Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

A comprehensive solution for ensuring security, governance, and pipeline integrity across all development tools and infrastructure is essential. Strengthen your source control management systems (SCM) by detecting secrets and leaks, while also safeguarding against code tampering. Examine your CI/CD configurations and Infrastructure-as-Code (IaC) for any security vulnerabilities or misconfigurations. Track any discrepancies between production systems’ IaC setups to thwart unauthorized code alterations. It's crucial to prevent developers from accidently making proprietary code public in repositories; this includes fingerprinting code assets and proactively identifying potential exposure on external sites. Maintain an inventory of assets, enforce stringent security policies, and easily showcase compliance throughout your DevOps ecosystem, whether it operates in the cloud or on-premises. Regularly scan IaC files for security flaws, ensuring alignment between specified IaC configurations and the actual infrastructure in use. Each commit or pull/merge request should be scrutinized for hard-coded secrets to prevent them from being merged into the master branch across all SCM platforms and various programming languages, thereby enhancing overall security measures. Implementing these strategies will create a robust security framework that supports both development agility and compliance.

Description

Legit Security protects software supply chains from attack by automatically discovering and securing development pipelines for gaps and leaks, the SDLC infrastructure and systems within those pipelines, and the people and their security hygiene as they operate within it. Legit Security allows you to stay safe while releasing software fast. Automated detection of security problems, remediation of threats and assurance of compliance for every software release. Comprehensive, visual SDLC inventory that is constantly updated. Reveal vulnerable SDLC infrastructure and systems. Centralized visibility of the configuration, coverage, and location of your security tools and scanners. Insecure build actions can be caught before they can embed vulnerabilities downstream. Before being pushed into SDLC, centralized, early prevention for sensitive data leaks and secrets. Validate the safe use of plug-ins and images that could compromise release integrity. To improve security posture and encourage behavior, track security trends across product lines and teams. Legit Security Scores gives you a quick overview of your security posture. You can integrate your alert and ticketing tools, or use ours.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

GitHub Yes 
GitLab Yes 
Jenkins Yes 
Terraform Yes 
Amazon Web Services (AWS) Yes 
Avalor No 
Bitbucket No 
Chainguard No 
CircleCI Yes 
Cobalt Yes 
Databricks Yes 
Grubhub Yes 
JFrog Artifactory No 
Jira Yes 
Kubernetes Yes 
Microsoft Azure Yes 
Qwiet AI No 
Slack Yes 
Snyk No 
Travis CI Yes 

Integrations

GitHub Yes 
GitLab Yes 
Jenkins Yes 
Terraform Yes 
Amazon Web Services (AWS) No 
Avalor Yes 
Bitbucket Yes 
Chainguard Yes 
CircleCI No 
Cobalt No 
Databricks No 
Grubhub No 
JFrog Artifactory Yes 
Jira No 
Kubernetes No 
Microsoft Azure No 
Qwiet AI Yes 
Slack No 
Snyk Yes 
Travis CI No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Cycode

Founded

2019

Country

Israel

Website

cycode.com

Vendor Details

Company Name

Legit Security

Founded

2020

Country

United States

Website

www.legitsecurity.com

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management No 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

DevOps

Approval Workflow No 
Dashboard No 
KPIs No 
Policy Management No 
Portfolio Management No 
Prioritization No 
Release Management No 
Timeline Management No 
Troubleshooting Reports No 

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring No 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Alternatives

Alternatives

Xygeni Reviews

Xygeni

Xygeni Security
Xygeni Reviews

Xygeni

Xygeni Security