# Salt Security vs Wallarm

**Leader by vioscaleAI score:** Salt Security

| Attribute | Salt Security | Wallarm |
|---|---|---|
| **vioscaleAI score** | 57.3 (35% (low)) | 49.3 (53% (medium)) |
| content.faq | `[{"answer":"Automatically discovers agents, MCP servers, and APIs across your infrastructure—including undocumented and shadow endpoints—and detects anomalous activity and attacks in real-time across the full agent lifecycle. It is indexed under API Security.","source":"https://salt.security","question":"What is Salt Security?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Salt Security, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://salt.security","question":"Can Salt Security be self-hosted?","confidence":0.6},{"answer":"We have confirmed 4 integrations for Salt Security, including AWS, Terraform, SIEM and Jira. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://salt.security","question":"What does Salt Security integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, HIPAA and GDPR for Salt Security. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Salt Security not holding them. Always confirm compliance directly before you rely on it.","source":"https://salt.security/es/use-cases/simplify-compliance","question":"What security certifications does Salt Security have?","confidence":0.7},{"answer":"Salt Security is available worldwide. The vendor is headquartered in the United States.","source":"https://salt.security","question":"Where is Salt Security available?","confidence":0.75}]` | `[{"answer":"A security platform designed to safeguard APIs by detecting and stopping malicious or inappropriate API usage. Offers multiple deployment options ranging from inline inspection to cloud-based analysis, and protects against common API vulnerabilities including OWASP API Top-10. It is indexed under API Security.","source":"https://www.wallarm.com","question":"What is Wallarm?","confidence":0.6},{"answer":"Wallarm offers a free tier, so you can start without paying. Pricing changes often, so verify at source before relying on it.","source":"https://www.wallarm.com","question":"Is Wallarm free?","confidence":0.6},{"answer":"We have confirmed browser-based access to Wallarm. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://www.wallarm.com","question":"What platforms does Wallarm support?","confidence":0.6},{"answer":"Yes. Wallarm can be deployed cloud / SaaS, hybrid and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.wallarm.com","question":"Can Wallarm be self-hosted?","confidence":0.6},{"answer":"We have confirmed 5 integrations for Wallarm, including AWS Security Hub, AWS GuardDuty, AWS IAM Access Analyzer, AWS Inspector and AWS Macie. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.wallarm.com","question":"What does Wallarm integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and GDPR for Wallarm. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Wallarm not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.wallarm.com/security-edge-request-demo","question":"What security certifications does Wallarm have?","confidence":0.7}]` |
| deployment.options | `{"cloud":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | A security platform that provides visibility into agents, AI models, MCP servers, and APIs across your environment, detecting behavioral threats, enforcing security policies, and demonstrating compliance with regulations. | A unified platform that discovers and monitors AI workloads and APIs across your AWS infrastructure, enforces security policies in real-time to block attacks, and produces audit-ready compliance records. Supports cloud and self-hosted deployment options. |
| features.capabilities | `{"deployment_model":"out_of_band_mirror","owasp_api_top_10_coverage":true,"pii_phi_data_classification":true,"shadow_zombie_api_discovery":true,"bola_idor_vulnerability_detection":true}` | `{"soc2_type_ii":true,"deployment_model":"inline_proxy","graphql_grpc_support":true,"ci_cd_shift_left_testing":true,"owasp_api_top_10_coverage":true,"shadow_zombie_api_discovery":true,"ebpf_kubernetes_traffic_capture":true,"bola_idor_vulnerability_detection":true,"automated_threat_blocking_remediation":true}` |
| integrations.count | 5 | 5 |
| integrations.list | `[{"name":"AWS"},{"name":"AWS Security Hub"},{"name":"AWS WAF"},{"name":"AWS Marketplace"},{"name":"Terraform"},{"name":"SIEM"},{"name":"Jira"}]` | `[{"name":"AWS Security Hub"},{"name":"AWS GuardDuty"},{"name":"AWS IAM Access Analyzer"},{"name":"AWS Inspector"},{"name":"AWS Macie"}]` |
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | - | `{"web":true}` |
| pricing | - | `{"type":"subscription","freeTier":true,"sourceUrl":"https://www.wallarm.com","retrievedAt":"2026-08-25T08:25:58.128Z"}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | - | low |
| pricing.transparent | - | no |
| security.gdpr | yes | yes |
| security.hipaa | yes | - |
| security.pci | yes | - |
| security.soc2 | yes | yes |
| security.trust_center | https://salt.security/es/use-cases/simplify-compliance | https://www.wallarm.com/security-edge-request-demo |

## Capabilities (API Security)

| Capability | Salt Security | Wallarm |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Out of band mirror | Inline proxy |
| Shadow zombie API discovery | ✓ | ✓ |
| Pii phi data classification | ✓ | - |
| Bola idor vulnerability detection | ✓ | ✓ |
| Openapi swagger schema validation | - | - |
| Ci cd shift left testing | - | ✓ |
| Ebpf kubernetes traffic capture | - | ✓ |
| Automated threat blocking remediation | - | ✓ |
| Owasp API top 10 coverage | ✓ | ✓ |
| Graphql grpc support | - | ✓ |
| SOC2 type ii | - | ✓ |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: vioscaleAI. Generated 2026-10-16T20:51:37.375Z. "-" = undocumented, not absent.*