Salt Security
Salt Security sells a platform that finds and protects APIs from attack and abuse.
On the record
Checkpoint: 12-month window to announce a new funding round or acquisition before cash runway questions grow louder
The call
Salt Security still has real customers and revenue, but it's stuck between AI eating its core detection tech and bigger rivals buying their way into its market, with no new funding to prove otherwise.
Salt Security sells software that finds and stops attacks on application programming interfaces, the connections that let apps talk to each other. The company has real customers and revenue, but has not raised new money in nearly four years, its website traffic dropped sharply, and its core job of spotting hidden threats is becoming something any major tech company can build into their own tools. The one thing that could turn this around is either a strong new investor betting on the company, or proof that Salt's newer work with AI agents becomes so useful that the big competitors cannot catch up fast enough.
Why
01
AI pressure: Hyperscaler-native and CNAPP-native AI tools (AWS, Google, Wiz). AI-driven anomaly detection and API discovery, Salt's original core, is becoming a built-in cloud feature instead of a separate purchase. Could AI do the core job? Yes, likely.
02
Bigger players: Akamai (post-Noname), Thales/Imperva, Harness/Traceable, Wiz/Google. Well-funded rivals bought their way into API security and bundle it into platforms Salt cannot match on scale. Could a giant copy it? Yes, easily.
03
What protects it. Fortune 500 contracts and workflow lock-in from years of embedded API traffic data give switching costs, but that's eroding.
What would change this call
Salt Security announces a new priced funding round within 12 months. Would show whether investors still value the company above or below its 2022 $1.4B mark.
Akamai, Wiz/Google, or CrowdStrike ship native MCP/agentic-security governance features. Would show Salt's MCP pivot is being absorbed into bundled platforms rather than staying a differentiator.
Salt Security is acquired or enters a formal sale process. Would confirm consolidation pressure won out over independent growth.
Akamai, Wiz/Google, or CrowdStrike ship native MCP/agentic-security governance features. Would show Salt's MCP pivot is being absorbed into bundled platforms rather than staying a differentiator.
Salt Security is acquired or enters a formal sale process. Would confirm consolidation pressure won out over independent growth.
Key numbers
- No new funding round in 46 months
- Web traffic down 39% QoQ
- Est. $75M revenue, 2025
Named risks
- No new priced funding round publicly disclosed since Series D closed 2022-02-09.
- Category consolidating around well-capitalized incumbents (Akamai, Thales, Harness) that bundle API security natively.
- Core ML-based API discovery and anomaly detection increasingly commoditized by AI-native cloud and CNAPP tooling.
- MCP governance opened to Linux Foundation in December 2025, reducing proprietary lock-in of Salt's agentic pivot.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Akamai (Noname Security) | gaining on | Acquired Noname Security for ~$450M in June 2024, bundling API security into edge platform |
| Thales (Imperva) | gaining on | Acquired Imperva in 2023, adding API security to broader data and app security portfolio |
| Harness (Traceable) | gaining on | Traceable merged into Harness in early 2025, now marketed as Harness API Security |
| Wiz / Google | contesting | Salt partnered with Wiz in May 2025 around Google's Wiz acquisition, an ambiguous coopetition |
| CrowdStrike | contesting | CrowdStrike is both a Salt investor and marketplace partner while building its own platform reach |
Questions people ask
- Is Salt Security profitable in 2026?
- No public financials confirm profitability. Salt Security last disclosed funding was a $140M Series D at a $1.4B valuation on 2022-02-09, and no new priced round has been publicly announced since, making current financial health hard to verify independently.
- Could AI replace Salt Security's core product?
- Salt's original strength, ML-based API discovery and anomaly detection, is the kind of pattern-matching task frontier AI copilots and CNAPP-native tools increasingly absorb. Its 2025-2026 pivot to MCP and agentic security rides an open standard, since Anthropic donated MCP governance to the Linux Foundation in December 2025.
- Who is Salt Security's biggest competitor?
- Akamai, which acquired rival Noname Security for roughly $450M in June 2024, folding API security into its edge platform. Thales absorbed Imperva in 2023 and Harness merged with Traceable in early 2025, all consolidating the category around bigger incumbents.
- Who owns Salt Security?
- Salt Security is privately held and venture-backed, with no IPO or acquisition on record as of mid-2026. Its 2022-02-09 Series D was led by CapitalG (Alphabet's growth fund), with prior backers including Advent International, Sequoia Capital, and CrowdStrike Falcon Fund.
- Has Salt Security raised new funding recently?
- No new priced funding round has been publicly disclosed since its $140M Series D closed on 2022-02-09 at a $1.4B valuation. Prior rounds included a $70M Series C led by Advent International in May 2021 and a $20M Series A in May 2020.
- What is Salt Security's flagship product now?
- Salt launched the Agentic Security Platform on 2026-03-18, described as the industry's first to secure the 'Agentic Security Graph' spanning LLMs, MCP servers, and APIs. It followed with Salt Code in June 2026 and a 100-policy Policy Hub on 2026-07-20.
Timeline
- 2026-07-20Launched Salt Policy Hub with 100 governance policies for APIs, MCP servers, agent permissions
- 2026-06Launched Salt Code, extending governance to AI coding assistants and AI-generated code
- 2026-03-18Launched Salt Agentic Security Platform covering LLMs, MCP servers and APIs
- 2025-12Anthropic donated MCP governance to Linux Foundation's Agentic AI Foundation
- 2025-09Introduced MCP server discovery capability
- 2025-04-28Launched Salt MCP Server for natural-language API inventory interaction
- 2025-01Traceable merged into Harness, becoming Harness API Security
- 2024-06Akamai acquired competitor Noname Security for approximately $450M
- 2023Thales acquired Imperva, folding API security into broader portfolio
- 2022-02-09Raised $140M Series D led by CapitalG at $1.4B valuation
- 2021-05Raised $70M Series C led by Advent International
- 2020-05-12Raised $20M Series A financing
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Salt Security Raises $140 Million Series D Round Funding (2022-02-09)
- Salt Security Revenue 2025 (2025-11-29)
- Salt Security - Headcount, Funding & Open Jobs (2026-06-25)
- Management and Employees List
- API Startup Salt Security Raises $140M To Strengthen Channel
- Buyer's Guide: API Security Platforms (2026-06-24)
- Salt Security Alternatives (2026-04-09)
- Model Context Protocol (MCP) (2026-07-09)
- Salt Security Launches Model Context Protocol (MCP) Server (2025-04-28)
- Salt Security Introduces the Industry's Largest Policy Library for Agentic AI Governance (2026-07-20)
- Salt Security Launches Industry's First Agentic Security Platform for the AI Stack (2026-03-18)
- Products, Competitors, Financials, Employees, Headquarters Locations (2026-06-11)