Legit Security

aid: legit-security
name: Legit Security
description: 'Legit Security is an AI-native Application Security Posture Management (ASPM) platform that gives security and
  engineering teams a unified view of everything being built across the software factory — source code management, CI/CD pipelines,
  artifact registries, cloud platforms and AI coding assistants — then discovers, correlates, prioritizes and helps remediate
  application security findings from that one place. The platform spans code security (SAST and SCA), enterprise secrets detection
  and prevention, software supply chain security, advanced code change management, and continuous compliance and SBOM. Legit
  also ships an agent-facing surface: the Legit MCP Server, which delivers security intelligence into AI code assistants such
  as Cursor, GitHub Copilot, Claude Code and Windsurf, and VibeGuard / AI Guard, a Claude Code plugin that blocks secrets
  leakage, prompt injection, hidden characters and disallowed MCP tools in real time. The company also maintains the open
  source legitify scanner for GitHub and GitLab misconfiguration detection. Legit Security integrates with more than 100 AppSec,
  SCM, CI, registry, cloud, identity and ticketing tools, including outbound webhook notifications for custom integrations.
  Backed by Bessemer Venture Partners and CRV.'
url: https://raw.githubusercontent.com/api-evangelist/legit-security/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://www.legitsecurity.com/hubfs/Logo.svg
x-type: company
x-source: vc-portfolio
x-backed-by:
- bessemer-venture-partners
- crv
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Cybersecurity
- Application Security
- ASPM
- DevSecOps
- Software Supply Chain Security
- Secrets Detection
- SAST
- SCA
- Compliance
- AI Security
- MCP
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/legit-security-domain-security.yml
- type: Website
  url: https://www.legitsecurity.com/
- type: Login
  url: https://www.legitsecurity.co/app/login
- type: Blog
  url: https://www.legitsecurity.com/blog
- type: BlogRSS
  url: https://www.legitsecurity.com/blog/rss.xml
- type: GitHubOrganization
  url: https://github.com/Legit-Labs
- type: Support
  url: mailto:support@legitsecurity.com
- type: TermsOfService
  url: https://www.legitsecurity.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.legitsecurity.com/privacy-policy
- type: TrustCenter
  url: security/legit-security-trust-center.yml
- type: Packages
  url: packages/legit-security-packages.yml
- type: CLI
  url: cli/legit-security-cli.yml
- type: MCPServer
  url: mcp/legit-security-mcp.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Webhooks
  url: asyncapi/legit-security-webhooks.yml
- type: ChangeLog
  url: changelog/legit-security-changelog.yml
- type: LLMsTxt
  url: llms/legit-security-llms.txt
- type: Integrations
  url: https://www.legitsecurity.com/integrations
- type: KnowledgeBase
  url: https://www.legitsecurity.com/aspm-knowledge-base
- type: ContactUs
  url: https://www.legitsecurity.com/contact-us
- type: Demo
  url: https://info.legitsecurity.com/request-a-demo
- type: OpenSource
  url: https://github.com/Legit-Labs/legitify
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence