Sold by: Salt Security
Advanced AWS WAF ruleset for API and AI agent security. Blocks API abuse, GraphQL attacks, JWT anomalies, SSRF, and AI-driven threats. Discovers AI agent activity and MCP interactions to strengthen protection across modern agent-driven applications.
Overview
Overview: Salt Security has released a specialized ruleset in the AWS Marketplace that extends the native capabilities of AWS WAF, delivering advanced protection against modern API threats and AI-agent-driven interactions. Designed as an add-on for existing AWS WAF customers, this ruleset brings deep, context-aware detection and response to environments where APIs and intelligent agents are core to digital workflows.
Why It Matters: Traditional WAF rules were never built to understand the behavioral nuances of APIs or the complex, dynamic nature of AI-powered agents. With APIs now underpinning nearly every digital experience - and AI agents increasingly driving autonomous actions - security teams face blind spots that existing tools do not cover. This ruleset closes those gaps.
Key Capabilities: Advanced API Threat Detection - Blocks common and complex API attack vectors such as brute force on credentials, excessive GraphQL queries, SSR threats and JWT-based anomalies.
Context-Aware Rate Limiting - Implements smart rate limits on sensitive parameters like user_id, email, and numeric-only values to stop enumeration and abuse patterns.
AI Agent and MCP Awareness - Uniquely identifies traffic related to AI-driven agents and MCP endpoints, blocking unauthorized access (unauthenticated_mcp_access) and labeling agent-like behaviors for deeper observability.
Security Signal Enrichment - Labels critical request attributes (e.g., auth headers, user IDs, GraphQL queries) to enhance detection fidelity and downstream analytics.
Proactive Threat Prevention - Detects and blocks sophisticated threats such as SSRF, prototype pollution, and brute force attempts on documentation endpoints.
Who Its For: AWS WAF users who want to:
- Strengthen their defenses against API-specific and logic-layer attacks
- Extend visibility and control over AI agent activity
- Accelerate detection and response without adding heavy infrastructure
- Ensure MCP, GraphQL, and JWT traffic is governed properly
Highlights
- Strengthen protection for modern API and agent interactions. No specialized security expertise required.
- Salt Lab security experts continuously monitor, maintain, and update rulesets to help defind against emerging API, AI, and agentic threats.
- Configure rules to log, alert, and/or block activity based on your organization security posture and operational requirements.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/unit |
|---|---|---|
entity_usage | Charge per month in each available region (pro-rated by the hour) | $25.00 |
volume_usage | Charge per million requests in each available region | $1.75 |
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support offered by Salt Security.
Contact Salt directly by email at support@salt.security
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Salt Security protects the APIs that power your business including the APIs behind AI agents, mobile apps, SaaS platforms, and microservices. Our platform delivers deep visibility, threat detection, and runtime protection to stop API attacks and secure your entire API ecosystem leveraging the AWS infrastructure.
Your AI agents are already in production. Every security tool you have was designed before they existed.
Salt Security is the full-stack Agentic Security Platform, purpose-built to discover, govern, and protect AI agents, MCP servers, and APIs across code, configuration, and runtime. Unlike model guardrails that stop at the conversation, Salt protects the action layer: where agents execute business logic, invoke APIs, and touch your most sensitive systems. Deploys agentlessly across your AWS environment in under 10 minutes.
Salted CX extracts conversation content and metadata from multiple contact center platforms simultaneously, connecting them across all channels to create comprehensive customer journeys. Using AI, it surfaces the most important moments and opportunities, providing you with actionable business insights you can immediately act upon.
This product has charges associated with it for deployment, configuration, and ongoing support. Self-hosted infrastructure automation and configuration management. Event-driven with remote execution, state management, and cloud provisioning.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.