Salt Security secures APIs, the interfaces that now carry the majority of traffic between modern applications. As companies decomposed monoliths into services and exposed functionality to partners and mobile clients, the attack surface shifted from the network perimeter to thousands of individual endpoints, most of them undocumented and changing weekly. Traditional gateways and web application firewalls inspect single requests against static rules, which is the wrong shape for abuse that only becomes visible across a sequence of otherwise legitimate calls.

The company’s approach is behavioural: build a live inventory of every API in an environment, learn the normal shape of traffic for each one, and flag the reconnaissance and business-logic abuse that signature-based tools miss. That means discovery of shadow and zombie endpoints as much as detection. Backed since 2020 and valued at 1.4 billion dollars, Salt operates in a category that grows automatically as software architecture keeps fragmenting. Every new service a customer ships adds endpoints to protect, which makes the installed base expand without additional sales effort.