Salt Security wins three InfoSec awards for AI risk

Salt Security has won three Top InfoSec Innovator awards from Cyber Defence Magazine, recognising its work in agentic AI security, AI-based cybersecurity innovation and API security.

The honours were awarded in the categories Most Promising Agentic AI Security Solution, Trailblazing AI-based CyberSecurity Innovation and Transformational API Security Solution.

The recognition comes as security vendors and corporate customers pay closer attention to the risks created by autonomous AI agents and the APIs they use to interact with software and data. Salt Security said the awards reflect two major security issues this year: the spread of AI agents without formal governance and the expanding API attack surface they operate across.

The company focuses on agentic and API security. It said its platform is designed to identify agents, MCP servers and APIs in an environment; govern connections and permissions; monitor agent behaviour during operation; and address vulnerabilities before production deployment.

Research findings

Salt Security also cited findings from its latest report on agentic AI and API security, based on a survey of more than 380 security and technology professionals. It said nearly half of enterprises surveyed had either confirmed or suspected that an AI agent had taken an unauthorised action over the past year.

The research also found that fewer than one in five organisations could automatically stop a misbehaving agent. The results highlight a gap between the rollout of AI agents and the controls available to manage them, an issue that has become more pressing as businesses automate internal and customer-facing processes.

API security is becoming more closely tied to AI governance because agents often rely on APIs to access systems, exchange data and trigger actions. Weak API oversight can expose companies not only to conventional cyber attacks, but also to unintended actions by software agents operating with excessive permissions or insufficient supervision.

For Salt Security, the awards add to growing attention among security suppliers on how enterprises manage machine-led activity inside operational systems. The company has positioned itself around the overlap between API exposure and agent governance, rather than treating them as separate problems.

Roey Eliyahu, Chief Executive Officer of Salt Security, said the award categories reflected where customers were seeing risk.

"Being recognized across three categories: agentic AI security, AI-based cybersecurity innovation, and API security, reflects exactly where enterprise risk is concentrating right now. Our research shows that the governance gap is not theoretical: agents are already acting in ways organizations did not intend, and most organizations cannot stop them in time. We are honored to be recognized as leaders in addressing that problem," said Roey Eliyahu, Chief Executive Officer of Salt Security.

Awards focus

Cyber Defence Magazine runs the Top InfoSec Innovators awards as part of its annual recognition of cybersecurity products and companies. The publication said its judging panel includes investors, industry executives and security specialists.

The publisher's comments on Salt Security focused on three points: anticipating emerging threats, offering an affordable answer and introducing new approaches to reducing cyber risk.

"Salt Security embodies three major features we judges look for with the potential to become winners: understanding tomorrow's threats, today, providing a cost-effective solution, and innovating in unexpected ways that can help mitigate cyber risk and get one step ahead of the next breach," said Gary S. Miliefsky, Publisher of Cyber Defence Magazine.

Salt Security was founded in 2016 and counts Sequoia Capital, S Capital, Tenaya Capital, Salesforce Ventures and Advent International among its backers. The company operates in a crowded cybersecurity market, but the rise of generative AI tools and autonomous software agents has created a newer area of competition as buyers assess how to monitor non-human actions across business systems.

That shift has pushed API security into broader discussions about governance, identity, access and operational control. As businesses connect AI agents to more internal applications and third-party services, suppliers that can show visibility over those interactions are seeking to stand out in a market expanding beyond traditional network and endpoint defence.

The awards suggest judges increasingly see agentic AI security and API protection as linked areas of cybersecurity rather than distinct product segments.