# Escape vs Salt Security

| Attribute | Escape | Salt Security |
|---|---|---|
| **Vioscale score** | 72.7 (20% (low)) | 54.2 (13% (low)) |
| deployment.options | `{"cloud":true}` | `{"cloud":true}` |
| description.long | Automatically discovers and tests for security vulnerabilities across your API and application infrastructure, with findings integrated into engineering workflows for rapid remediation. | Salt Security delivers a unified platform to discover, monitor, and protect AI agents, MCP servers, and APIs operating within an organization. It maps the complete agentic security landscape to identify risks, manage compliance posture, and detect behavioral threats throughout the agentic infrastructure stack. |
| features.capabilities | `{"iso_27001":true,"pricing_model":"per_api_endpoint","deployment_model":"hybrid","graphql_grpc_support":true,"ci_cd_shift_left_testing":true,"shadow_zombie_api_discovery":true,"bola_idor_vulnerability_detection":true,"automated_threat_blocking_remediation":true}` | - |
| integrations.count | 5 | 7 |
| integrations.list | `[{"name":"Wiz"},{"name":"Cursor"},{"name":"Claude Code"},{"name":"Gemini"},{"name":"GitHub"}]` | `[{"name":"AWS"},{"name":"AWS Security Hub"},{"name":"AWS WAF"},{"name":"AWS Marketplace"},{"name":"Terraform"},{"name":"SIEM"},{"name":"Jira"}]` |
| market.availability | `{"hqCountry":"FR","primaryMarkets":["FR","US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"web":true}` | - |
| pricing.model | commercial | commercial |
| security.gdpr | yes | yes |
| security.hipaa | yes | yes |
| security.iso27001 | yes | - |
| security.pci | yes | yes |
| security.soc2 | yes | yes |

## Capabilities (API Security)

| Capability | Escape | Salt Security |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Hybrid | - |
| Shadow zombie API discovery | ✓ | - |
| Pii phi data classification | - | - |
| Bola idor vulnerability detection | ✓ | - |
| Openapi swagger schema validation | - | - |
| Ci cd shift left testing | ✓ | - |
| Ebpf kubernetes traffic capture | - | - |
| Automated threat blocking remediation | ✓ | - |
| Owasp API top 10 coverage | - | - |
| Graphql grpc support | ✓ | - |
| SOC2 type ii | - | - |
| ISO 27001 | ✓ | - |
| Pricing model | Per API endpoint | - |

*Source: Vioscale. Generated 2026-09-01T14:36:52.066Z. "-" = undocumented, not absent.*