Legit is now the sole ASPM platform offering root cause remediation actions, enabling organizations to lower AppSec risk by addressing issues at their source. By identifying key choke points where remediation can resolve multiple issues simultaneously, security teams can speed up risk reduction while lightening the load on developers.  

Legit has developed a machine learning model that can be directed at vast amounts of code and fine-tuned (trained) to understand the nuance of secrets and when they should be considered false-positive. Given a secret and the context in which it was introduced, this model knows whether it should be flagged. Using this approach reduces the number of false positives while keeping true positive rates stable.    

The solution also adds “Active Secret Validation,” which tries to validate whether a secret is valid or not to further increase accuracy.   

Legit works with all the AppSec tools you currently use, streamlining and coordinating their findings so you get more from your investment in these solutions.  

Legit goes beyond vulnerabilities in code to focus on the security of your entire software factory. Because the Legit ASPM platform discovers and visualizes all aspects of both applications and the software factory producing these assets, plus all security controls and gaps, Legit is in a unique position to offer a snapshot of common areas of AppSec posture risk.  

Legit maps your security guardrails to regulations including PCI-DSS, FedRamp, NIST 800.53, SSDF, CISA Attestation, SLSA, and OWASP. With real-time monitoring and alerts on compliance violations, Legit eases the burden of complying with regulations.    

As developers harness the power of AI and large language models (LLMs) to develop and deploy capabilities more quickly, new risks arise, including vulnerabilities, copyright restrictions, and data exposure. Legit helps security teams understand when and where AI is used in development and that it is being used securely.