Stay ahead of what’s next in AppSec.
Learn more about what's happening with Legit Security and the Agentic AppSec market.
Search News
Microsoft's latest flaw hits open-source projects
A team of security researchers has uncovered a flaw in Microsoft's code development and testing environment that could affect upward of 70,000 open-source projects, according to a report first shared with Axios.
Legit Security Releases Industry’s First AI Discovery Capabilities
Legit Security announced the availability of the cybersecurity industry’s first AI discovery capabilities today. With these new capabilities, Legit helps bridge the gap between security and development by enabling CISOs and AppSec teams to understand where and when AI code is used and take action to ensure proper security controls are in place - without slowing software delivery.
Legit Security Applies AI to Detect Vulnerable Application Secrets
Legit Security today announced it has expanded the scope of its application security posture management (ASPM) platform to make use of artificial intelligence (AI) to discover secrets more accurately in applications that cybercriminals can actually exploit.
Legit Security Delivers AI-Powered Accuracy to Secrets Scanning
Legit Security today announced expanded and AI-powered capabilities to detect and protect secrets across the software development pipeline. With secrets at the heart of enabling applications to operate, understanding where they exist – beyond hard-coded secrets and source code - and preventing secrets from leaking is paramount.
First Step in Securing AI/ML Tools Is Locating Them
Security teams need to start factoring for these tools when thinking about the software supply chain. After all, they can't protect what they don't know they have.
Fortune Cyber 60
Ask any CEO about the biggest risks to their business, and cybersecurity is sure to be near the top of the list. Fortune teamed up with Lightspeed Venture Partners to identify the fastest-growing startups in this critical field.
Legit Security Announces Historic 2023 Year-End
Legit Security announced that 2023 delivered the most successful year in the company’s history, including most recently being named to the Fortune Cyber 60 list of the most important venture-backed startups.
Legit Security Uncovers Supply Chain Weakness in Popular Hugging Face Repository
Over the past year, we’ve seen plenty of examples of large language models spitting out worrisome content, from encouraging users to harm themselves to providing them with instructions on how to build bombs.
Legit Discovers “AI Jacking” Vulnerability in Popular Hugging Face AI Platform
Our research revealed how attackers could leverage Hugging Face, the popular AI development and collaboration platform, to carry out an AI supply chain attack that could impact tens of thousands of developers and researchers.
Legit Security lands $40M to lock down apps and dev environments
Legit Security, a cybersecurity company developing a platform to identify app vulnerabilities from code, has raised $40 million in a Series B funding round led by CRV with participation from Cyberstarts, Bessemer Venture Partners and TCV.
Legit Security Secures $40 Million Series B Investment Led by CRV
Legit Security, a cyber security company with an enterprise Application Security Posture Management (ASPM) platform, has successfully closed a $40 million venture capital round investment led by CRV with participation from existing investors Cyberstarts, Bessemer Venture Partners, and TCV.
Legit Security Expands Platform Capabilities for Application Security Posture Management
Legit Security announced expanded capabilities to provide comprehensive visibility into an application's security posture, including deep contextual insights and automated detection-to-remediation workflows so enterprises can release software fast while protecting against evolving threats.
Legit Security Announces Integration with CrowdStrike to Bring Application Security Posture Management to Customers
Legit Security announced a partnership with CrowdStrike, a global leader in cloud-delivered protection of endpoints, cloud workloads, identity, and data protection. With this partnership, Legit Security integrates with the CrowdStrike Falcon® platform to provide extended application security, auto-discovery, and vulnerability management. Leveraging the two solutions, customers can automatically trace cloud application vulnerabilities back to their code origin and more rapidly prioritize and remediate security issues leveraging deep application context.
Legit Security Discovers and Helps Remediate CI/CD Vulnerabilities in Google Open-Source Projects
Legit Security announced that it discovered Continuous Integration/Continuous Delivery (CI/CD) security vulnerabilities in open-source projects from Google. The Legit Security Research Team found a vulnerability leveraging "GitHub environment injection" that allows attackers to take control of a vulnerable project's GitHub Actions CI/CD pipeline.
Securing Your CI/CD Pipeline: Exploring the Dangers of Self-Hosted Agents
Continuous Integration/Continuous Deployment (CI/CD) pipelines have become crucial to modern software development practices. CI/CD pipelines can significantly improve development efficiency and software quality by automating the process of building, testing, and deploying code.
