Salt Security Enhances CrowdStrike Integrations for Better AI Agent Monitoring and Control

Salt Security Enhances CrowdStrike Integrations

In a significant advancement for enterprise security, Salt Security has revealed expanded integrations with the CrowdStrike Falcon platform. This integration bridges Salt’s Agentic API platform with several CrowdStrike offerings, including Falcon Foundry, Next-Gen SIEM, and Firewall Management. Together, these enhancements aim to provide clients with greater visibility and management capabilities over the activities of AI agents operating in their environments.

The Growing Need for AI Visibility

As organizations increasingly adopt AI technologies, the usage of AI agents has transitioned from experimental to vital operational elements. These agents, equipped with credentials, connect with internal systems via MCP servers and invoke APIs, often taking actions that impact business operations directly. Given this context, security teams face the pressing need to monitor API interactions and the connections enabled by these agents thoroughly.

The collaboration between Salt Security and CrowdStrike dates back to 2022 when CrowdStrike's Falcon Fund invested in Salt Security. Since that time, both companies have successfully launched a certified Salt application on CrowdStrike Falcon Foundry and introduced a native integration with the Falcon Next-Gen SIEM. The latest initiatives expand upon these early developments, focusing specifically on the activities of AI agents.

Unified Security Framework for AI Agents

With the certified Salt application on Falcon Foundry, organizations can deploy Salt without needing additional gateways or proxies. This allows seamless integration using existing Falcon sensors. As a result, joint customers can more efficiently identify AI agents' operational parameters, from the MCP servers they leverage to the APIs they invoke and the associated permissions. This includes uncovering public-facing MCP servers and integrations lacking proper review, thus highlighting potential vulnerabilities.

Additionally, findings from this integration are funneled into the Falcon Next-Gen SIEM, enhancing security context by correlating agent activity with endpoint data, identity metrics, and cloud telemetry that users already collect through Falcon. This comprehensive data model enables organizations to pinpoint when agent behaviors deviate from established norms, allowing proactive resolutions through automated responses in Falcon Firewall Management.

As a result, joint clients benefit from a centralized solution to monitor which AI agents are active, their connections, and whether their operational conduct aligns with set permissions. This approach not only fosters real-time security oversight but also facilitates compliance and risk management as enterprises navigate a landscape that increasingly integrates AI technologies into daily operations.

Expert Insights

Roey Eliyahu, co-founder and CEO of Salt Security, emphasized the significance of monitoring within this rapidly evolving digital domain. According to Eliyahu, many enterprises can enumerate the AI agents they have sanctioned, but far fewer possess the capability to trace the actions those agents undertake within their operations. “An agent may start with a legitimate prompt, but risk can emerge later through an over-permissioned tool, an MCP connection, or an API call,” he noted. By synergizing Salt's capabilities with CrowdStrike’s AI-driven platform, they aim to furnish customers with enhanced oversight of agent activities across their entire enterprise.

For customers looking to delve deeper into these integrations, additional information can be found on the CrowdStrike Marketplace and the Salt Security website.

About Salt Security

Founded in 2016, Salt Security has emerged as a frontrunner in Agentic and API Security. The firm is dedicated to safeguarding leading-edge enterprises from potential threats posed by AI agents and API interactions. Its comprehensive strategy includes the ability to discover all operational agents, their connections, and APIs, preemptively halting attacks while mitigating vulnerabilities before they manifest in production environments. With backing from esteemed investors like Sequoia Capital and others, Salt Security continues to shape the future of cybersecurity in an increasingly AI-dominated landscape.