#United States #Palo Alto #API Security #Salt Security #Autonomous Defense

Salt Security Strengthens Its Agentic Security Platform with Autonomous Defense

In a bold move within the cybersecurity landscape, Salt Security has just introduced Autonomous Defense, a powerful new feature for its Agentic Security Platform. This enhancement, enabled by an expansion of the Salt Workflows framework, marks a significant step towards automating threat response and risk management across various enterprises.

Traditionally, security teams have concentrated on refining their detection capabilities. However, simply detecting threats does not equate to resolution. Often, when a potential risk, such as a vulnerable API or a suspicious activity, is identified, the response relies heavily on manual intervention and coordination among various, often disconnected, systems. This lag in response time can itself pose an additional security risk as AI technologies accelerate the unveiling and exploitation of vulnerabilities.

Aner Gelman, VP of Product at Salt Security, asserts, "Security cannot move at ticket speed when attackers move at machine speed. Autonomous Defense transforms Salt's security intelligence into actionable measures—from blocking malicious activities, revoking access deemed risky, to enforcing protective protocols across the systems already in use by enterprises."

Moving from Detection to Action

Autonomous Defense is built upon the extensive capabilities of the Salt Agentic Security Platform. With the Agentic Security Graph, which connects various AI agents, Management Control Plane (MCP) servers, and downstream APIs, the platform gathers context from exposure data, source code, configuration, and runtime behaviors. This rich intelligence enables the identification of potentially dangerous paths while informing organizational policies that guide the actions companies choose to enforce.

With the integration of Salt Workflows, security teams are empowered to take several critical actions to enhance their responses, including:

• - Revocation of Risky Agent Access: Disabling unauthorized MCP connections, quarantining shadow tools, or curbing excessive permissions via controlled management systems.
• - Blocking Active Exploits: Implementing targeted blocking protocols or virtual protections through existing Web Application Firewalls (WAFs), API gateways, and other preventative infrastructures.
• - Enforcing Data Protections: Updating guardrail policies to block hazardous requests or redact confidential data through associated gateways.
• - Remediation of Security Posture Gaps: Initiating configuration changes to close exposed APIs or restore approved security settings.

Enhanced Response Times

Before the advent of Salt Autonomous Defense, the workflow for security teams often looked like this: Detecting a threat would typically lead to manual triage, the opening of a ticket, and the resultant risk would remain unresolved until action was taken. However, with the autonomous approach, the sequence changes dramatically. The detection integrates seamlessly with advanced workflows, enabling teams to block, revoke, or remediate issues actively and efficiently.

Notifications, audit logging, SIEM enrichment, as well as ServiceNow or Jira ticketing systems, will still play a role in the overall workflow but are now an integral part of a proactive response, aimed at containing threats before they escalate.

Customizable Automation and Controls

One of the groundbreaking features of this new enhancement is the flexibility built into the platform. Security teams can determine which conditions warrant immediate action, which require approval, and which enforcement points should be utilized. This meticulous approach allows organizations to respond swiftly while maintaining the necessary control over sensitive areas and preserving comprehensive audit trails.

Salt has also included a user-friendly, visual workflow builder integrated into the Agentic Security Platform. Featuring over 200 pre-built connectors and an array of Salt-created integrations, organizations can create tailored enforcement, governance, and remediation workflows without needing extensive custom coding.

These workflows can extend across security layers, infrastructure, IT systems, and collaborative environments, negating the necessity for a unified gateway, agent framework, or specific response product.

Closing the Gap on AI Speed

In an ever-evolving digital environment, the ability for system integrations to perform continuous actions is paramount. Concurrently, offensive AI capabilities can escalate discovery and exploitation rates of vulnerabilities. Salt combines the Agentic Security Graph, posture intelligence, runtime detection, and automated enforcement to allow security teams to transition from the mere identification of risks to prompt action within the same operational framework.

As Roey Eliyahu, Co-founder and CEO of Salt Security, firmly states, "An alert doesn’t stop an attack. Action does. The Autonomous Defense tool empowers teams to stop attacks and secure paths before they inflict significant business consequences."

The rollout of Salt Workflows, inclusive of the Autonomous Defense feature, is currently available for Salt Security customers, with plans for migrating existing workflows to this cutting-edge experience while accounting for specific customer requirements.

About Salt Security

Founded in 2016, Salt Security has established itself as a leader in agentic and API security, providing robust protection for some of the world’s most innovative enterprises against AI agent and API attacks. The Salt Agentic Security Platform is adept at discovering agents, MCP servers, and APIs within an environment, governing interactions and permissions, and monitoring agent behavior during runtime to eliminate vulnerabilities before they reach production. The company has garnered backing from notable investors including Sequoia Capital and Salesforce Ventures.