No more typing reviews! Try our Samantha, our new voice AI agent.

Legit Security vs Ox Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Legit Security
Ranking in Software Supply Chain Security
15th
Ranking in Application Security Posture Management (ASPM)
15th
Average Rating
10.0
Reviews Sentiment
7.8
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Ox Security
Ranking in Software Supply Chain Security
8th
Ranking in Application Security Posture Management (ASPM)
7th
Average Rating
9.0
Reviews Sentiment
7.8
Number of Reviews
3
Ranking in other categories
Static Application Security Testing (SAST) (21st), Software Composition Analysis (SCA) (11th)
 

Mindshare comparison

As of November 2026, in the Application Security Posture Management (ASPM) category, the mindshare of Legit Security is 2.4%, up from 2.3% compared to the previous year. The mindshare of Ox Security is 5.7%, up from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Posture Management (ASPM) Mindshare Distribution
ProductMindshare (%)
Ox Security5.7%
Legit Security2.4%
Other91.9%
Application Security Posture Management (ASPM)
 

Featured Reviews

Tim Crothers - PeerSpot reviewer
CISO at Mandiant / FireEye
Provides strong visibility, straightforward integration, and reduces the risk of attacks
Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.
Ravishankar Prakash - PeerSpot reviewer
Cloud & Devsecops Lead Engineer at Aon Corporation
Integrated workflows have transformed security reviews and provide end-to-end risk visibility
The best features that Ox Security offers include real-time visibility and actionable intelligence. Also, I love the intuitive interface and seamless integrations. Regarding the features of Ox Security, I love the pipeline functionality, which allows the creation of customized workflows based on scan results, making prevention and notification processes highly adaptable. I also love the visibility it provides, which is end-to-end security visibility covering the entire development lifecycle from code writing and storage to security testing, deployment, and infrastructure management. I also love its powerful pipeline system, which enables us to automate notifications to relevant teams based on issue origin and type while also enforcing security policies by blocking new code when prohibited issue types are detected. The intuitive interface makes it easy to pinpoint vulnerabilities early, prioritize critical issues, and streamline remediation processes. The seamless integration with existing DevOps tools ensures that security insights flow naturally into development workflows without creating bottlenecks. I also love the real-time visibility and actionable intelligence. It fosters a security-first mindset, boosting both the confidence of my development team and the overall resilience of our applications. Regarding Ox Security's AI capabilities, I find its governance and security capabilities to be very strong, particularly in helping us identify risks and maintaining visibility across the software development process. I also value the focus on data protection, access control, and responsible use of AI. The AI capabilities are generally accurate and reliable, especially in helping us identify vulnerabilities and highlighting potential risks very easily. They help us reduce manual effort and speed up security reviews.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."
"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."
"Legit has had a positive effect on our overall security posture."
"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."
"The seamless integration with existing DevOps tools ensures that security insights flow naturally into development workflows without creating bottlenecks."
"Ox Security has positively impacted my organization by helping to reduce the amount of noise we received from vulnerabilities because of the prioritization scoring it has and all of the context it provides."
"As a service provider, I believe the biggest advantage of Ox Security is its simplicity and the clarity of the issues, along with a very good dashboard showing the state of the company."
 

Cons

"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."
"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."
"The one we're working on right now is the ability to dynamically rerun development teams and groups."
"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."
"My overall review rating for Ox Security is zero."
"One area that Ox Security could improve is the dashboard customization and reporting."
"The main pain point I have with Ox Security as a tool is the user interface, which can feel quite complex when navigating large datasets."
 

Pricing and Cost Advice

"The pricing is reasonable."
Information not available
report
Use our free recommendation engine to learn which Application Security Posture Management (ASPM) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
10%
University
9%
Retailer
8%
Manufacturing Company
8%
Financial Services Firm
16%
Manufacturing Company
13%
Educational Organization
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Ox Security?
I'm not sure about flexibility because I didn't try it, so I can't comment on that, but as far as I understand, most of Ox Security is not personalized. I think that most of the tool is quite deter...
What is your primary use case for Ox Security?
I worked with Ox Security as a service provider, not as a representative, but as a user. I use it in my employee capacity, providing services to companies in Israel, and one of them is an insurance...
What advice do you have for others considering Ox Security?
Regarding threat detection capability, I think that Ox Security is not used for that matter. The CISO mainly focuses on dev sec ops rather than runtime security or real-time security. I figure that...
 

Comparisons

 

Overview

 

Sample Customers

Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...
Information Not Available
Find out what your peers are saying about Legit Security vs. Ox Security and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.