Salt Security expands CrowdStrike integrations to cover AI agent activity

Salt Security has widened its integrations with the CrowdStrike Falcon platform, linking its Agentic API platform to Falcon Foundry, Falcon Next-Gen SIEM and Falcon Firewall Management. The companies said the work complements CrowdStrike’s native AI Detection and Response capabilities with Falcon Guardian.

Joint customers can deploy Salt through their existing Falcon sensor, with no extra gateways or proxies, to discover the AI agents running in their environment, the MCP servers and tools those agents connect through, the APIs they invoke and the permissions attached to each. Findings flow into Falcon Next-Gen SIEM, where agent inventory, posture findings and behavioural detections are correlated with endpoint, identity and cloud telemetry, and automated response can be triggered through Falcon Firewall Management.

The two firms have worked together since 2022, when CrowdStrike’s Falcon Fund invested in Salt Security. Salt chief executive Roey Eliyahu said most enterprises know which agents they have approved but far fewer can follow the path those agents take once they act across the business.