Legit is the only ASPM platform purpose-built to secure AI-led application development.
Boston, MA
- Tweets 725
- Following 3
- Followers 202
- Likes 89
6 years ago, Roni, Lior & Liav started Legit with a simple bet: the gap between how fast software gets built & how well it gets secured was going to widen, and someone needed to close it. Join us for year 7!
hubs.ly/Q04ylCCF0
#teamwork #annniversary #2L2Q #AgenticAppSec
12
If you're trying to figure out what Agentic AppSec looks like day to day, come see us at SecureWorld Atlanta on September 24 at the Westin Atlanta Perimeter North.
If you'll be there and want to connect, book time: hubs.li/Q04xPFDk0
#AppSec #SecureWorld #AgenticAppSec
27
The find-it, fix-it model AppSec has run on for decades wasn't built for this.
#AgenticAppSec #ApplicationSecurity #AISecurity
11
🚫 Wrong question: how fast can you find and fix vulnerabilities?
✔️ Right question: how much can you prevent from ever needing to be fixed?
That's the shift most AppSec conversations are still missing.
We wrote more on this shift: hubs.li/Q04xHXzC0
8
Two findings, same severity score. One sits in an internet-facing, revenue-generating app. The other sits in an internal tool nobody outside touches.
If your tooling scores them the same, you know where your alert fatigue comes from.
More on this: hubs.li/Q04xDQGb0
7
Still working out what Claude Security running Mythos 5 actually changes for AppSec?
Legit Field CTO Yoav Golan is walking through where it helps and where it falls short, starting at 2 pm ET.
Still time to join: hubs.li/Q04xfvll0
#Mythos #AppSec #AgenticAppSec
18
We're at IANS Chicago this Thursday, September 17, at the Marriott Downtown Magnificent Mile.
Our Field CTO Yoav Golan and Lauren Bernard will be running four Technology Spotlight sessions throughout the day on securing AI-generated code.
#IANS #AppSec #AgenticAppSec
1
31
We are excited to welcome Gal Ehrlich to the team as Senior Solutions Architect!
#legitlife #2L2Q #teamwork
9
35,364 new CVEs in H1 2026. One every 7.4 mins.
Chris Hughes unpacks this, including a walkthrough with our CTO Liav Caspi on how Legit is building for a world where the unit of work is the agent session, not the PR.
hubs.li/Q04x7cD90
#AppSec #vibecoding #AgenticAppSec
18
Meet Adi Hos, our new Employee Experience and Operations Manager.
In her words: “The company's DNA is truly outstanding! I feel privileged to be part of an organization like this.”
Welcome, Adi.
#legitlife #2L2Q #teamwork #culture
7
The find-it, fix-it model is broken.
It was built for a world where security teams had time: time to find a vulnerability, time to triage it, time to fix it before anyone found it first. AI took that time away.
#DevSecOps #vibecoding #AIremediation #AgenticAppSec #AppSec
12
Our AppSec Time-to-Exploit whitepaper looks at the gap between when a vulnerability becomes exploitable and when most security teams actually get to it.
If your remediation queue still moves at last decade's pace, this is worth ten minutes of your day.
hubs.li/Q04wMpC30
1
9
The new era of software is agentic.
Now, application security is too.
We're on a mission to give security teams the governance, guardrails, and control they need - without slowing down the developers now building at AI speed.
11
Unlike legacy scanners, Legit's native scanners - SAST, SCA, secrets, IaC and pipeline - cut through alert noise with reachability analysis & AI-aware detection.
Learn about AST within our Agentic AppSec platform - hubs.li/Q04vB1Nx0
#AppSec #AgenticAppSec #SAST #SCA
27
Last week Anthropic announced that Claude Security scans can now run on Claude Mythos 5.
In this new blog, Legit field CTO Yoav Golan breaks down what this means for AppSec teams and challenges to be on the lookout for.
hubs.li/Q04v58QY0
#AppSec #AgenticAppSec #Mythos5
50
The OWASP Foundation Agentic Skills Top 10 (AST10) details 10 key risks in agentic AI skills.
In this blog, Legit CTO Yoav Golan offers his perspectives.
hubs.li/Q04tQLfW0
#agenticskills #appsec #agenticappsec
15
AI writes your code now. Your AppSec process assume a human did.
In this session, ZoomInfo CISO Itay Kozuch and SACR Research Director Sean Sosnowski break down what comes next: Agentic AppSec.
hubs.li/Q04twzk50
#AppSec #AgenticAppSec #ApplicationSecurity #CISO
50
New blog by our CTO and co-founder Liav Caspi shares what our team learned as we embraced AI-first development and how it shaped VibeGuard.
hubs.li/Q04s7GmG0
33
Security at the developer endpoint to balance speed of engineering and risk reduction - that's what VibeGuard 2.0 is all about.
Read more: hubs.li/Q04rVJvz0
14
For 20 years, the core AppSec premise: when a vulnerability is found, there is time to fix the issue before an attacker exploits it.
Read this guide to learn more about the new era of AppSec and how security teams are tackling these challenges.
#AppSec #AgenticAppSec
14