Salt Security provides an API security platform designed to protect APIs throughout their lifecycle. The platform addresses API discovery, posture management, threat detection, and data security across cloud environments and microservices architectures. The company's platform consists of four main components: Salt Surface for external API attack surface mapping, Salt Connect for automated API discovery and inventory management, Salt Protect for runtime threat detection and prevention, and Salt Collect for API traffic analysis and data exposure monitoring. The platform identifies shadow APIs, zombie APIs, and third-party APIs across environments without requiring agent deployment. Salt Security focuses on detecting behavioral and logic-based API attacks, including broken object level authorization (BOLA), business logic abuse, and session-based threats. The platform uses AI-driven, intent-based detection methods to identify attacks that signature-based tools cannot detect. It monitors API traffic in real-time to understand user behavior and API usage patterns. The platform addresses AI agent security by discovering shadow Model Context Protocol (MCP) servers, mapping AI-driven API calls, and detecting prompt manipulation attempts. It tracks sensitive data in motion across APIs to identify exposure risks and enforce data protection policies for compliance with PCI DSS, HIPAA, and GDPR requirements. Salt Security serves enterprise customers who need to manage API security across multiple clouds, environments, and microservices. The platform provides posture assessment, compliance enforcement, and governance capabilities for organizations with complex API infrastructures.