New natural language interface, “Ask Pepper AI,” empowers security teams to instantly query their entire API inventory, identify risks, and close posture gaps
At AWS re:Invent, Salt Security, the leader in API security, today announced “Ask Pepper AI,” a new generative AI-powered natural language interface for its API Protection Platform. Leveraging Amazon Bedrock, “Ask Pepper AI” transforms API security operations by allowing security professionals and developers to ask plain-English questions and receive immediate, actionable insights about their API landscape, posture gaps, and risk.
In today’s complex, cloud environments, security teams are often overwhelmed by data and lack clear visibility. According to Salt Security’s H2 2025 State of API Security Report, only 19% of organizations are “very confident” in the accuracy of their API inventory. This visibility gap is dangerous, with the same report finding 15% of organizations admit they do not know which APIs expose PII. “Ask Pepper AI” cuts through this complexity by democratizing access to critical security data. Instead of navigating complex dashboards, users can now simply ask:
- “What APIs have the highest Risk Score?”
- “Which of my APIs expose PII?”
- “Summarize my highest-risk API, and list any posture gaps.”
“API security is complex, but understanding your risk shouldn’t be,” said Michael Nicosia, Co-Founder & COO at Salt Security. “‘Ask Pepper AI’ makes it simple. By using Amazon Bedrock, we’re putting powerful, intuitive security insights into the hands of everyone from SOC analysts to CISOs. When most organizations aren’t even sure what their API inventory looks like, the ability to just ask and get an immediate answer is a game-changer.”
By building on Amazon Bedrock, Salt Security securely provides its customers with access to high-performing foundation models. This allows “Ask Pepper AI” to understand user intent and provide precise answers about an organization’s unique API environment, accelerating incident response and risk prioritization. The new capability seamlessly integrates with Salt’s three core use cases, API Discovery, Posture Governance, and Threat Protection, making it easier than ever to manage the full lifecycle of APIs.