# Legit Security: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 27 judge labels across 1 category by 12 of 14 models. Page: https://www.gane.ai/index/it/vendors/legit-security

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 2% | 8 | 19% | 27 |

## What the models said for it

- "For the lowest entry point, Cycode and Legit Security are the most budget-friendly" (Mistral Small, ASPM)
- "purpose-built ASPM solutions like *Apiiro*, *Cycode*, or *Legit Security* generally offer stronger contextual correlation" (Gemini 3.5 Flash, ASPM)
- "Emphasize software-factory policies and supply-chain governance: compare Legit and Apiiro." (GPT-6 Luna, ASPM)
- "Better when protecting build pipelines and software-delivery infrastructure is the primary concern." (Perplexity Sonar, ASPM)

## And against it

- "Around 64% negative. Criticized for niche focus (e.g., supply chain), high costs" (Grok 4.20, ASPM)
- "also mentioned among those criticized for not being ideal for small businesses" (Mistral Small, ASPM)
- "considered "criticized challengers" include ... Legit Security" (Llama 4 Maverick, ASPM)
- "Consideration: Higher cost but comprehensive feature set" (MiniMax M2.5, ASPM)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 4 | 1 | 0 | 5 |
| Perplexity Sonar | 0 | 2 | 0 | 0 | 2 |
| Grok 4.20 | 0 | 0 | 0 | 1 | 1 |
| Mistral Small | 1 | 0 | 0 | 1 | 2 |
| DeepSeek V4 Flash | 0 | 0 | 2 | 0 | 2 |
| Llama 4 Maverick | 0 | 1 | 0 | 1 | 2 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 1 | 2 | 0 | 3 |
| GLM 4.7 FlashX | 0 | 0 | 2 | 1 | 3 |
| MiniMax M2.5 | 0 | 1 | 0 | 1 | 2 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 2 | 1 | 0 | 3 |

## Sources returned with these answers

The sites and pages cited by the answers that named Legit Security, from 52 of the 58 answers that named it (only the models that return a source list).

### Domains cited

- csoonline.com: 34
- cycode.com: 27
- checkmarx.com: 23
- g2.com: 20
- gbhackers.com: 19
- ox.security: 19
- github.com: 17
- appsecsanta.com: 16
- guideflow.com: 16
- expertinsights.com: 15

### Pages cited

- https://csoonline.com/article/4041891/aspm-buyers-guide-seven-products-to-help-secure-your-applications.html: 34
- https://gbhackers.com/best-aspm-compared: 19
- https://checkmarx.com/learn/aspm/best-aspm-tools-5-platforms-to-watch-in-2026: 18
- https://ox.security/blog/aspm-tools: 17
- https://appsecsanta.com/aspm-tools: 16
- https://guideflow.com/blog/aspm-software: 16
- https://expertinsights.com/application-security/the-top-application-security-posture-management-aspm-tools: 15
- https://cycode.com/blog/best-application-secuirty-posture-management-tools: 13

## In its own words

What Legit Security's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: AI-native ASPM platform to detect, fix and prevent AppSec risk from AI-generated code, secrets, and critical vulnerabilities. (https://legitsecurity.com/)
- For: security teams (https://legitsecurity.com/)
- Price stated: Plans & Packages (https://www.legitsecurity.com/platform/aspm)
- Integrations claimed: 120 (https://www.legitsecurity.com/integrations)
- Certifications: SOC 2 Type II, ISO 27001
- Hosting: US
- Customers named: Kraft-Heinz, ACV Auctions, Netskope, Chicago Board of Options Exchange (CBOE), Noname Security, Firebolt Analytics

## What it publishes

Every page legitsecurity.com exposes, read 2026-10-05: 547 addresses. By kind, pages and the last 90 days:

- blog: 223 pages, 5 in the last 90 days, latest 2026-10-01
- case study: 8 pages, 0 in the last 90 days, latest 2023-09-27
- webinar or virtual event: 1 pages, 0 in the last 90 days, latest undated
- report or ebook: 1 pages, 0 in the last 90 days, latest undated
- comparison: 11 pages, 0 in the last 90 days, latest 2026-01-05
- template or tool: 3 pages, 0 in the last 90 days, latest 2025-02-06
- glossary or explainer: 38 pages, 0 in the last 90 days, latest 2026-01-05
- news or press: 40 pages, 1 in the last 90 days, latest 2026-08-03
- Recent: 2026-10-01 blog: Stop drowning in the 30 https://www.legitsecurity.com/blog/stop-drowning-in-the-30
- Recent: 2026-09-30 blog: Agentic remediation just got bigger now fixing vulnerabilities in your dependencies not just your code https://www.legitsecurity.com/blog/agentic-remediation-just-got-bigger-now-fixing-vulnerabilities-in-your-dependencies-not-just-your-code
- Recent: 2026-08-24 blog: Claude mythos 5 can find the vulnerabilities. but which ones actually matter https://www.legitsecurity.com/blog/claude-mythos-5-can-find-the-vulnerabilities.-but-which-ones-actually-matter
- Recent: 2026-08-20 blog: Your ai agent has new skills. can you trust them https://www.legitsecurity.com/blog/your-ai-agent-has-new-skills.-can-you-trust-them
- Recent: 2026-08-05 blog: Secure fast not slow what we learned building vibeguard 2.0 https://www.legitsecurity.com/blog/secure-fast-not-slow-what-we-learned-building-vibeguard-2.0
- Recent: 2026-08-03 news or press: Legit security launches vibeguard 2.0 https://www.legitsecurity.com/press-releases/legit-security-launches-vibeguard-2.0

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.