← Directory
Salt Security
Runtime API security that discovers shadow and zombie APIs, then spots business-logic abuse in live traffic.
Proof of life. Published a year of monthly API and AI security releases, December 2025
Salt inspects production API traffic to build an inventory of documented, shadow, and forgotten endpoints, then baselines caller behavior. The useful part is BOLA and auth-bypass detection that a WAF signature will never write. The 2025 product line extends that graph to MCP servers and agents, treating the API action layer as the place AI actually touches data.
- Category
- API and runtime
- Headquarters
- Palo Alto, United States
- Country
- United States
- Founded
- 2016
- Funding stage
- Series D
- Total funding
- $281M
- Website
- https://salt.security
Investors
SequoiaCapitalGCrowdStrike Falcon FundY Combinator
Tags
Series DUnited States
Proof-of-life verified against this source. Outbound clicks are tokenized for directory analytics.