What Legit Security is
Legit Security offers a holistic ASPM platform that focuses more on pipeline discovery, security, and third party data ingestion than native scanning solutions. The vendor site is www.legitsecurity.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Legit Security covers
Legit Security is in the catalog for these capabilities. Categories: ASPM, IaC, Container Vulnerability, Secret Scanning, SAST, and SCA. Catalog tags: Best for Enterprise.
How to evaluate Legit Security in a security program
Use Legit Security as a stack candidate, not as diligence evidence. The oneNorma score for Legit Security is 6/10 (percentile 83). If the real gap is in ASPM, IaC, Container Vulnerability, Secret Scanning, SAST, and SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.legitsecurity.com publishes. Contrast it with pentesting and Security Cloud & Compliance.