Automatically uncover every internal, external, and third-party API across your environments, regardless of gateway presence or documentation status.

• Advanced API discovery: Salt continuously analyzes real-time traffic to detect every API, documented or not. Gain visibility into live, legacy, and third-party APIs.
• API details exposed: drill into parameters, auth methods, data classifications, traffic patterns, and risk posture.
• No documentation? No problem: Salt doesn’t rely on OpenAPI specs or gateway integrations alone. It finds what others miss.
• Context-rich filtering: slice and dice your API landscape by environment, exposure level, business unit, or risk.

Most organizations have 2x–8x more APIs than they think. That’s a huge blind spot.

• Detect unmanaged APIs: shadow, deprecated, and abandoned APIs are discovered and flagged.
• Protect sensitive data: unmanaged APIs often expose PII, PCI, and business-critical data.
• Compare vs. docs: automatically validate current APIs against internal documentation and OpenAPI specs.

Discovery isn’t a one-time task. Salt makes it ongoing.

• Track API lifecycle events: get notified when new APIs appear or existing ones change risk posture.
• Maintain inventory integrity: eliminate drift between what’s deployed and what’s known.