CISO Tribune

Vendor comparison · 2 companies

HashiCorp vs Legit Security

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. CISO Tribune files both under Secrets detection. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HashiCorp
  • Legit Security
HashiCorp vs Legit Security: Products, Customers and Funding Compared
HashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.hashicorp.comLegit SecurityLegit Security sells a SaaS security solution and ASPM platform that automates security issue discovery.legitsecurity.com
What it sells
  • Vault[1][4][7][8][9]Vault is used for secrets management operations.
  • Boundary[1][7][8]Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.
  • HCP Terraform[4][6][10][11]HCP Terraform provisions cloud resources through automation.
  • Terraform Enterprise[10]Terraform Enterprise is an infrastructure as code tool.
  • Infragraph[4]Infragraph gives a view of a hybrid estate through a knowledge graph.
  • Packer[8]Packer workflows are used for image compliance in Azure.
  • HashiCorp Cloud PlatformHCP is a unified suite of SaaS products for infrastructure and security lifecycle management.
  • ASPM platform[1][5]A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2012[2]Not stated on its pages
Ownership and funding
Owned by IBM since 2025[3][6][11][12][15][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 27, 2026HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.[15]
  • June 18, 2026Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.[4]
  • April 27, 2026Legit Security announced new executive appointments to its leadership team.[3]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Customers named on its pages include a company that partners with medical organizations and an Italian telecommunications company. HCP Terraform is described with minimum privileges for developers, cloud engineers, and operations managers.In our reading, Legit Security addresses organisations that are building an AppSec program. Legit Security says it typically works with organisations above a minimum developer count. Legit Security delivers its ASPM platform as a SaaS security solution. Legit Security deploys without agents, using APIs and access tokens.
Last verified
October 21, 2026September 27, 2026

Where they overlap

  • HashiCorp and Legit Security are both filed under Secrets detection.

Where they differ, field by field

  • HashiCorp's primary category is Privileged access management; Legit Security's is Application security posture management.
  • HashiCorp is also filed under Non-human identity security. Legit Security is also filed under Software supply chain security.
  • HashiCorp lists Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Legit Security lists ASPM platform.
  • HashiCorp was founded in 2012.
  • HashiCorp is owned by IBM, since 2025.

What it sells: HashiCorp

What Boundary does[1][7][8]
Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.
What HCP Terraform does[4][6][10][11]
HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.
What Terraform Enterprise does[10]
Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.
What Infragraph does[4]
Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.
What HashiCorp Cloud Platform does
The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

Questions about HashiCorp and Legit Security

What do HashiCorp and Legit Security sell?
HashiCorp sells Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Legit Security sells ASPM platform.
Are HashiCorp and Legit Security in the same category?
They share Secrets detection. HashiCorp's primary category is Privileged access management and Legit Security's is Application security posture management.
When were HashiCorp and Legit Security founded?
HashiCorp was founded in 2012.
Who owns HashiCorp and Legit Security?
HashiCorp is owned by IBM, since 2025.
Who are HashiCorp and Legit Security sold to?
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. In our reading, Legit Security addresses organisations that are building an AppSec program.
What have HashiCorp and Legit Security announced recently?
October 27, 2026: HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog. June 18, 2026: Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.

About HashiCorp

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. The Infrastructure Cloud automates workflows and serves as a central system of record. Infrastructure and Security Lifecycle Management, shortened to ILM and SLM, are the foundation of The Infrastructure Cloud. HashiCorp organizes its commercial products by Infrastructure and Security portfolios.[4][5]

The HashiCorp Cloud Platform, or HCP, is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting an organization's most critical applications. HashiCorp lets organizations implement The Infrastructure Cloud through the HashiCorp Cloud Platform, through self-managed solutions, or through a combination of the two. The Infrastructure Cloud automates provisioning, enforces policies, and standardizes how teams work across a hybrid environment. HashiCorp offers identity-based access controls and secrets management for hybrid cloud security. Terraform, Vault, and Consul are among HashiCorp products.[1][4][9]

IBM Terraform provides automated infrastructure as code provisioning and management through a platform approach across cloud, private data centers, and SaaS infrastructure. A self-managed IBM Terraform option is for enterprises with security, compliance, and operational needs. HCP Terraform Standard and Premium customers now have access to Infragraph. Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph.[4]

Boundary brokers credentials to targets by integrating with external credential sources such as HashiCorp Vault. HashiCorp describes using Boundary to automatically discover target hosts and services to address access to on-demand infrastructure. HashiCorp describes using Azure Active Directory to verify the identity of a Vault user when applying access control and enforcing governance requirements in cloud resources. HashiCorp describes a Packer workflow for maintaining image compliance in Azure.[7][8]

AGL used Terraform Enterprise to create configuration files that define infrastructure, and AGL later moved from Terraform Enterprise to HCP Terraform. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines on Jenkins and Microsoft Azure DevOps Services. Vodafone Italia S.p.A. is an Italian telecommunications company.[10]

HCP Terraform includes role-based access control and Sentinel policy capabilities, with minimum privileges for developers, cloud engineers, and operations managers. Vodafone Italy developers can use Terraform modules served through the private registry to stand up the infrastructure a service or microservice demands.

HashiCorp, Inc. has been acquired by International Business Machines Corporation, as of February 27th, 2025, and will be integrated into the IBM organization. HashiCorp holds a SOC 2 Type 2 report and ISO 27001, ISO 27017 and ISO 27018 certifications. HashiCorp hires external third parties to perform regular security assessment and penetration testing of its products. HashiCorp provides Long-Term Support releases for certain commercial products. LTS versions let customers stay on a supported major version for up to two years at a time, and HashiCorp promises to backport critical fixes and security patches. HashiCorp Authenticode signs Microsoft Windows executables and code signs Apple macOS executables.[1][9][10][13][14]

HashiCorp on the record

Sources

HashiCorp full record

  1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A
  6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A
  7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A
  8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A
  9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A
  10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A
  13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A
  14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A
  15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A
  16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Legit Security full record

  1. [1]legitsecurity.comLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]PlatformLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Legit Security Names New VP of Human Resources, Head of Engineering to Accelerate Next Phase of GrowthBusiness Wire · published April 27, 2026 · Tier A
  4. [4]Legit Security Named as a Sample Vendor in the Gartner® Hype Cycle™ for Secure Software Engineering 2026Business Wire · published June 18, 2026 · Tier A
  5. [5]Legit Security at Black Hat | Request a MeetingLegit Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.