Bill Thrash

Listen to customers, build better things, grow. VP of Customer Success.

[Salt Security @SaltSecurity]

Your security posture is only as strong as the layer you can’t see.
As cloud environments, SaaS apps, APIs, and AI agents become more interconnected, periodic security audits can’t keep pace.

Security posture management now requires continuous discovery, monitoring, risk prioritization, and remediation across the entire attack surface. And the API layer can’t be left out.

Learn all about security posture management in our latest blog: https://t.co/bpZ069od41

#APIsecurity #AIsecurity #cybersecurity #AgenticAI

[Salt Security @SaltSecurity]

Will we see you at Fal.Con 2026? 👀
Swing by the Salt Security booth to meet the team, see what’s new, and talk about all things AI & API security.

But wait, there’s more! Don’t miss out on our Happy Hour at Swingers, Nick Rago’s session, or the exclusive sponsor opening party ✨

📅 August 31 – September 3
📍 Mandalay Bay, Las Vegas | Booth #1722
Check out all the happenings: https://t.co/SDW2jPUyNs @cybrrnick

[Salt Security @SaltSecurity]

SafePal disclosed today that an API authorization flaw exposed ~40,000 customers' personal data.

The root cause? OWASP API1 BOLA (Broken Object Level Authorization). Not to mention, the flaw sat undetected for over 13 months🙈

This is the sort of problem that Salt catches with ease. Salt's behavioral baselining detects authenticated API calls returning object data that doesn't match the calling user's established identity. BOLA anomalies surface as cross-account data access deviations before records end up on darknet forums.

More info @TheHackersNews: https://t.co/ScwwVsC5cc

Stay safe!

[Salt Security @SaltSecurity]

COO and Co-Founder Michael Nicosia's latest thought leadership piece is out! Read it at @ForbesTechCncl: https://t.co/RR7T1JeJTJ
@MNicosia1

[Salt Security @SaltSecurity]

August is flying by and you know what that means... Salt Security is going to be back in Mandalay Bay for Fal.Con 2026!

We’ve got a handful of fun things in store that you won't want to miss out on.

Check out all the happenings: https://t.co/bb96qx9kHo

[Salt Security @SaltSecurity]

An AI agent was asked to book a gym class, and instead it found and exploited a BOLA flaw in the API and canceled another user's waitlist spot 🫣
No malicious intent, just optimization.

This is a textbook OWASP API1 (Broken Object Level Authorization) violation.

Salt Security's API posture management discovers and flags BOLA vulnerabilities across an API estate before they're reached. Salt's agentic API traffic monitoring also detects when an AI agent begins making cross-user object access calls that fall outside normal behavioral baselines, flagging the breach in real time.

Read more @gbhackers_news: https://t.co/7EvCliz3iD

[Salt Security @SaltSecurity]

AI coding assistants can generate production-ready code in seconds, but do they know your security policies? 👀

Join our upcoming webinar (Aug 20) to see how Salt Code enforces your security policies inside the AI coding assistants your developers already use, including Cursor, GitHub Copilot, and Claude Code.

Register here: https://t.co/QheZIz5C0K

[Salt Security @SaltSecurity]

Half of Fortune 500 reportedly vulnerable.

"Ghostjacking" feeds fake data to AI agents, manipulating them into making API calls that bypass firewalls using their trusted access.

Our agentic AI API traffic monitoring establishes behavioral baselines for AI agent activity. When a “Ghostjacked” agent starts making API calls that fall outside its normal pattern (accessing unusual endpoints, calling out to unexpected destinations, or accessing data outside its normal scope) Salt flags the behavioral anomaly in real time.

More info in @InfosecurityMag: https://t.co/dav8RvBxBd

[Salt Security @SaltSecurity]

Salt Code is an absolute game changer 🧂
Don’t know about it? Don’t worry! Salt Security is hosting a Webinar June 16th with @cybrrnick that dives into all things Salt Code and AI security.

Join us for the live product launch and see how Salt governs AI-generated code from the first prompt through runtime, without slowing your developers down → https://t.co/RLHLiLqz6j

[Salt Security @SaltSecurity]

Zero wait. Agentless.
With Salt Cloud Connect for AWS, organizations can instantly discover APIs, MCP servers, and agentic activity across AWS environments (without deploying sensors or routing traffic).

In the agentic era, you can’t secure what you can’t see.

Check how it’s done → https://t.co/QYhEP5HJHm

#cybersecurity #apisecurity #AWS #CloudConnect #AIsecurity @awscloud

[Salt Security @SaltSecurity]

AI agents don’t create risk just by hallucinating. They create risk when they take the wrong action.
That action often moves through MCP, tools, and APIs—far beyond the model layer.

To secure agentic AI, you need visibility from prompt to API.
Read more: https://t.co/abHZZYR05X

#AISecurity #APISecurity #AgenticAI

[Salt Security @SaltSecurity]

AI guardrails protect the conversation.
Agentic security protects the consequence.
Agents don’t just respond... they call tools, access APIs, and take action across your business.

The real question: can you see the full path from prompt → tool → API → action?

Read more: https://t.co/uXmCxilSTv

#cybersecurity #AIsecurity #APIsecurity #AgenticAI #AgenticSecurity #APIs #technology

[Bill Thrash @Billthrash]

@toddsaunders This is remarkably brilliant. @donnaweb

[Bill Thrash @Billthrash]

@gisdnews If you care about the quality of education you’ll cancel the rest of the week. All opening Friday is going to do is allow hours of instruction to count when you know full well not one kid will be settled and ready to learn.

[Bill Thrash @Billthrash]

Love that we can inject GOVERNANCE as a part of the expansion into AI adoption across all of the enterprise.

[Salt Security @SaltSecurity]

AI adoption is skyrocketing, but governance hasn’t caught up. Join Salt and @Sensedia to discover how to:
🌐Unify governance across multi-gateway architectures
🤖Rein in AI agent sprawl
🛡️Keep innovation moving without compromising security or compliance: https://t.co/ou3seqt1LL

[Bill Thrash @Billthrash]

Policies will need to be centralized, applied uniformly and posture governance improved across the entirety of the enterprise!

[Salt Security @SaltSecurity]

“Lions & tigers & bears, oh my!” Seems like there’s always a new threat to be weary of in the world of #cybersecurity. Well… except instead of big, scary animals, it’s new AI regulations & expanded attack surfaces & unprotected API fabric.
@IT_SecGuru: https://t.co/vDJzcOzDh3

[Bill Thrash @Billthrash]

It's somewhat exhausting to follow all things AI within your enterprise, using the underlying API security platform developed by SALT allows you to secure more of the AI footprint that any fly by night startup.

[Salt Security @SaltSecurity]

Traditional security tools are not advanced enough to protect against the evolving AI landscape, leading to hidden landmines of data breaches and exposed APIs.

Keep up on the latest #cybernews with @TheAIJournal1 : https://t.co/DxMoCUyfl8

[Bill Thrash @Billthrash]

Check out my latest article: The Hidden Backbone of AI: Why API Security is the Foundation of AI Security https://t.co/L2727isc5f via @LinkedIn

[Bill Thrash @Billthrash]

Blackhat was a great opportunity to see AI and API come together as a united risk category that SALT can address!

[Salt Security @SaltSecurity]

Fantastic energy at #BlackHat2025! 💡
Always great connecting with cybersecurity pros to talk all things API security.
Thanks to everyone who stopped by! 🔐
#APISecurity #CyberSecurity #BlackHat

[Bill Thrash @Billthrash]

I absolutely LOVED hearing from customers and potential new prospects about what they are concerned about in their AI strategy.

[Salt Security @SaltSecurity]

Does AI have your API security shaken? 🍸
In case you missed it live, Salt's CMO was interviewed at #BlackHat2025 to talk about Agentic AI, MCP servers, and API security🌐
🎬: https://t.co/e8in7ba5MU

#cybersecurity #apisecurity #agenticai #aiagents #MCP #MCPservers #blackhat