What does Legit Security sell?

Legit Security sells ASPM platform. ASPM platform: A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.

Who does Legit Security fit?

In our reading, Legit Security addresses organisations that are building an AppSec program. Legit Security says it typically works with organisations above a minimum developer count. Legit Security delivers its ASPM platform as a SaaS security solution. Legit Security deploys without agents, using APIs and access tokens.

How does CISO Tribune file Legit Security?

CISO Tribune files Legit Security under Application security posture management, with Secrets detection and Software supply chain security as secondary categories.

Company record · security vendor

Legit Security

Where Legit Security appears on the record (36)

Every page on CISO Tribune and its network that carries this company, 36 in all.

Vendor spotlight: Legit Security: who they are, what they sell and what CISOs should ask
Compared with (32): vs Anchore, vs Apiiro, vs Aqua Security, vs Archipelo, vs Arnica, vs Chainguard, vs Checkmarx, vs Clutch Security, vs Cycode, vs Endor Labs, vs Finite State, vs GitGuardian, vs GitHub Advanced Security, vs GitLab, vs HashiCorp, vs JFrog, vs Minimus, vs Neo, vs OX Security, vs Phoenix Security, vs Pluto Security, vs Prime Security, vs RapidFort, vs Raven.io, vs Red Hat, vs Semgrep, vs Snyk, vs Socket, vs Sonatype, vs Trail of Bits, vs Truffle Security, vs Veracode
In the vendor directory (3): Application security posture management vendors · primary category
Secrets detection vendors · category
Software supply chain security companies: who they are and how CISOs compare them · category

What the company sells

Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. Legit Security gives a unified view of all application risk, from code to cloud, covering what affects an AppSec posture.

Legit Security gives context for prioritizing and acting on remediation of the issues that create the most business risk. Legit Security automates manual processes associated with triage and remediation.

Legit Security discovers, analyzes and secures an end-to-end software supply chain with a real-time SDLC inventory. Legit Security maps and visualizes an entire software supply chain. Customers quoted by Legit Security describe using the platform to inventory SDLC systems and security tools and to view developer activity. A customer quoted by Legit Security describes using the platform to secure CI/CD pipelines, track the security posture of different teams and address SDLC configuration drifts. A customer quoted by Legit Security describes using the platform for governance and for visualization across the SDLC.

Legit Security offers help to organisations as they build an AppSec program. Legit Security helps implement secrets detection and prevention. Legit Security helps identify use of GenAI in development. Legit Security helps align an AppSec program with key compliance standards and frameworks. Legit Security supports security frameworks used to validate and demonstrate compliance.

Legit Security needs no agents to install and uses APIs and access tokens. Legit Security typically works with organisations of 50+ developers. Legit Security was co-founded by Roni Fuchs as CEO, Liav Caspi as CTO and Lior Barak as COO.^[1][2]

Categories: Application security posture management (primary category)
Secrets detection
Software supply chain security
Compare Legit Security with companies in the same category
Headquarters: Not established from our sources
Founded: Not established from our sources
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: legitsecurity.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

ASPM platform^[1][5]
A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Legit Security's categories, then alphabetical. A list from the record, never a ranking.

On application security posture management, Legit Security competes with Apiiro, Arnica, Cycode, OX Security, Phoenix Security, Prime Security, Checkmarx and Raven.io.
On secrets detection, Legit Security competes with GitGuardian, Truffle Security, Endor Labs, GitHub Advanced Security, GitLab, JFrog, Snyk, Clutch Security, HashiCorp and Semgrep.
On software supply chain security, Legit Security competes with JFrog, Anchore, Archipelo, Chainguard, Minimus, RapidFort, Red Hat, Socket, Apiiro, Arnica and 15 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]legitsecurity.comLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]PlatformLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[3]Legit Security Names New VP of Human Resources, Head of Engineering to Accelerate Next Phase of GrowthBusiness Wire · published April 27, 2026 · Tier A: the company, a regulator or a filing
[4]Legit Security Named as a Sample Vendor in the Gartner® Hype Cycle™ for Secure Software Engineering 2026Business Wire · published June 18, 2026 · Tier A: the company, a regulator or a filing
[5]Legit Security at Black Hat | Request a MeetingLegit Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Legit Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Legit Security. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Legit Security

What does Legit Security sell?: Legit Security sells ASPM platform. ASPM platform: A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.
Who does Legit Security fit?: In our reading, Legit Security addresses organisations that are building an AppSec program. Legit Security says it typically works with organisations above a minimum developer count. Legit Security delivers its ASPM platform as a SaaS security solution. Legit Security deploys without agents, using APIs and access tokens.
How does CISO Tribune file Legit Security?: CISO Tribune files Legit Security under Application security posture management, with Secrets detection and Software supply chain security as secondary categories.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.