Try our new research platform with insights from 80,000+ expert users

Docker vs Legit Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
56
Ranking in other categories
Development Platforms (1st), Container Management (4th), AI Software Development (5th)
Legit Security
Ranking in Software Supply Chain Security
13th
Average Rating
10.0
Reviews Sentiment
7.8
Number of Reviews
4
Ranking in other categories
Application Security Posture Management (ASPM) (12th)
 

Mindshare comparison

As of March 2026, in the Software Supply Chain Security category, the mindshare of Docker is 5.5%, up from 1.3% compared to the previous year. The mindshare of Legit Security is 4.5%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Supply Chain Security Mindshare Distribution
ProductMindshare (%)
Docker5.5%
Legit Security4.5%
Other90.0%
Software Supply Chain Security
 

Featured Reviews

PB
Senior Cloud Engineer - AWS at Bytedance
Time-saving deployment with seamless virtualization for diverse environments
I used Docker to Dockerize Java code. We had a code base, and I needed to create a Docker image from it so that it could be deployed. At the time, we used Docker Compose, which is somewhat similar to Kubernetes Docker allows virtualization at a higher level without the need for a host machine.…
Tim Crothers - PeerSpot reviewer
CISO at Mandiant / FireEye
Provides strong visibility, straightforward integration, and reduces the risk of attacks
Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Docker creates lightweight applications that are easy to manage and scale."
"The current version is quite good with our application."
"The deployment is quite fast, which is beneficial."
"The solution is easy to install."
"The solution's most valuable feature is the Dockerfile, which makes the life of developers easy. Developers get a real understanding of container creation."
"The solution offers speed and flexibility."
"It is a quite mature technology."
"It is a very stable solution. Stability-wise, I rate the solution a ten out of ten."
"Legit has had a positive effect on our overall security posture."
"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."
"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."
"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."
 

Cons

"We would like to see improvement in adding the node into the Docker Swarm cluster, as at present it is a little tricky and requires a lot of manual steps."
"Deployment could be quicker."
"The command line interface could be more intuitive. I constantly struggle with it."
"I have encountered network issues while connecting with microservices. I want to optimize the application layers over the bucket. It should also have better documentation."
"Sometimes, we have sync-up issues where the build doesn't get processed due to these sync issues, causing the build to fail. That's one of the drawbacks I see. When we did a huge sync-up, we faced a couple of issues. It takes some time for us to complete the sync-up. For frequent, smaller updates, we haven't had any issues. However, challenges can arise for those who prefer doing everything in one go. This might not necessarily be due to the tool itself but because of the approach of doing everything in a single batch."
"The learning curve with Docker is huge and extensive"
"There is always room for improvement. I often refer to forums such as StackOverflow to learn from other developers' experiences and the challenges they have faced while using Docker."
"The backup compatibility for legacy window stations is an area of concern where improvement is required, especially since my company has certain legacy tools that we are struggling to move."
"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."
"The one we're working on right now is the ability to dynamically rerun development teams and groups."
"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."
"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."
 

Pricing and Cost Advice

"For commercial use, it's about $30 per month. The license itself isn't expensive, but if there are many users, the price becomes high."
"I would rate the pricing of Docker as ten out of ten"
"I use the solution's open-source version."
"Docker is a free open-source solution. However, there is the Docker Enterprise which is a paid solution."
"Docker is open source. To use a Docker enterprise model, we would need to pay for it."
"It's an open-source solution, so it doesn't cost anything"
"Docker is a free open-source solution."
"It's free."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
15%
Financial Services Firm
9%
University
7%
Computer Software Company
7%
Financial Services Firm
16%
University
12%
Computer Software Company
9%
Educational Organization
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise4
Large Enterprise35
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Docker?
The setup cost has balanced out, and I find Docker's pricing reasonable. Docker Engine is free and open source for Linux, and Docker Desktop is free for individual developers and small teams, but a...
What needs improvement with Docker?
As Docker is already a very mature tool, there are areas where it can be improved based on real-world usage. One area I consider is the Windows container experience. The pain point here is that Win...
What is your primary use case for Docker?
My main use case for Docker is to package applications into consistent, portable containers and use those images across CI/CD and production environments. I containerize applications so they can ru...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...
Find out what your peers are saying about Docker vs. Legit Security and other solutions. Updated: February 2026.
884,873 professionals have used our research since 2012.