Sold by: Salt Security
Deployed on AWS
Advanced AWS WAF ruleset for API and AI agent security. Blocks API abuse, GraphQL attacks, JWT anomalies, SSRF, and AI-driven threats. Discovers AI agent activity and MCP interactions to strengthen protection across modern agent-driven applications.
Overview
Overview: Salt Security has released a specialized ruleset in the AWS Marketplace that extends the native capabilities of AWS WAF, delivering advanced protection against modern API threats and AI-agent-driven interactions. Designed as an add-on for existing AWS WAF customers, this ruleset brings deep, context-aware detection and response to environments where APIs and intelligent agents are core to digital workflows.
Why It Matters: Traditional WAF rules were never built to understand the behavioral nuances of APIs or the complex, dynamic nature of AI-powered agents. With APIs now underpinning nearly every digital experience - and AI agents increasingly driving autonomous actions - security teams face blind spots that existing tools do not cover. This ruleset closes those gaps.
Key Capabilities: Advanced API Threat Detection - Blocks common and complex API attack vectors such as brute force on credentials, excessive GraphQL queries, SSR threats and JWT-based anomalies.
Context-Aware Rate Limiting - Implements smart rate limits on sensitive parameters like user_id, email, and numeric-only values to stop enumeration and abuse patterns.
AI Agent and MCP Awareness - Uniquely identifies traffic related to AI-driven agents and MCP endpoints, blocking unauthorized access (unauthenticated_mcp_access) and labeling agent-like behaviors for deeper observability.
Security Signal Enrichment - Labels critical request attributes (e.g., auth headers, user IDs, GraphQL queries) to enhance detection fidelity and downstream analytics.
Proactive Threat Prevention - Detects and blocks sophisticated threats such as SSRF, prototype pollution, and brute force attempts on documentation endpoints.
Who Its For: AWS WAF users who want to:
- Strengthen their defenses against API-specific and logic-layer attacks
- Extend visibility and control over AI agent activity
- Accelerate detection and response without adding heavy infrastructure
- Ensure MCP, GraphQL, and JWT traffic is governed properly
Highlights
- Strengthen protection for modern API and agent interactions. No specialized security expertise required.
- Salt Lab security experts continuously monitor, maintain, and update rulesets to help defind against emerging API, AI, and agentic threats.
- Configure rules to log, alert, and/or block activity based on your organization security posture and operational requirements.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/unit |
|---|---|---|
entity_usage | Charge per month in each available region (pro-rated by the hour) | $25.00 |
volume_usage | Charge per million requests in each available region | $1.75 |
Dimensions summary
This product uses usage-based pricing with two separate charges that work together. The entity_usage dimension bills per month for each region where you run the managed rules, pro-rated by the hour. This covers your regional footprint. The volume_usage dimension bills per million requests processed in each region. This scales with your API traffic. You pay both: a regional base charge plus a traffic-based charge. Costs rise as you add regions or handle more requests. There are no tiers or term commitments; charges reflect actual monthly usage in each region.
Top-of-mind questions for buyers
The volume_usage dimension counts API requests processed by the managed rules in a region. You are billed per million requests. Every request that passes through the ruleset in that region adds to the count. More API and AI agent traffic means more requests, which raises this charge.
Both charges apply at the same time on one invoice. The entity_usage charge sets a monthly base per region, pro-rated by the hour. The volume_usage charge grows with request counts. For high-traffic APIs or busy AI agents, request volume usually drives the larger share.
The entity_usage charge is pro-rated by the hour. You pay only for the hours the managed rules run in each region that month, not a full-month flat rate. The volume_usage charge still applies separately, based on the requests processed during that time.
salt.security
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support offered by Salt Security.
Contact Salt directly by email at support@salt.security
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Fortinet Managed Rules for AWS WAF - API Security provides protection against API based attacks, with rules based on threat intelligence from FortiGuard Labs, Fortinet threat intelligence and research organization.
The Fortinet Managed Rules for AWS API Gateway is a comprehensive package for the best web application protection to help protect against the OWASP Top 10 web application threats, including SQLi/XSS attacks, General and Known Exploits, and Malicious Bots.
Cyber Security Cloud Managed Rules are designed to mitigate and minimize vulnerabilities, including all those on OWASP API Security Top 10 Threats list. By using our rulesets, you can start protecting your API Gateway right away with a low false-positive rate and a higher defense capability.
Salt Security protects the APIs that power your business including the APIs behind AI agents, mobile apps, SaaS platforms, and microservices. Our platform delivers deep visibility, threat detection, and runtime protection to stop API attacks and secure your entire API ecosystem leveraging the AWS infrastructure.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.