Key Capabilities / Features

The Salt platform utilizes cloud-scale big data combined with AI and ML to correlate activities across millions of APIs and users over time. With these context-based insights, Salt enables organizations to detect the reconnaissance activity of bad actors and block them before they can reach their objective, ensuring the safety of their and their customers’ critical data.

In April 2023, Salt announced new enhancements to its platform:

- Enhancements to core AI models – processes more API data faster into its patented API Context Engine (ACE) architecture, improving API threat detection and discovery.
- Improved user intent detection – quickly and accurately detects when an API user exhibits malicious intent, reducing false positives while ensuring accurate identification of true positives.
- New threat severity analytics – enabling security teams to differentiate between high-vs.low-severity attacks to focus on the greatest threats.
- New Rapid Investigation mode – identifies and highlights the most critical malicious attack events.
- Advanced API discovery at scale – provides more accurate mapping of API endpoints to make it easier to inventory and understand APIs at scale.

With its latest platform expansion in January 2024, Salt delivers:

- Industry's first API posture governance engine - helps organizations minimize risk, giving the ability to author corporate standards for API posture, and assess compliance with those standards, industry best practices, and regulatory requirements.
- New API filtering and querying capabilities - provides context rich API asset discovery and management, helping organizations mine more intelligence from discovered API assets.
- Enhanced behavioral threat response capabilities - provides SecOps personnel with capability to more effectively prioritize, triage, and analyze API-related security events, drastically reducing mean time to respond and resolve.
- New ecosystem enrichment capabilities - will share API intelligence with the broader lifecycle ecosystem.
Enterprise onboarding and operationalization improvements - reduces API risk quickly with minimal operational friction.

How we are different

Salt provides the industry's first API posture governance engine, helping organizations govern their API-first journeys using API intelligence to discover and effectively manage API assets, and ensuring that corporate standards and industry best practices are followed throughout an API's lifecycle. Salt is the only API security company to deliver AI-based API security, advanced discovery and innovative posture gap analysis, which is needed to unlock the intelligence discovered within APIs.

Unlike its competitors, Salt is the only platform on the market that applies cloud-scale big data to address API security challenges. Only Salt can capture and baseline all API traffic -- all calls and responses -- over days, weeks and even months. Salt applies its AI and ML algorithms, which have been in the market for over four years, to provide real-time analysis and correlation across billions of API calls. You need that level of context to provide rich discovery, accurate data classification, and to identify and stop “low and slow” API attacks which occur over time. No on-prem solution has the data capacity to catch today's sophisticated attacks in the wild, such as a single parameter BOLA attack.

Unlike any other offering on the market, the Salt platform provides both runtime protection and developer insights, enabling companies to ensure that data and services are immediately protected even while developers harden APIs. The Salt approach also enables a complete and up-to-date inventory of all APIs to help customers eliminate blind spots, assess risk, and determine sensitive data exposure - even as APIs are updated or new APIs are added to the environment.