Securing the Agentic AI action layer: protecting the APIs, MCP servers, and agents powering modern digital business.
Palo Alto, CA
Joined August 2018
- Tweets6.8K
- Following908
- Followers4.9K
- Likes1.9K
Don’t miss out on our upcoming webinar Nov 4th! Our amazing speakers will be covering the following topics:
· Agents aren’t just chatbots with plugins
· How AI attacks are already playing out
· Why your current stack is blind and noisy
· What security must look like for agents
Save your seat today: events.salt.security/beyondt…
Less waiting ⛔ More defending 🛡️ A new era of agentic security is here with Autonomous Defense! 🧂
Powered by expanded Salt Workflows, Autonomous Defense takes security beyond detection, turning intelligence into action to block malicious activity. With Salt Workflows and connected controls, security teams can:
• Revoke risky agent and MCP tool access
• Enforce AI and data protections
• Remediate posture gaps
Attackers are moving at machine speed so why should your defense move at ticket speed? See the full story: salt.security/press-releases…
Check out the blog: salt.security/blog/an-alert-…
Your AI coding assistant can write an entire application, but can it tell you what's in your company's security policy? Spoiler alert: Probably not.
AI coding assistants are accelerating development, but they don't automatically know your organization's authentication standards, compliance requirements, or API security policies. And when AI-generated code becomes the foundation for APIs, MCP servers, and agentic workflows, those security gaps can become real-world risks.
That's why Salt Code brings security policies directly into AI coding workflows, helping developers build securely from the very first prompt 🔒
Your security standards shouldn't be collecting dust in a wiki while AI writes your next application.
Discover more > salt.security/blog/your-ai-c…
AI-generated code is moving fast. Is your security keeping up? 👀
Salt Code brings security directly into the AI coding assistants developers already use, including Cursor, GitHub Copilot, Claude Code, and other MCP-compatible tools.
With 140+ pre-built policies covering OWASP, API, MCP, and LLM risks, plus support for custom rules, Salt Code helps teams catch insecure patterns before they make their way into the development pipeline.
🔒 Enforce security policies directly within AI coding workflows
⚡ Reduce vulnerabilities before they reach production
🛠️ Empower developers to build securely without slowing down innovation
The best time to secure AI-generated code is before it's written.
Already a Salt Security enterprise customer? Salt Code is included in your plan at no additional cost.
Learn more about Salt Code > youtube.com/watch?v=gQpw1sGD…
Check out the page for more information > salt.security/code?utm_sourc…
Zero-days don't wait for patches so why should your security?
The recent PHP2Shell vulnerabilities are a reminder that attackers don't need much time to cause serious damage, and when traditional WAF signatures are still catching up, every second counts.
So, how do you stop an attack before a signature even exists? Our latest blog explores the dangerous "patch gap" and how Salt uses behavioral intent detection to stay ahead of evolving threats.
Get the full scoop → salt.security/blog/bridging-…
Salt Security retweeted
🏆Huge congratulations to #SaltSecurity on winning Top Infosec Innovators at Cyber Defense Con 2026! Your bold vision, relentless innovation, and game-changing impact are redefining cyber resilience. Truly well-deserved. The industry is stronger with you! #CDCon2026 #CDMAwards
We’re very excited to announce that Salt Security has been named a winner of the Coveted Top InfoSec Innovator Awards for 2026!
We’ve been recognized across three categories in @cyberdefensemag 's 14th Annual InfoSec Awards at CyberDefenseCon 2026:
🏅 Most Promising Agentic AI Security Solution
🏅 Trailblazing AI-based Cybersecurity Innovation
🏅 Transformational API Security Solution
See the entire list: cyberdefenseawards.com/top-i…
Read the full story: salt.security/press-releases…
Behind every milestone is a team of diligent people pushing the boundaries of what’s possible. Thank you so much to our incredible employees, customers, and partners 💜
We’ve got an informative webinar coming up, are you tuning in?
On November 4th, our speakers will be looking into what recent incidents mean for keeping organisations safe.
Topics:
· Agents aren’t just chatbots with plugins.
· How AI attacks are already playing out
· Why your current stack is blind and noisy
· What security must look like for agents
Sign up today > events.salt.security/beyondt…
Salt Security retweeted
Nearly 50% of respondents in a @SaltSecurity study reported suspected or confirmed unexpected AI agent activity, yet only 17.5% could automatically stop misbehaving agents.
Explore the risks behind these findings 👇
#AgenticAI #Cybersecurity #AISecurity
pureai.com/articles/2026/10/…
Salt Security retweeted
Nearly Half of Organisations Report Unauthorised #AI Agent Actions, Research Finds
buff.ly/0gfzOXQ
@IT_SecGuru @SaltSecurity #tech #cybersecurity #business #leadership #management #governance #CISO #CIO #CTO #CEO #cyberthreats #cyberattacks #databreaches #AgenticAI
Salt Security retweeted
Nearly Half of Organisations Report Unauthorised #AI Agent Actions, Research Finds
buff.ly/0gfzOXQ
@IT_SecGuru @SaltSecurity #tech #cybersecurity #business #leadership #management #governance #CISO #CIO #CTO #CEO #cyberthreats #cyberattacks #databreaches #AgenticAI #AIrisks
The data is in. Are you ready?
Our newly released State of Agentic AI and API Security Report explores the risks, realities, and research shaping the next era of cybersecurity.
Explore the report 🔍 → content.salt.security/Stateo…
Are your APIs meeting Australia's CPS 234 security requirements? 🇦🇺
As AI agents become more integrated into business operations, maintaining visibility, security, and compliance is more important than ever.
In our latest blog, we explore how CPS 234 applies to APIs and AI agents, the challenges organizations face, and what it takes to demonstrate effective security controls: salt.security/blog/under-cps…
Salt's State of Agentic AI and API Security Report is here 🧂
Our latest research dives into the evolving threat landscape, emerging security gaps, and what organizations need to know as AI moves from thinking to acting.
The findings might surprise you 📊
Download the report here > content.salt.security/Stateo…
Read about it in the blog > salt.security/blog/agents-ar…
From prompt to action, @cybrrnick breaks down why runtime protection needs to extend across the entire agentic estate.
What that means in practice:
• Full-path visibility
• Prompt-to-API correlation
• Posture context
• Shadow LLM discovery
• One platform, not two vendors
Read the blog for the full story > salt.security/blog/your-ai-t…
Roey Eliyahu, Salt Security’s CEO and Co-Founder, had a great chat with Raviraj Solanki from IT TechPulse about how AI agents are changing the landscape of API security + the need for visibility across the entire agentic ecosystem.
Check out the entire convo > ittech-pulse.com/text-interv…
Salt Security retweeted
a single email was enough to make an AI agent execute code.
@SaltSecurity found that a malicious email could bypass @ManusAI's prompt-injection defenses using JavaScript obfuscation.
the architecture is the alarming thing here ig:
> email → agent → code execution → connected accounts
the flaw has reportedly been patched, so this is not an active exploit.
but it shows why agent security cannot stop at “did the model detect the prompt injection?”
for people building agents:
every connected tool is part of your attack surface.
salt.security/press-releases…
Salt Security retweeted
מנוס היא אחת מפלטפורמות ה-AI Agents הבולטות בשוק וזכורה בין היתר בעקבות המחלוקת סביב רכישתה על-ידי Meta והמעורבות הסינית בעסקה.
מחקר חדש של @SaltSecurity מציג כיצד הפלטפורמה הייתה פגיעה לחולשת Indirect Prompt Injection שאפשרה לתוקף להגיע להרצת קוד.
בואו לשרשור 🧵 >>
We're proud to announce that @NewAmericanTeam has selected Salt Security as its agentic and API security platform💜
As one of the nation's largest direct mortgage lenders, New American Funding handles some of the most sensitive data in financial services and their security team set a clear mandate when leadership accelerated AI adoption: security would be designed in from the start, not bolted on after the fact.
Jeff Farinich, EVP Technology Services and CISO at New American Funding, puts it well:
"We are deploying AI across the business because it drives real value for our customers and our teams. But AI agents operate differently than traditional software as they make decisions, chain tools together, and call APIs in ways that are hard to predict and harder to audit without the right platform. Salt Security gives us the visibility and control we need to say yes to AI with confidence."
The deployment covers thousands of APIs, continuously increasing, and the full AI agent footprint giving their team real-time visibility into every agent call, MCP server interaction, and API touch point across the business.
This is what responsible AI adoption in financial services looks like. Congratulations to the team at New American Funding!