Salt Security

No entries match these filters. Clear filters

1. announced Oct 28, 2026 · issue 127

   Salt Security adds Autonomous Defense to its Agentic Security Platform, letting Salt Workflows trigger blocking, access revocation, and remediation across connected controls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Salt Security now uses Salt Workflows to block active attacks at connected WAFs, API gateways, and other enforcement points when Salt detects exploitation in progress.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Salt Workflows can now revoke agent and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool access — disabling unauthorized MCP connections, quarantining shadow tools, or removing excess privilege — when Salt finds a risky agent configuration.
   • Salt Workflows can now update connected guardrail policies, block unsafe AI requests, or redact sensitive data through connected gateways to enforce AI and data protections at runtime.
   • Salt Security adds a visual drag-and-drop workflow builder directly into the Agentic Security Platform, with 200+ out-of-the-box connectors and a marketplace of integrations spanning security, infrastructure, IT, and collaboration systems.

   4 details in Everything

2. announced Sep 9, 2026 · issue 070

   Salt Claude Connect gives Claude Enterprise orgs continuous read-only visibility into connected MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers via Anthropic's Compliance API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Confirm your Claude organization UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. before entering it into Salt — retrieve it from any Compliance API activity record.
   copy

   $ curl -s "https://api.anthropic.com/v1/compliance/activities?limit=1" \
     -H "x-api-key: <your-compliance-access-key>"

   Connect Salt to your Claude Enterprise org so MCP server discovery starts immediately.
   📍In the Salt dashboard, go to Data Source Hub › Claude Connect tile. Enter your Compliance Access Key (sk-ant-...), your Organization ID (UUID from the organization_uuid field), and optionally an API Base URL (default: https://api.anthropic.com). Click Connect — Salt validates the key and runs an initial discovery scan.
   • Adds the Claude Connect integration in the Salt Data Source Hub, authenticating to Anthropic's Compliance API with a read:compliance_activities-scoped Compliance Access Key to continuously inventory organization-managed MCP servers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Polls Anthropic's Compliance API Activity Feed at https://api.anthropic.com/v1/compliance/activities to surface each MCP server's name, identity, status (active vs. removed), and lifecycle timestamps into the Salt Agentic inventory.
   • Discovered MCP servers appear in the Salt Agentic inventory labeled with the source Claude Connect, showing server name, status, and first- and last-seen times.

   3 details in Everything

3. Salt Debuts First AWS WAF Managed Ruleset for AI Agent and API Protection (2026-08-04) Aug 4, 2026 · issue 054

   Salt launches the first AWS WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. Partner Managed Ruleset purpose-built for API and AI agent protection, available now in AWS Marketplace.

   └──▷ HOW TO FIND IT
   Subscribe to and attach Salt Managed Rules to an existing AWS WAF web ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. to immediately gain API and AI agent threat protection.
   📍1. Open the AWS Console and navigate to AWS Marketplace. 2. Search for Salt Managed Rules for AWS WAF and subscribe. 3. Go to AWS WAF › Web ACLs and select your target ACL. 4. Choose Add managed rule groups, locate Salt Managed Rules, and attach it to the web ACL. 5. Save the ACL configuration — no new agents or architecture changes required.
   • Introduces Salt Managed Rules for AWS WAF, the first AWS WAF Partner Managed Ruleset built specifically to protect APIs and AI agents — subscribable from AWS Marketplace and attachable to existing web ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. with no new infrastructure.
   • Adds industry-first MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. endpoint awareness: identifies and labels MCP traffic, blocks unauthenticated MCP access, and provides observability into MCP interactions inside AWS WAF environments.
   • Detects API-layer attack vectors missed by standard WAF rules — including credential brute force, excessive GraphQL queries, SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly., prototype pollution, and JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-based anomalies.
   • Enriches downstream analytics by labeling critical request attributes including auth headers, user identifiers, and GraphQL queries, flowing security signals into existing detection stacks.
   • Available across all commercial AWS Regions and globally via Amazon CloudFront.

   5 details in Everything