Legit Security offers a unified application security posture management (ASPM) platform that aggregates vulnerabilities from code, pipelines and cloud environments, integrates with traditional app-security tools, and risk-scores issues to prioritize remediation. The product provides real-time visibility across dev environments, enforces security policies in CI/CD pipelines and can trace production vulnerabilities back to their originating pipeline and source code. Legit started in 2020 focused on software supply chain security and has expanded to auto-discovery and correlation of pipelines, dependencies, misconfigurations and third-party tools. Customers include Google, the New York Stock Exchange, Kraft Heinz and Takeda Pharmaceuticals. The company disclosed a $2.25M customer deal this year and reported average deal sizes of roughly $341,000 in Q2. Management plans to use new funding to expand sales, marketing and R&D teams and expects headcount to grow from 78 to over 100 by year-end. Legit Security provides an enterprise SaaS solution that automatically discovers and secures software supply chains, covering pipelines, infrastructure, code, and people. Its platform supports both cloud and on‑premises resources and combines automated discovery and analysis with hundreds of security policies developed by industry experts. The company emphasizes continuous assurance so applications can be released without vulnerabilities. Led by CEO Roni Fuchs, CTO Liav Caspi, and VP of R&D Lior Barak, Legit positions its product for customers seeking integrated SDLC security. Following its launch out of stealth, the company is focused on expanding engineering and go‑to‑market capabilities in the U.S.

Total raised

$70M

Funding rounds

2

Latest round

Series B

Latest activity

Sep 2023