises 38m series b funding round to secure agentic aiZenity · zenity.io · published October 29, 2024 · Tier A
  4. [4]AI Agent Security & Governance Platform for the Enterprise | ZenityZenity · undated page, accessed October 30, 2026 · Tier A
  5. [5]AI Observability | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Model Context Protocol (MCP) | ZenityZenity · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Security Posture Management | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  8. [8]Runtime Boundaries | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Detection and Response (AIDRZenity · undated page, accessed November 10, 2026 · Tier A
  10. [10]Agentic Identity & Access Management: Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  11. [11]Securing Financial Services AI | Zenity, Microsoft & SlalomZenity · undated page, accessed November 10, 2026 · Tier A
  12. [12]Company | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A
  13. [13]Zenity Security Assessment Hub | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A
  14. [14]Zenity Raises $125 Million to Secure the Era of 1 Billion AI AgentsZenity · published August 3, 2026 · Tier A
  15. [15]Zenity Named a Market Shaper in Gartner’s Inaugural Emerging Market Quadrant for AI Application SecurityZenity · published September 23, 2026 · Tier A
  16. [16]Zenity Announces Availability of Inline Agent Runtime Security for Agents Built on Microsoft FoundryZenity · published March 17, 2026 · Tier A
  17. [17]Zenity and Carahsoft Bring AI Agent Security and Governance to Federal, State and Local AgenciesZenity · published June 17, 2026 · Tier A

Spot a factual error? Request a correction.