Salt Security launches Australian base for AI security

Salt Security has launched in Australia, giving the cyber security company its first dedicated presence in Asia-Pacific.

The launch includes infrastructure hosted in Amazon Web Services' Sydney region and an in-country sales and technical team. The local set-up allows Australian customers to process and store data within the country.

The company, which focuses on API and what it describes as agentic security, had already signed Australian enterprise customers through its global network before establishing a local base. The new presence formalises that activity as businesses in the region expand their use of AI agents, MCP servers and application programming interfaces in production systems.

For Australian buyers, data residency is a central issue. By hosting customer environments in Sydney rather than sending security data overseas, Salt aims to address procurement and compliance requirements common in sectors including financial services, healthcare and government.

Local set-up

Salt's platform is now deployed in AWS's ap-southeast-2 region in Sydney. The Australian team will provide local account management, technical support and proof-of-concept work, with hiring continuing as the company builds out its regional operation.

The software is designed to help organisations identify AI agents and MCP servers in their environments, monitor API behaviour, and provide audit records for security and compliance teams. The launch reflects a broader market shift as companies seek more oversight of systems that combine large language models, APIs and internal business applications.

Australia has become an increasingly active market for suppliers focused on AI governance and cyber security. The country has seen rapid uptake of AI coding tools and agentic workflows, while regulators including the Office of the Australian Information Commissioner and the Australian Cyber Security Centre have issued guidance on AI governance and cyber risk.

That backdrop has created an opening for security vendors that offer local hosting and support. Australian organisations, particularly larger enterprises and public sector bodies, often require sensitive operational data to remain within national borders.

Michael Nicosia, Chief Operating Officer and Co-founder, Salt Security, said the company was seeing strong demand in the market. "Australia is one of the fastest-growing markets for agentic AI deployment in the Asia-Pacific region, and Australian enterprises are asking the same questions their counterparts in the US and UK are asking: how do we get full visibility into what our AI agents are doing, what they can reach, and whether their behavior is legitimate? The local infrastructure and team mean we can answer those questions with in-country presence, in-country data, and in-country support," Nicosia said.

The spread of AI tools inside large organisations is creating blind spots for security teams, Salt argues. As more systems are connected through APIs and agent-based software, businesses are under pressure to track what has been deployed, what it can access and whether those interactions comply with internal controls.

Regional demand

Salt's Australian expansion comes as cyber security vendors compete to adapt their products to the rise of AI-linked workloads. For many buyers, the issue is no longer only protecting conventional applications, but monitoring the growing web of AI agents, connectors and data exchanges layered on top of them.

Its platform provides visibility across what Salt calls the "Agentic Security Graph", covering links between large language models, MCP servers, APIs and enterprise systems. That framing reflects a wider industry push to map and govern the paths through which AI software can act inside businesses.

Roey Eliyahu, Chief Executive Officer and Co-founder, Salt Security, said some organisations were deploying these tools faster than their controls could keep up. "Australian enterprises are deploying AI at a pace that their security infrastructure has not yet caught up with. We are seeing organizations with significant MCP server deployments they did not know existed and AI agents operating with access nobody reviewed. The combination of local infrastructure and a local team means Australian customers can close that gap with the same platform their global counterparts are using, without data leaving the country," Eliyahu said.