Salt Security unveils 100-policy library for agentic AI governance

Salt Security says its Policy Hub has reached 100 pre-built policies, giving enterprises a ready-made governance layer for AI agents, MCP servers, APIs and related controls. The company says the move addresses a growing need for security teams to prove and deploy agentic AI governance as adoption accelerates.

Why it matters: - Enterprises are deploying AI agents across more systems, which expands the attack surface beyond models and prompts. - Salt Security says API governance now overlaps with agent governance because agents rely on APIs, MCP servers, identity systems and enterprise apps to act. - The company says the new policy library gives security teams an immediate way to enforce posture governance instead of building controls from scratch.

What happened: - Salt Security announced that Salt Policy Hub has reached 100 pre-built policies. - The company describes the Policy Hub as an app store-like library for agentic security governance. - The policies are available now to Salt Security customers as part of the Salt Agentic Security Platform. - Organizations can request a demo at salt.security.

The details: - The 100 policies cover data security, access control, OAuth, API architecture, MCP configuration, third-party risk and agentic security. - Sixty-one policies activate automatically out of the box. - More than 12 policies are purpose-built for AI and agentic security. - Those agent-focused policies cover MCP server configuration, agent authorization and autonomous agent behavior. - Eight compliance frameworks are mapped across the Policy Hub: PCI DSS, FedRAMP, SOC 2, GDPR, HIPAA, ISO 27001, CMMC and HITECH. - Organizations can create unlimited custom policies. - The remaining policies can be activated with a single click and do not require complex configuration. - The Policy Hub is part of the Salt Agentic Security Platform and the Agentic Security Graph, which includes LLMs, MCP servers, APIs and integrated enterprise systems. - Salt says the milestone extends governance from runtime protection into proactive posture management across the agentic stack. - Salt Security says many Policy Hub controls started as API posture governance policies before being extended for agentic use cases. - Salt Security introduced MCP server discovery in September 2025 to identify and classify MCP servers across enterprise environments. - The company says corresponding governance policies were developed alongside that capability. - Salt Code, launched in June 2026, extends the same Posture Governance Engine into the software development lifecycle for AI-generated code. - Salt says the result is a consistent policy model across AI-generated software, APIs, agents and runtime behavior.

Between the lines: - The rollout shows how quickly agentic AI governance is moving from concept to productized controls. - The company is framing the issue as operational proof, not strategy, which suggests security buyers want something deployable today. - Salt Security is also positioning API security as the foundation for broader agent security, which reinforces its core market message.

What's next: - Salt Security says the Policy Hub will keep expanding alongside new agentic AI capabilities. - The company says enterprises can extend governance with their own requirements through custom policies. - Salt Security expects organizations to use the library to adopt autonomous AI while maintaining security and compliance.

The bottom line: - Salt Security is betting that ready-made policy libraries will become the fastest path for enterprises to govern AI agents at scale.