Never worry about your APIs again
APIs are the dominant target in today's modern app landscape
APIs have been around for over two decades and have evolved significantly APIs today expose more sensitive data than ever before, making them
since the early days. In recent years, use has exploded, with APIs becoming a valuable target for attacks and organizations are becoming aware of
increasingly prevalent in the application environments of all businesses the need for API security. Traditional tools like web application firewalls
to enable rapid development, fuel digital transformation, and connect (WAFs) and API gateways are limited by architecture and lack the context
customers and partners with services. required to identify and stop attacks targeting APIs.
Why API security is harder and more critical
Increased use of APIs, Greater exposure of More frequent API changes
growing the attack surface sensitive data thanks to agile development
Salt - the context you need to protect all your APIs
Salt Security protects the APIs that form the core of every modern application. Only Salt provides the architecture needed to protect
APIs across build, deploy, and runtime phases. The Salt C-3A Context-based API Analysis Architecture combines complete coverage with
an ML/AI-driven big data engine. The Salt platform taps that rich context to discover all APIs, stop attackers during their early stages,
and share remediation insights to improve API security posture.
Key capabilities of the Salt platform
Discover all APIs and Improve API
exposed data Stop API attackers security posture
The Salt platform automatically inventories all Pinpoint and stop threats to APIs with Salt's The Salt platform proactively identifies
APIs, including shadow and zombie APIs, across patented AI technology that baselines legitimate vulnerabilities by analyzing your APIs and API
all application environments. Salt also highlights behavior and identifies attackers in real time, documentation to identify gaps even before
all instances where APIs expose sensitive data. during reconnaissance, to prevent them from your APIs serve production traffic. Salt also uses
Continuous discovery ensures APIs stay protected advancing. The Salt platform correlates all attackers like pen testers, capturing their minor
even as environments evolve and change as a result activities back to a single entity, sends a single successes to provide dev teams with insights for
of agile methodologies and DevOps practices. consolidated alert to avoid alert fatigue, and blocks remediation. Insights from Salt enables continuous
the attacker -- not just transactions. improvement of your API security posture while
not slowing down the speed of development.
Salt Use Cases
Discover Prevent Sensitive Prevent Account
Shadow APIs Data Exposure Stop API Attacks Takeover
Prevent Data Reduce Provide Remediation Simplify
Exfiltration Investigation Time Insights Compliance
The Salt Architectural Advantage
Complete coverage - Salt collects all API traffic
– across load balancers, API gateways, WAFs,
Kubernetes clusters, cloud VPCs, and app servers
- to dynamically provide a full inventory. Salt is
deployed with no app or network changes and
requires no configuration or tuning.
AI-powered big data engine - Every API is unique.
ML and AI are applied in the Salt big data engine
to baseline APIs and isolate anomalous behavior,
differentiating between changes to APIs and
malicious activity to pinpoint attackers and avoid
false positives.
Context-based detection - Salt combines complete
coverage and a big data engine to discover all APIs,
see the sensitive data they expose, find and stop
attackers, and capture insights for development
teams to improve API security.
Quick setup, not inline,
no agents, no configuration
Unlike traditional, intrusive proxy deployments that add latency and can cause service disruption, Salt has a DevOps friendly setup.
Salt does not deploy inline and supports a variety of quick and easy setup options including API gateway integrations, containers
(Docker, Kubernetes, etc.), and support through traffic mirroring on-prem or from the cloud.
Supported platforms and technologies
API gateways and management Server and microservices infrastructure SIEMs and incident response
Proxies and network devices DevOps integration
Cloud environments API technologies
Any HTTP web traffic
REST (JSON)
SOAP (XML)
Salt Security protects the APIs that are at the core of every modern application. The Request a demo today!
company's API Protection Platform is the industry’s first patented solution to prevent
[email protected]
the next generation of API attacks, using behavioral protection. Deployed in minutes, the
AI-powered solution automatically and continuously discovers and learns the granular
www.salt.security
behavior of a company’s APIs and requires no configuration or customization to prevent
API attacks.
DS-060721
