Skip to main content

Salt Security extends MCP threat protection to AWS WAF

Source Decision Insights Record Published December 3, 2025 Companies 3
Human View Machine View

3 companies named across 6 categories, one of 5 articles referencing Salt. Previous coverage: ABB FLXeon Controllers Identified with Multiple Vulnerabilities (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Adopters
Industry
Information Technology / Software & Services / IT Services / Cloud Services

Our classification, not the publisher's statement. Best suited for, not only for.

Salt Security extended its Application Programming Interface (API) behavioral threat protection to detect and block malicious intent directed at Model Context Protocol (MCP) servers deployed within the AWS ecosystem. The change addressed what the company identified in the release as a new threat vector related to MCP infrastructure.

MCP servers have rapidly become a key component of enterprise Artificial Intelligence (AI) architecture, enabling LLMs and autonomous agents to call APIs, execute tools, and complete workflows. The release said MCP deployments were often implemented without central oversight, exposed to the internet, and increasingly targeted by adversaries for unauthorized access to critical data and system access.

The capability combined Salt's MCP Finder technology with AWS Web Application Firewall (WAF). MCP Finder provided visibility across external, internal, and shadow MCP deployments, and Salt fed real-time behavioral threat data into AWS WAF to route traffic for inspection and to allow automatic blocking. The company described the approach as applying intent-based BTD to stop attacks that traditional tools miss.

Salt said the integration enabled identification of external misuse and abuse of MCP servers by AI agents and attackers and allowed those threats to be blocked through existing AWS WAF deployments. The release stated the integration was available as part of the Salt Security API Protection Platform and that Salt Security was showcasing the capabilities at AWS re:Invent 2025.

“Most organizations don't even know how many MCP servers they have, let alone which ones are exposed or being abused,” said Nick Rago, VP of Product Strategy at Salt Security.

The release also described that protections would be continuously updated based on evolving attacker tactics.

Press release, provided by Cision on behalf of Salt Security. Read the original.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/salt-security-extends-mcp-threat-protection-to-aws-waf/",
        "name": "Salt Security extends MCP threat protection to AWS WAF",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/salt-security-extends-mcp-threat-protection-to-aws-waf/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/salt-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/salt-security/",
      "name": "Salt Security"
    },
    "articleSection": [
      "Cybersecurity",
      "Artificial Intelligence",
      "AI infrastructure"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Adopters"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Cloud Services"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-27T10:32:15-06:00",
    "datePublished": "2025-12-03T09:00:32-07:00",
    "description": "Salt Security extended API behavioral protection to detect and block malicious intent targeting MCP servers on AWS WAF.",
    "headline": "Salt Security extends MCP threat protection to AWS WAF",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "Cision"
      },
      "url": "https://www.prnewswire.com/news-releases/salt-security-brings-mcp-threat-protection-to-aws-waf-blocking-ai-agent-abuse-in-real-time-302631568.html"
    },
    "keywords": [
      "Model Context Protocol",
      "Protection",
      "Threats"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/salt-security-extends-mcp-threat-protection-to-aws-waf/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-27",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/amazon.com/amazon-web-services-aws/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/amazon.com/amazon-web-services-aws/",
        "name": "Amazon Web Services (AWS)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/salt-2/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/salt-2/",
        "name": "Salt"
      },
      {
        "@id": "https://decisioninsights.ai/registry/salt-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/salt-security/",
        "name": "Salt Security"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages