Salt Security launches autonomous defence for agents

Salt Security has launched Autonomous Defense for its Agentic Security Platform, extending its workflow tools to automate defensive actions.

The update allows Salt to trigger enforcement steps such as blocking malicious activity, revoking access and starting remediation across connected systems, rather than stopping at alerts, tickets or notifications.

The new functions come through an expansion of Salt Workflows, the visual workflow builder embedded in the platform. Security teams can use it to define which findings should trigger immediate action, which changes need approval and which enforcement points should be used.

The move reflects a wider push by security vendors to shorten the gap between detection and response as companies deploy more AI agents, model context protocol, or MCP, services and application programming interfaces across business systems.

According to Salt, the platform's Agentic Security Graph maps AI agents, MCP servers, tools and downstream APIs, then combines that with exposure, source code, configuration and runtime context. The information is used to support customer-selected, policy-based actions.

Actions listed by Salt include disabling unauthorized MCP connections, quarantining shadow tools and removing excessive privileges through supported management controls. Other measures include sending blocking rules or virtual protections to existing web application firewalls, API gateways and other enforcement points.

Customers can also use workflows to update guardrail policies, block unsafe requests and redact sensitive data through connected gateways. The system can trigger configuration changes to close exposed APIs, restore rate limits and reinstate approved security settings.

Workflow shift

Existing integrations with security information and event management systems, ServiceNow, Jira, notifications and audit logging remain part of the platform. In the new model, however, those functions can sit within an automated response rather than act as the final step.

Salt's workflow builder includes more than 200 connectors and a marketplace of integrations developed by the company. Organisations can build workflows across security, infrastructure, IT and collaboration tools without having to standardize on a single gateway, agent framework or response product.

"Security cannot move at ticket speed when attackers move at machine speed. Autonomous Defense turns Salt's security intelligence into action, from blocking malicious activity and revoking risky access to enforcing protections through controls enterprises already use," said Aner Gelman, VP of Product at Salt Security.

Salt framed the launch around the growth of agentic systems that can interact with multiple business systems and take continuous actions. It also pointed to attackers' use of AI to speed up reconnaissance, vulnerability discovery and exploitation.

That combination has increased pressure on security teams to reduce manual handoffs between detection and response, especially when changes must be made across disconnected systems. Salt said customers can retain approval controls over sensitive operations while maintaining an audit trail.

Customer rollout

Salt Workflows is available to Salt customers now. The company is also migrating existing workflows to the new experience and supporting customer-specific requirements during that process.

Founded in 2016, Salt focuses on API and agentic security. Its platform is designed to discover agents, MCP servers and APIs in an environment, govern their connections and permissions, monitor behavior at runtime and identify vulnerabilities before they reach production.

A second executive linked the launch to the company's broader view of security around AI agents and downstream APIs.

"An alert doesn't stop an attack. Action does. Salt secures the entire agentic path, from AI agents and MCPs to downstream APIs. Autonomous Defense puts that intelligence to work, helping security teams stop attacks and close dangerous paths before they cause business impact," said Eliyahu.