CISO Tribune

Vendor comparison · 2 companies

GitHub Advanced Security vs Legit Security

GitHub Advanced Security is sold as Code Security and Secret Protection together, to find and fix vulnerabilities and leaked secrets. Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. CISO Tribune files both under Secrets detection and Software supply chain security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • GitHub Advanced Security
  • Legit Security
GitHub Advanced Security vs Legit Security: Products, Customers and Funding Compared
GitHub Advanced SecurityGitHub Advanced Security is sold as Code Security and Secret Protection together, to find and fix vulnerabilities and leaked secrets.github.comLegit SecurityLegit Security sells a SaaS security solution and ASPM platform that automates security issue discovery.legitsecurity.com
What it sells
  • Dependabot[2][5][9][10]Used to identify and respond to vulnerabilities in software dependencies.
  • ASPM platform[1][5]A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • June 18, 2026Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.[4]
  • April 27, 2026Legit Security announced new executive appointments to its leadership team.[3]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[11]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, GitHub says GitHub Enterprise delivers the performance and security needed for teams of any size. Its customers include professional services organizations and a company whose products are used in industries such as health care, automotive and manufacturing. Information security teams are among the buyers, with one customer team requiring all GitHub users to adopt GitHub Advanced Security.In our reading, Legit Security addresses organisations that are building an AppSec program. Legit Security says it typically works with organisations above a minimum developer count. Legit Security delivers its ASPM platform as a SaaS security solution. Legit Security deploys without agents, using APIs and access tokens.
Last verified
October 16, 2026September 27, 2026

Where they overlap

  • GitHub Advanced Security and Legit Security are both filed under Secrets detection and Software supply chain security.

Where they differ, field by field

  • GitHub Advanced Security's primary category is Static application security testing; Legit Security's is Application security posture management.
  • GitHub Advanced Security lists Dependabot. Legit Security lists ASPM platform.

What it sells: GitHub Advanced Security

What Dependabot does[2][5][9][10]
3M uses Dependabot to improve its ability to identify and respond to vulnerabilities in software dependencies. Dependabot alerts can be prioritized with automated triage rules in GitHub Code Security.

Questions about GitHub Advanced Security and Legit Security

What do GitHub Advanced Security and Legit Security sell?
GitHub Advanced Security sells Dependabot. Legit Security sells ASPM platform.
Are GitHub Advanced Security and Legit Security in the same category?
They share Secrets detection and Software supply chain security. GitHub Advanced Security's primary category is Static application security testing and Legit Security's is Application security posture management.
Who are GitHub Advanced Security and Legit Security sold to?
From its own pages, GitHub says GitHub Enterprise delivers the performance and security needed for teams of any size. In our reading, Legit Security addresses organisations that are building an AppSec program.
What have GitHub Advanced Security and Legit Security announced recently?
June 18, 2026: Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.

About GitHub Advanced Security

GitHub Advanced Security is sold as Code Security and Secret Protection together, to find and fix vulnerabilities and leaked secrets. GitHub says GitHub Advanced Security can be adopted at scale in a company.[1][3][5][6]

GitHub Code Security finds and fixes vulnerabilities in code before they reach production, and it prioritizes Dependabot alerts with automated triage rules. GitHub Code Security finds vulnerabilities with CodeQL and AI Scan, and alerts can then be assigned to Copilot to fix. GitHub says Code Security addresses security debt in the GitHub workflow with static analysis, AI remediation and proactive vulnerability management. Teams can review potential vulnerabilities and get suggested fixes with Copilot Autofix. GitHub code scanning finds vulnerabilities and coding errors before they reach production.[2][3][5][6][7][8]

GitHub Secret Protection mitigates risk associated with exposed secrets in repositories and prevents new leaks before they happen with push protection. GitHub Secret Protection detects exposed credentials with AI and blocks secrets before they're pushed. Push protection automatically blocks secrets before they reach the repository. GitHub detects exposed credentials and other secrets in repositories.[2][5][6][8]

GitHub gives alerts for vulnerable dependencies, plus pull requests that keep them up to date. GitHub lets teams coordinate fixes for groups of security alerts across repositories. GitHub's supply chain security reduces open source risks with auto-updates, dependency tracking, and build attestation. GitHub supply chain security lets teams visualize, protect, and remediate the upstream dependencies of their code.[2][6][7][8]

GitHub Enterprise Cloud lets customers decide where their code lives. GitHub says its API stays secure with ISO, SOC 2 and GDPR.[6][7]

GitHub names customers that use its security tooling. 3M says GitHub Advanced Security helps identify vulnerable dependencies, code and containers. 3M uses Dependabot to improve its ability to identify and respond to vulnerabilities in software dependencies. Accenture's Information Security team mandates that all GitHub users adopt GitHub Advanced Security. Accenture says all code committed to its repository is scanned with GitHub Advanced Security, and its team uses Dependabot and Secret Scanning.[1][3][5][7][9][10]

GitHub Advanced Security on the record

Sources

GitHub Advanced Security full record

  1. [1]Advanced securityGitHub · github.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]github.comGitHub · github.com · undated page, accessed October 16, 2026 · Tier A
  3. [3]GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHubGitHub · undated page, accessed November 2, 2026 · Tier A
  4. [4]GitHub Advanced Security (GHAS) Reviews & Features 2026 - G2G2 · undated page, accessed November 2, 2026 · Tier C
  5. [5]GitHub plans and pricing · GitHubGitHub · undated page, accessed November 3, 2026 · Tier A
  6. [6]GitHub Security · GitHubGitHub · undated page, accessed November 3, 2026 · Tier A
  7. [7]GitHub · Why Choose GitHub? · GitHubGitHub · undated page, accessed November 3, 2026 · Tier A
  8. [8]GitHub Features · GitHubGitHub · undated page, accessed November 3, 2026 · Tier A
  9. [9]3M · GitHubGitHub · undated page, accessed November 3, 2026 · Tier A
  10. [10]Accenture · GitHubGitHub · undated page, accessed November 3, 2026 · Tier A
  11. [11]GitHub Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed November 3, 2026 · Tier C

Legit Security full record

  1. [1]legitsecurity.comLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]PlatformLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Legit Security Names New VP of Human Resources, Head of Engineering to Accelerate Next Phase of GrowthBusiness Wire · published April 27, 2026 · Tier A
  4. [4]Legit Security Named as a Sample Vendor in the Gartner® Hype Cycle™ for Secure Software Engineering 2026Business Wire · published June 18, 2026 · Tier A
  5. [5]Legit Security at Black Hat | Request a MeetingLegit Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.