Salt Security
Runtime API security that discovers shadow and zombie APIs, then spots business-logic abuse in live traffic.
Proof of life. Published a year of monthly API and AI security releases, December 2025
About Salt Security
Salt inspects production API traffic to build an inventory of documented, shadow, and forgotten endpoints, then baselines caller behavior. The useful part is BOLA and auth-bypass detection that a WAF signature will never write.
The 2025 product line extends that graph to MCP servers and agents, treating the API action layer as the place AI actually touches data.
Investors
SequoiaCapitalGCrowdStrike Falcon FundY Combinator
Work at Salt Security? Link to this listing
Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.
<a href="https://securitystartups.com/companies/salt-security"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>