See your APIs like an attacker does.  Get a free API Attack Surface Assessment

Deploy Salt instantly with CrowdStrike

Salt Security is now fully integrated with the CrowdStrike Falcon platform through a certified Foundry app — the first and only API app available free to all CrowdStrike customers.

API threats move fast. With Salt and CrowdStrike you're faster.

Modern API Security meets elite threat detection

Salt Security + CrowdStrike Falcon: Smarter, Faster API Protection

The attack surface is expanding — and APIs are at the center of it. That’s why Salt Security is now directly integrated with CrowdStrike Falcon, delivering real-time API discovery, threat detection, and response.

Low-install API discovery
Salt leverages existing Falcon agents to identify and inventory APIs in real time — no extra configuration, gateways, or proxies required. Just deploy the Salt Foundry app and go.
Context-rich threat correlation
Gain full visibility in minutes and eliminate blind spots to automatically uncover your API fabric in your organization — internal, external, shadow, and third-party APIs.
Automated real-time response
When Salt detects an API attack, it can trigger automated response actions through Falcon Firewall Management, to stop threats before they escalate.
Salt + CrowdStrike

Foundry app for API Discovery and risk reduction

Salt integrates with CrowdStrike Falcon Foundry, Falcon Next-Gen SIEM, and Falcon Firewall Management.Salt integrates with CrowdStrike Falcon Foundry, Falcon Next-Gen SIEM, and Falcon Firewall Management.

The future of SIEM is here — and we're leading the way with CrowdStrike

Legacy SIEMs weren’t built for today’s threats. Slow, siloed, and expensive to scale, traditional security information and event management tools are struggling to keep pace with the explosion of APIs, cloud-first architectures, and advanced threat actors. It’s time for a smarter approach.

That’s why our integration with CrowdStrike Next-Gen SIEM isn’t just another connector — it’s a leap forward.

This isn’t a surface-level webhook. Our certified integration with CrowdStrike’s Falcon Next-Gen SIEM delivers rich API telemetry, threat context, and behavioral insights, right where your SOC team already lives. No swivel chair. No guesswork. And you can access the connector directly in the CrowdStrike Marketplace.

Sign up to see it in action

“Current data indicates that the average API breach leads to at least 10 times more leaked data than the average security breach.”

Gartner®, Market Guide for API Protection, By Dionisio Zumerle, Aaron Lord, Esraa ElTahawy, Mark O'Neill, 29 May 2024.GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.