CISO Tribune

Vendor comparison · 2 companies

Legit Security vs Trail of Bits

Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. Trail of Bits sells security reviews and engineering services across application security, cryptography, blockchain, AI/ML, low-level systems, and software supply chain. CISO Tribune files both under Software supply chain security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Legit Security
  • Trail of Bits
Legit Security vs Trail of Bits: Products, Customers and Funding Compared
Legit SecurityLegit Security sells a SaaS security solution and ASPM platform that automates security issue discovery.legitsecurity.comTrail of BitsTrail of Bits sells security reviews and engineering services across application security, cryptography, blockchain, AI/ML, low-level systems, and software supply chain.trailofbits.com
What it sells
  • ASPM platform[1][5]A SaaS security solution that automates security issue discovery and gives a unified view of application risk from code to cloud.
  • Application Security[1][2][3]Code, cloud, and architecture review that finds the root cause and the fix for the whole bug class.
  • Blockchain[1][2][3]Review of every layer of a blockchain system, from smart contracts to nodes and bridges.
  • Cryptography[1][2][3]PhD-level cryptographers build and break real protocols.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 18, 2026Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.[4]
  • April 27, 2026Legit Security announced new executive appointments to its leadership team.[3]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
In our reading, Legit Security addresses organisations that are building an AppSec program. Legit Security says it typically works with organisations above a minimum developer count. Legit Security delivers its ASPM platform as a SaaS security solution. Legit Security deploys without agents, using APIs and access tokens.Trail of Bits describes review work for blockchain systems, covering smart contracts, nodes, and bridges. Trail of Bits describes security work on AI systems, from training data to deployed agent loops. Trail of Bits describes advising on the security challenges that come with advancing health research infrastructure.
Last verified
September 27, 2026October 19, 2026

Where they overlap

  • Legit Security and Trail of Bits are both filed under Software supply chain security.

Where they differ, field by field

  • Legit Security's primary category is Application security posture management; Trail of Bits's is Security consulting and advisory.
  • Legit Security is also filed under Secrets detection. Trail of Bits is also filed under AI model and agent security and Static application security testing.
  • Legit Security lists ASPM platform. Trail of Bits lists Application Security, Blockchain and Cryptography.

What it sells: Trail of Bits

What Blockchain does[1][2][3]
Trail of Bits reviews every layer of a blockchain system, from smart contracts to nodes and bridges, backed by Slither, Echidna, and Medusa. Trail of Bits maintains Slither, Echidna, and Manticore alongside the Building Secure Contracts guide.
What Cryptography does[1][2][3]
Trail of Bits employs PhD-level cryptographers who build and break real protocols, from zero-knowledge proofs and MPC to post-quantum migrations. Trail of Bits pulls cryptographers, compiler people, and systems engineers onto the same review.

Questions about Legit Security and Trail of Bits

What do Legit Security and Trail of Bits sell?
Legit Security sells ASPM platform. Trail of Bits sells Application Security, Blockchain and Cryptography.
Are Legit Security and Trail of Bits in the same category?
They share Software supply chain security. Legit Security's primary category is Application security posture management and Trail of Bits's is Security consulting and advisory.
Who are Legit Security and Trail of Bits sold to?
In our reading, Legit Security addresses organisations that are building an AppSec program. Trail of Bits describes review work for blockchain systems, covering smart contracts, nodes, and bridges.
What have Legit Security and Trail of Bits announced recently?
June 18, 2026: Legit Security announced it was named a Sample Vendor in the Gartner Hype Cycle for Secure Software Engineering 2026.

About Legit Security

Legit Security sells a SaaS security solution and ASPM platform that automates security issue discovery. Legit Security gives a unified view of all application risk, from code to cloud, covering what affects an AppSec posture.

Legit Security gives context for prioritizing and acting on remediation of the issues that create the most business risk. Legit Security automates manual processes associated with triage and remediation.

Legit Security discovers, analyzes and secures an end-to-end software supply chain with a real-time SDLC inventory. Legit Security maps and visualizes an entire software supply chain. Customers quoted by Legit Security describe using the platform to inventory SDLC systems and security tools and to view developer activity. A customer quoted by Legit Security describes using the platform to secure CI/CD pipelines, track the security posture of different teams and address SDLC configuration drifts. A customer quoted by Legit Security describes using the platform for governance and for visualization across the SDLC.

Legit Security offers help to organisations as they build an AppSec program. Legit Security helps implement secrets detection and prevention. Legit Security helps identify use of GenAI in development. Legit Security helps align an AppSec program with key compliance standards and frameworks. Legit Security supports security frameworks used to validate and demonstrate compliance.

Legit Security needs no agents to install and uses APIs and access tokens. Legit Security typically works with organisations of 50+ developers. Legit Security was co-founded by Roni Fuchs as CEO, Liav Caspi as CTO and Lior Barak as COO.[1][2]

Legit Security on the record

Sources

Legit Security full record

  1. [1]legitsecurity.comLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]PlatformLegit Security · legitsecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Legit Security Names New VP of Human Resources, Head of Engineering to Accelerate Next Phase of GrowthBusiness Wire · published April 27, 2026 · Tier A
  4. [4]Legit Security Named as a Sample Vendor in the Gartner® Hype Cycle™ for Secure Software Engineering 2026Business Wire · published June 18, 2026 · Tier A
  5. [5]Legit Security at Black Hat | Request a MeetingLegit Security · undated page, accessed November 10, 2026 · Tier A

Trail of Bits full record

  1. [1]trailofbits.comTrail of Bits · trailofbits.com · undated page, accessed October 19, 2026 · Tier A
  2. [2]About · Trail of BitsTrail of Bits · undated page, accessed November 10, 2026 · Tier A
  3. [3]Services · Trail of BitsTrail of Bits · undated page, accessed November 10, 2026 · Tier A
  4. [4]Ruby Security Field Guide — Guide · Trail of BitsTrail of Bits · undated page, accessed November 10, 2026 · Tier A
  5. [5]Offchain Security Council Rotation · Trail of BitsTrail of Bits · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.