Salt Security API Protection Platform

We use Salt to have a realistic view of the entire API infrastructure and possible threats to which these APIs are being subjected. We were able to have a faster and more appropriate response to potential attacks that use APIs as an attack vector. Salt addresses the need to have visibility and control over what APIs we have and how these APIs are being consumed. I consider Salt a precious platform for security teams considering the massive and constant increase in the use of APIs in the architecture of new applications.

• Constant monitoring and alert for possible attacks based on API consumption baseline

• Salt can positively impact the API availability SLA by helping to accelerate the detection of attacks that can compromise the availability of your infrastructure.

Use Case: Identify anomalies and support incident response. Salt Security API Protection Platform security is integrated with SOC/SIEM tools, reporting the found attacks in order to investigate and respond. The purpose is to have a faster incident response and provide data that supports attacks investigations and sensitive data flow control.

• Detailed Attacks information
• Integration with SOC/SIEM Tools
• Senstive data control

• Salt Security API Protection Platform has provided detailed information that is helping us to identify and investigate attacks in our environment

• Inventory
• API monitoring
• SDLC integration

• The inventory of API assets and volume of calls was not available previously

We use a Salt Security API Protection Platform as our provider of information about data consumption via API and call management at application end-points, considering PII tracking and access patterns of eventual attackers (by IP address, authorization type, etc). In addition, Salt Security API Protection Platform provides us with a productivity gain related to the alerts generated and intelligence embedded in the analysis of possible vulnerabilities or threats.

• Alertting
• Attack identification
• PII identification

• Productivity
• Acuracy
• Management of volume calls

Salt provides visibility on our API traffic, allowing us to proactively identify PII, differences in API documentation (swagger files) and real traffic, alerts in situations that indicate a potential attacker allowing us to take countermeasures and suggestions on improvements (missing important HTTP headers, endpoints lacking authorization, etc.). Given the number of endpoints we have and the traffic we have would be really difficult to get these insights without Salt.

• PII identification.
• Traffic analysis to get insights on improvements and potential attackers.

• Helped to keep us compliant with most privacy regulations.