Loading organizations...
Loading organizations...

Legit is a technology company.
Legit Security provides an AI-native Application Security Posture Management (ASPM) platform. It automates AppSec issue discovery, prioritization, and remediation. Core capabilities include code security (SAST, SCA), secrets detection, and software supply chain security. The platform ensures continuous compliance, securing AI-generated code with tools like VibeGuard for unique AI development challenges.
Founded in 2020 by Roni Fuchs, Liav Caspi, and Lior Barak, Legit Security leverages their Israeli Defense Forces' Unit 8200 backgrounds. Their insight: traditional tools failed to protect AI-driven development. This spurred building a platform safeguarding the complex, evolving software supply chain.
The company targets enterprises using AI development, strengthening AppSec teams and software supply chain security. Legit Security’s vision: empower businesses to swiftly identify and mitigate application security risks. Providing comprehensive visibility and control, the platform elevates security postures for safer product delivery in an AI-centric world.
Legit has raised $3.0M across 1 funding round.
Legit has raised $3.0M in total across 1 funding round.
Legit Security is an AI-native Application Security Posture Management (ASPM) platform that automates the discovery, prioritization, and remediation of AppSec issues across the software development lifecycle (SDLC).[1][3][4] It serves security teams, developers, and enterprises by scanning beyond source code—including Git history, build logs, and tools like Slack, Teams, Confluence, and Jira—to eliminate secret sprawl, enforce policies, protect the software supply chain, and reduce vulnerability noise for faster, secure product delivery.[1][3] The platform solves critical problems like alert fatigue, compliance burdens, and insecure AI-generated code by providing intelligent prioritization based on business risk, enabling teams to shift security left without slowing development.[3][4]
Backed by prominent investors like CRV, Bessemer Venture Partners, and Cyberstarts, Legit has gained trust from leading enterprises, focusing on end-to-end visibility and automation to help organizations control risks and prove compliance.[1][3]
Legit Security was founded to address the limitations of traditional AppSec tools, which often lead to "whack-a-mole" remediation and poor visibility into attack surfaces.[1] CEO Roni Segev brings deep expertise from leading product and business units at Checkmarx and Microsoft (post-acquisition), with early career roots in the Israeli Defense Force’s Unit 8200.[1] The company emerged from the need for a foundational ASPM solution that protects development environments end-to-end, allowing developers to work safely while communicating risks company-wide.[1]
Key early traction includes investments from cyber-focused VCs like Gili Raanan of Cyberstarts (inventor of CAPTCHA and Sequoia partner) and Amit Karp of Bessemer, alongside CRV's James Currier, signaling strong validation in the cybersecurity startup ecosystem.[1] Pivotal moments involve expanding from secrets detection to full SDLC protection, including AI-powered supply chain security amid rising software threats.[3]
Legit rides the shift-left security trend in DevSecOps, where accelerating SDLCs demand embedded AppSec amid rising software supply chain attacks (e.g., SolarWinds-style incidents).[3][4][5] Timing is ideal as AI code generation proliferates, introducing new risks, while compliance pressures (e.g., auditors) intensify—Legit's automation fills the gap where manual processes fail.[1][3]
Market forces like exploding software complexity, remote collaboration tools, and regulatory demands favor Legit, positioning it to influence the ecosystem by standardizing ASPM as a "software factory" foundation.[1][5] It empowers startups and enterprises alike, reducing breach risks and accelerating secure innovation in a post-pandemic, cloud-native world.[3]
Legit is poised for explosive growth as AI-driven development and supply chain threats escalate, with expansions into deeper AI remediation, global compliance (e.g., evolving regs like DORA), and ecosystem integrations likely next.[3] Trends like GenAI adoption and zero-trust architectures will amplify demand for its noise-free, proactive platform, potentially elevating Legit to category leader alongside backers' portfolio stars like Wiz.
Tying back: In a world of constant software flux, Legit's AI-native ASPM isn't just protection—it's the control layer enabling secure innovation at speed.[1][3]
Legit has raised $3.0M in total across 1 funding round.
Legit's investors include ENIAC Ventures, Foundry Group, Intuition Capital, KRM Interests LLC, Multicoin Capital, Red Swan Ventures, VSC Ventures, Elies Campo, John Legend, Louis Beryl, Peter Carlsson, Reshma Saujani.
Legit has raised $3.0M across 1 funding round. Most recently, it raised $3.0M Seed in April 2018.
| Date | Round | Lead Investors | Other Investors |
|---|---|---|---|
| Apr 1, 2018 | $3.0M Seed | ENIAC Ventures | Foundry Group, Intuition Capital, KRM Interests LLC, Multicoin Capital, Red Swan Ventures, VSC Ventures, Elies Campo, John Legend, Louis Beryl, Peter Carlsson, Reshma Saujani, Scott Banister, Elementum Ventures, Max Ventures |