Why I Joined Legit

For nearly five years, I had the opportunity to build Mobb around a problem I cared deeply about: helping organizations move beyond finding application vulnerabilities to actually fixing them.

We believed that security tools had become very good at identifying problems, but that developers were still left with the hardest part: understanding those findings and turning them into secure code changes. Mobb focused on closing that gap through automated vulnerability remediation.

Closing the company was difficult, and I’m still processing that chapter. But the experience also reinforced my conviction that application security must become more closely connected to how software is created.

That conviction is a big part of why joining Legit Security as Chief Strategy Officer feels like a natural next step. I’ve known Legit’s founders, CEO Roni Fuchs, CTO Liav Caspi, and COO Lior Barak, for quite some time and have followed the company’s journey closely. I’ve watched the team build an ambitious company focused on agentic AppSec and on securing the way modern software is built, and I’ve had many conversations with them about where the industry is going.

Right now, that industry is entering one of the most consequential transitions I’ve seen in my career. AI is no longer simply helping developers complete lines of code. We have moved toward an agentic development model in which AI systems can plan features, write substantial portions of applications, select dependencies, modify infrastructure, run tests, and make changes with increasing autonomy.

This promises an extraordinary increase in the speed of software creation. It also fundamentally changes the nature of application security.

When code is created by autonomous agents at machine speed, security cannot depend on people manually reviewing every change or sorting through an ever-growing backlog of findings. Organizations have to understand which agents are creating software, what context and tools they can access, what actions they take, and whether the resulting software can be trusted.

Security must operate inside this new development experience. It needs to provide guardrails while code is being created, give both human developers and AI agents the right context, and help resolve problems without becoming the constraint that slows everything down.

My work at Mobb gave me a close view of one crucial part of that future: using automation to turn security knowledge into actionable fixes. At Legit, I see the opportunity to help address the broader challenge of securing the entire AI-native development process, from the way software is created to the way risk is understood and resolved. That combination of continuity and possibility is what made Legit feel like the right fit for me.

In my new role, I’ll work closely with the leadership team on strategy, growth, partnerships, and bringing this vision of agentic AppSec to more customers and to the broader security community.

There is still a great deal to figure out about how this technology will reshape software development. That uncertainty is exactly what makes this such an important moment to help build security teams need as AI takes the front seat in software development.