CISO Tribune

Vendor comparison · 2 companies

Legit Security vs Raven.io

Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. Raven.io sells runtime security that prevents exploits at runtime, before there is a CVE. CISO Tribune files both under Application security posture management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Legit Security
  • Raven.io
Legit Security vs Raven.io: Products, Customers and Funding Compared
Legit SecurityLegit Security sells a SaaS security solution and ASPM platform that automates security issue discovery.legitsecurity.comRaven.ioRaven.io sells runtime security that prevents exploits at runtime, before there is a CVE.raven.io
What it sells
  • ASPM platform[1][5]A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.
  • Runtime Prevention[1]Blocks malicious code execution at runtime whether or not a CVE exists for the underlying flaw.
  • Runtime ADR[1]Detects and responds to application-level attacks and provides detailed application forensics.
  • Runtime SCA[1]Analyzes which open-source vulnerabilities are actually reachable at runtime and provides remediation plans for the rest.
  • Runtime Gatekeeper[1]Evaluates applications before deployment to identify and block risky ones from reaching production.
  • Runtime AI-Agents[1]Gives visibility into AI agents running in an environment and identifies unauthorized or shadow agents.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 18, 2026Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.[4]
  • April 27, 2026Legit Security announced new executive appointments to its leadership team.[3]
  • March 18, 2026RAVEN.IO, a runtime application security company, announced it has raised $20 million in funding.[10]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
In our reading, Legit Security addresses organisations that are building an AppSec program. Legit Security says it typically works with organisations above a minimum developer count. Legit Security delivers its ASPM platform as a SaaS security solution. Legit Security deploys without agents, using APIs and access tokens.From its own pages, Raven.io sells mainly to organizations that want to protect their cloud native applications by focusing on runtime. Raven.io names enterprise SaaS as a setting where it is used. Raven connects running libraries, active protection and recorded outcomes for security and compliance teams.
Last verified
September 27, 2026October 23, 2026

Where they overlap

  • Legit Security and Raven.io are both filed under Application security posture management.

Where they differ, field by field

  • Legit Security's primary category is Application security posture management; Raven.io's is Cloud workload protection.
  • Legit Security is also filed under Secrets detection and Software supply chain security. Raven.io is also filed under Software composition analysis and AI model and agent security.
  • Legit Security lists ASPM platform. Raven.io lists Runtime Prevention, Runtime ADR, Runtime SCA, Runtime Gatekeeper and Runtime AI-Agents.

Questions about Legit Security and Raven.io

What do Legit Security and Raven.io sell?
Legit Security sells ASPM platform. Raven.io sells Runtime Prevention, Runtime ADR, Runtime SCA, Runtime Gatekeeper and Runtime AI-Agents.
Are Legit Security and Raven.io in the same category?
They share Application security posture management. Legit Security's primary category is Application security posture management and Raven.io's is Cloud workload protection.
Who are Legit Security and Raven.io sold to?
In our reading, Legit Security addresses organisations that are building an AppSec program. From its own pages, Raven.io sells mainly to organizations that want to protect their cloud native applications by focusing on runtime.
What have Legit Security and Raven.io announced recently?
June 18, 2026: Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026. March 18, 2026: RAVEN.IO, a runtime application security company, announced it has raised $20 million in funding.

About Legit Security

Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. Legit Security gives a unified view of all application risk, from code to cloud, covering what affects an AppSec posture.

Legit Security gives context for prioritizing and acting on remediation of the issues that create the most business risk. Legit Security automates manual processes associated with triage and remediation.

Legit Security discovers, analyzes and secures an end-to-end software supply chain with a real-time SDLC inventory. Legit Security maps and visualizes an entire software supply chain. Customers quoted by Legit Security describe using the platform to inventory SDLC systems and security tools and to view developer activity. A customer quoted by Legit Security describes using the platform to secure CI/CD pipelines, track the security posture of different teams and address SDLC configuration drifts. A customer quoted by Legit Security describes using the platform for governance and for visualization across the SDLC.

Legit Security offers help to organisations as they build an AppSec program. Legit Security helps implement secrets detection and prevention. Legit Security helps identify use of GenAI in development. Legit Security helps align an AppSec program with key compliance standards and frameworks. Legit Security supports security frameworks used to validate and demonstrate compliance.

Legit Security needs no agents to install and uses APIs and access tokens. Legit Security typically works with organisations of 50+ developers. Legit Security was co-founded by Roni Fuchs as CEO, Liav Caspi as CTO and Lior Barak as COO.[1][2]

Legit Security on the record

Sources

Legit Security full record

  1. [1]legitsecurity.comLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]PlatformLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Legit Security Names New VP of Human Resources, Head of Engineering to Accelerate Next Phase of GrowthBusiness Wire · published April 27, 2026 · Tier A
  4. [4]Legit Security Named as a Sample Vendor in the Gartner® Hype Cycle™ for Secure Software Engineering 2026Business Wire · published June 18, 2026 · Tier A
  5. [5]Legit Security at Black Hat | Request a MeetingLegit Security · undated page, accessed November 10, 2026 · Tier A

Raven.io full record

  1. [1]raven.ioRaven.io · raven.io · undated page, accessed October 23, 2026 · Tier A
  2. [2]Raven.io: Runtime Security Platform & Application ProtectionRaven.io · undated page, accessed November 10, 2026 · Tier A
  3. [3]Raven Runtime Security Pricing | Get a Custom QuoteRaven.io · undated page, accessed November 10, 2026 · Tier A
  4. [4]Database Protection | Raven.ioRaven.io · undated page, accessed November 10, 2026 · Tier A
  5. [5]Application-Aware Cloud Threat Hunting | Raven.ioRaven.io · undated page, accessed November 10, 2026 · Tier A
  6. [6]Support Compliance with Runtime Protection | Raven.ioRaven.io · undated page, accessed November 10, 2026 · Tier A
  7. [7]High-Compliance Environments | Raven.ioRaven.io · undated page, accessed November 10, 2026 · Tier A
  8. [8]Internet Facing Applications | Raven.ioRaven.io · undated page, accessed November 10, 2026 · Tier A
  9. [9]Innovating Cloud Security for Modern Applications | Raven.ioRaven.io · undated page, accessed November 10, 2026 · Tier A
  10. [10]RAVEN.IO Raises $20 Million to Prevent Cyberattacks as AI-Generated Exploits Make CVE-Based Security ObsoletePRNewswire · published March 18, 2026 · Tier A

Spot a factual error? Request a correction.