Salt Security API Protection Platform vs. TransUnion TruValidate

Salt is highly recommended for anyone who wants to discover, monitor and protect their APIs against various types of attacks. Salt should not be used as a SIEM.

Neustar IP Intelligence is quick to deploy using their REST API, the data is automatically updated against one of the most robust datasets available on the market. It is well suited for developers trying to integrate with an out-of-the-box solution to lookup geolocation of website visitors in real time, and possibly build alerts or 2F-Authentication mechanisms based on suspicious activity.

Incentivized

• PII identification in API traffic.
• Divergence between API traffic and documentation (swagger files).
• Potential attacks with information to take counter measures.

• Helps detect fraud if a user has signed in from California only, then attempts to login from another country are made.
• Increase sales conversions by understanding geolocation of website visitors
• If your datacenters are georedundant, allows engineers to see where majority of traffic is generated and load balance accordingly.

Incentivized

• The platform could have more options for exporting detailed data from attackers' dashboards.
• The Attackers dashboard could also have more options of filters in order to support the investigations of the attack.
• The OAS analysis could present a more detailed view of the found issues.

• It's a bare box solution. Not feature rich.

Incentivized

We tried controls offered by the IaaS providers but these were hard to manage and did not provide the visibility we wanted. We also protected APIs with a normal WAF but this was only helpful for assets we knew about and API attacks were not caught by the WAF.

Google has an open source version of this, but its updates are based on the user community. Since Neustar's IP Intelligence is a paid solution, the updates are regular, the interface is streamlined with a REST API, and there is a help desk you can consult for onboarding and questions if there are issues.

Incentivized

• Salt Security API Protection Platform has provided detailed information that is helping us to identify and investigate attacks in our environment

• Ability to build fraud detection from suspicious activities.
• Balance traffic across data centers.
• Rapid deployment, regular updates.

Incentivized