Salt Security provides an API security platform that protects software by monitoring API traffic, discovering all APIs (including shadow and zombie APIs), identifying vulnerabilities, and blocking attackers to speed up incident response. It is delivered as a cloud-based subscription service. Salt Labs is an in-house security research team focused entirely on API security, sharing findings with clients to help harden their defenses. Its goal is to help organizations securely run API-driven software by maintaining visibility over all APIs and reducing risk from threats.
Work here?Claim your company
Industries
Company Size
201-500
Company Stage
Series D
Total Funding
$270.1M
Headquarters
Palo Alto, California
Founded
2018
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$270.1M
Above
Industry Average
Funded Over
6 Rounds
Industry standards
Company Equity
Wellness Program
Remote Work Options
Professional Development Budget
Salt Security extends its Agentic Security Platform with Native AI Detection and Response. Sep 22, 2026, 08:00 ET New LLM runtime protection connects prompt injection to downstream MCP and API attacks, while helping enterprises close gaps in existing AI protection PALO ALTO, Calif., Sept. 22, 2026 /PRNewswire/ - Salt Security, the leader in agentic and API security, today announced native AI Detection and Response (AI-DR) capabilities within the Salt Agentic Security Platform. The new capabilities provide real-time LLM protection against direct and indirect prompt injection, jailbreak attempts, unsafe model behavior, and other runtime threats. Prompt injection is the top ranked risk in the OWASP Top 10 for LLM Applications 2026, and it takes two forms, direct and indirect, both of which the new capabilities detect in real time. Salt also brings the AI guardrails and gateways enterprises already use into one security view, helping teams apply consistent protection across models, agents, MCP servers, tools, and downstream APIs. Protecting the full agentic path AI agents connect models to tools and business systems. An attack that starts with a malicious prompt can expose those connections and lead to unauthorized access or actions downstream. This is not hypothetical: in Salt Security's 2H 2026 State of Agentic AI and API Security survey, nearly half of organizations (49.8%) confirmed or suspected that an AI agent took an action they did not intend, expect, or authorize in the past year, and only 12.5% can consistently trace an agent's full path from the initial prompt through the MCP servers and APIs it reaches. Security teams need to see how an attack moves across these layers to understand what is at risk. AI-DR is built into Salt Agentic Detection and Response (AG-DR), extending its runtime protection to the LLM layer. The Salt Agentic Security Graph connects agents to their models, Model Context Protocol (MCP) servers, tools, and downstream APIs. With native AI-DR, teams can connect an attack against the model to subsequent MCP and API attacks in the same platform. AG-DR and Agentic Security Posture Management (AG-SPM) form the Salt Agentic Security Platform. AG-SPM helps teams understand their agents and security gaps, while AG-DR detects and connects attacks across those agents and the systems they use. Seeing how AI attacks reach business systems For example, an attacker could trick a billing agent into revealing information about a refund tool on an MCP server and the API behind it. The attacker could then exploit that API - directly or through the agent to attempt unauthorized refunds. What began as a malicious prompt has become an attack on a payment system. Salt shows these steps together, from the prompt injection through the MCP server to the API attack. Security teams can see how the attack started, what it targeted, and which business systems are at risk, even when the attacker moves beyond the agent to attack an API directly. Unified Visibility Across AI Guardrails and Native Protection Where Coverage Is Missing Enterprises use AI guardrails across cloud platforms, endpoint and SASE solutions, AI gateways, and managed AI services. Each control protects the interactions it covers, leaving teams to identify inconsistencies and gaps across environments. Through AG-SPM and the Agentic Security Graph, Salt gives teams one view of these guardrail configurations and the agents they protect. Where protection is missing, including in homegrown agents running in Kubernetes, Salt can fill the gap with native AI-DR within AG-DR. Customers can establish more consistent protection while keeping their existing gateways and security products. "An attack on an AI model can become an attack on the systems that run the business," said Roey Eliyahu, co-founder and CEO of Salt Security. "Our native AI-DR protects LLM interactions and connects what happens at the model to the tools and APIs downstream. Teams can see the full attack, understand what is at risk, and fill protection gaps while keeping the guardrails they already use." Availability Native AI-DR capabilities are available within Salt AG-DR as part of the Salt Agentic Security Platform. Visit salt.security/demo-request for more information. About Salt Security Salt Security is the leader in agentic and API security, protecting the world's most innovative enterprises from AI agent and API attacks. AI is shifting from chatbots that answer to agents that act, and Salt secures the entire agentic path, from AI-generated code to runtime, across models, MCP servers, tools, and downstream APIs. Founded in 2016, Salt Security is backed by Sequoia Capital, S Capital, Tenaya Capital, Salesforce Ventures, Advent International, and other leading investors. For more information, visit salt.security. SOURCE Salt Security
Salt Security secures $70 million in Series C funding, led by Advent International with participation from Alkeon Capital and DFJ Growth. Learn more.
Salt Security has launched the first AWS WAF managed ruleset designed to protect both APIs and AI agents. Announced at Black Hat USA 2026, the ruleset is available through the AWS WAF Partner Managed Rules programme in AWS Marketplace. The Salt Managed Rules feature industry-first Model Context Protocol awareness, identifying traffic from MCP endpoints and blocking unauthenticated access. The ruleset also includes advanced API threat detection, blocking attack vectors such as credential brute force, excessive GraphQL queries, and JWT-based anomalies. AWS WAF customers can attach the ruleset to existing web ACLs directly from the AWS console, with deployment taking minutes and requiring no additional infrastructure. The ruleset is available now in AWS Marketplace across all commercial AWS Regions and globally via Amazon CloudFront.
Salt Security: 100 policies secure enterprise AI agents. 1h ago · 0:00 listen · Source: TipRanks Summary. Salt Security has launched a 100-policy Salt Policy Hub to govern enterprise AI agents and their APIs. This new library expands its Agentic Security Platform. The Policy Hub acts like an app store for security teams. It offers pre-built controls for data security, server configuration, and agent authorization. Of these policies, 61 activate automatically, providing immediate baseline protection. More than a dozen policies specifically address AI agent risks, such as misconfigured servers and unauthorized behavior. These are mapped across eight major compliance frameworks. This framework helps security teams avoid designing policies from scratch. It also extends Salt Security's Agentic Security Graph model, linking large language models, servers, APIs, and enterprise systems into one governance layer. This means comprehensive API posture governance becomes agent governance. The full Policy Hub is available to all customers of the Salt Agentic Security Platform. This update aims to strengthen Salt Security's role as a key control provider for agentic AI. This is an AI-generated audio summary. Always check the original source for complete reporting.
Salt Security has launched in Australia with locally hosted infrastructure and a dedicated in-country team. The company deployed its Agentic Security Platform within Amazon Web Services' Sydney region, ensuring Australian customer data is processed and stored within the country's borders. The platform provides enterprises with visibility and governance across AI agents, MCP servers, and APIs. It discovers agents operating in an environment, monitors API behaviour, and provides security teams with posture management and audit capabilities. The Australian launch includes a local sales and technical team providing relationship management and support. Salt Security cited growing enterprise demand across Asia-Pacific for security solutions governing AI agent and API deployments. The company was founded in 2016 and is backed by investors including Sequoia Capital, Tenaya Capital, and Salesforce Ventures.
Find jobs on Simplify and start your career today
Industries
Company Size
201-500
Company Stage
Series D
Total Funding
$270.1M
Headquarters
Palo Alto, California
Founded
2018
Find jobs on Simplify and start your career today