Legit Security vs Snyk comparison

Legit Security and Snyk are both solutions in the Application Security Posture Management (ASPM) category. Legit Security is ranked #13, while Snyk is ranked #2 with an average rating of 8.3. Legit Security holds a 2.7% mindshare in ASPM, compared to Snyk’s 15.9% mindshare. Additionally, 100% of Legit Security users are willing to recommend the solution, compared to 100% of Snyk users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 11, 2026

Snyk and Legit Security are competing products in the cybersecurity space. Despite Snyk's robust pricing and effective support services, Legit Security presents superior features, giving it an upper hand in providing end-to-end protection and advanced security capabilities.

Features: Snyk offers strong integration capabilities with a comprehensive vulnerability scanning feature that excels in open-source security and provides actionable remediation advice. It is developer-friendly with integrations into continuous integration pipelines and offers reliable container security features. Legit Security extends its scope by securing development pipelines, protecting against software supply chain threats, and offering a comprehensive unified application security control panel. Its integration with existing tools and focus on end-to-end security makes it a robust choice.

Room for Improvement: Snyk could enhance its feature set by providing more comprehensive licensing checks and improving its on-premise setup cost. Further development in reducing on-premise environmental integration costs could be beneficial. Legit Security may need to improve secret detection to reduce false positives and streamline manual intervention. It could also offer more refinement in its secret management and validation features to better support its capabilities.

Ease of Deployment and Customer Service: Snyk has a user-friendly integration model that results in quick deployment supported by a proactive customer service team. It enables developers to own security with ease, offering comprehensive documentation to facilitate smooth onboarding. Legit Security, though requiring a more complex initial setup, provides reliable customer support that helps in easing deployment. The integration process is versatile, supporting effective communication during and after deployment, adding significant value.

Pricing and ROI: Snyk offers competitive pricing with a strong ROI for companies focused on open-source security, presenting itself as a cost-effective option. Although Legit Security requires a higher initial investment, it provides significant ROI due to its extensive features covering broader security needs. While Snyk attracts budget-conscious buyers, Legit Security validates its value through extensive security offerings and long-term benefits.

To learn more, read our detailed Legit Security vs. Snyk Report (Updated: April 2026).

Buyer's Guide

Legit Security vs. Snyk

April 2026

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex Cloud by Palo Alto N...

Mindshare comparison

As of June 2026, in the Application Security Posture Management (ASPM) category, the mindshare of Cortex Cloud by Palo Alto Networks is 2.2%, up from 0.2% compared to the previous year. The mindshare of Legit Security is 2.7%, up from 2.6% compared to the previous year. The mindshare of Snyk is 15.9%, down from 20.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Posture Management (ASPM) Mindshare Distribution
Product	Mindshare (%)
Snyk	15.9%
Cortex Cloud by Palo Alto Networks	2.2%
Legit Security	2.7%
Other	79.2%

Application Security Posture Management (ASPM)

Featured Reviews

Sonali Jha

Technical Solutions Architect at IBM

Cloud security has improved as AI-driven runtime protection detects threats and reduces incidents

In my opinion, Cortex Cloud by Palo Alto Networks could be improved or enhanced in various ways. I don't have an idea about that yet because for that you actually need to use two or three different other tools to make a basic comparison. If you ask me how good the tool is, I would fairly rate it quite high. The tool is very popular, and customers can already see that it is one of the cloud leaders in the security space. The platform had a very good feature which provides documentation links about how to use a specific feature on the UI. It takes you to the proper documentation page where it suggests what to do and tells you about the steps that need to be done for a resource deployment. My thoughts about improving the product which I believe could greatly aid vendors is that it used to be a very user-friendly tool, but now they have incorporated everything under one umbrella. It has XDR, XSOAR, and Cortex Cloud by Palo Alto Networks. Before, we used to have separate modules and separate environments for each of these capabilities or features. Right now, it is a little complex and users would take their own time to know the tool better. This is something that would have been way better, but I would say there would be different opinions on this. Talking about user-friendliness, it has decreased now.

Read full review

Tim Crothers

CISO at Mandiant / FireEye

Provides strong visibility, straightforward integration, and reduces the risk of attacks

Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.

Read full review

Abhishek-Goyal

Software Engineer at a computer software company with 11-50 employees

Improves security posture by actively reducing critical vulnerabilities and guiding remediation

Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Overall, Cortex Cloud by Palo Alto Networks is a technically strong product, and I rate it ten out of ten."

"The most beneficial aspect of Cortex Cloud by Palo Alto Networks and Palo Alto in general is that there is a single platform for all cloud providers for securitization."

"I have absolutely seen improvements in our incident close rates, with mean time to detect and respond reduced significantly, sometimes by at least forty to fifty percent."

"The AI and automation features in detecting and responding to high-risk threats are impressive; it's one of the best tools regarding AI technology and unifies security in one platform in real-time, improving vulnerability analysis, incident response, and compliance reporting."

"From a technical standpoint or pricing, Cortex Cloud by Palo Alto Networks is a stronger solution in the market at the moment compared to other products from ConnectWise or Symantec."

"Cortex Cloud by Palo Alto Networks has impacted our organization positively by keeping our machines secure and our team using the dashboard to find issues quickly."

"Previously with Cortex Cloud by Palo Alto Networks, I deployed this product for one of my customers, and after three to four months, they said that previously they had around four hours of MTTR, and now it has reduced to just 15 to 20 minutes."

"The most valuable features I have found in Cortex Cloud by Palo Alto Networks are those that we provided to customers in a stock environment, as we have done some POCs and tried to check how it can help different organizations, and this same solution has been positioned for multiple customers."

More Cortex Cloud by Palo Alto Networks pros

"Legit has had a positive effect on our overall security posture."

"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."

"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."

"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."

"Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients."

"We're loving some of the Kubernetes integration as well. That's really quite cool. It's still in the early days of our use of it, but it looks really exciting. In the Kubernetes world, it's very good at reporting on the areas around the configuration of your platform, rather than the things that you've pulled in. There's some good advice there that allows you to prioritize whether something is important or just worrying. That's very helpful."

"The solution's Open Source feature gives us notifications and suggestions regarding how to address vulnerabilities."

"Static code analysis is one of the best features of the solution."

"It is a stable solution. Stability-wise, I rate the solution a ten out of ten."

"Snyk allows developers and development managers to identify open-source vulnerabilities in every stage, and as a result the fix is much cheaper than identifying something in production, being up to 100 times less expensive and enabling a few early bug fixes to cover all the license fees for the annual subscription of Snyk."

"Snyk performs software composition analysis (SCA) similar to other expensive tools."

"It is one of the best product out there to help developers find and fix vulnerabilities quickly. When we talk about the third-party software vulnerability piece and potentially security issues, it takes the load off the user or developer. They even provide automitigation strategies and an auto-fix feature, which seem to have been adopted pretty well."

More Snyk pros

Cons

"In my opinion, Cortex Cloud by Palo Alto Networks can be improved by addressing forensic information collection and storage, although I cannot suggest specific things right now, based on what customers might need."

"Some aspects of the GUI can be confusing and make it difficult for me to find certain options or navigate where needed."

"From the commercial perspective, we have some limitations because Palo Alto has a minimum number of users of endpoints set at 200, which is quite high for the Italian market."

"My thoughts about improving the product which I believe could greatly aid vendors is that it used to be a very user-friendly tool, but now they have incorporated everything under one umbrella."

"As per my experience with Cortex Cloud by Palo Alto Networks, the UI could be simpler."

"Cortex Cloud by Palo Alto Networks is not the cheapest solution in the market, but I know that is the best solution for SOC and Cloud once have all tools to connect cloud issues with SOC procedures, because we are partners with T-Systems."

"The negative aspects or areas for improvement in the product include the fact that the cost might be a bit high, which challenges commercials, but not technically."

"Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent."

More Cortex Cloud by Palo Alto Networks cons

"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."

"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."

"The one we're working on right now is the ability to dynamically rerun development teams and groups."

"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."

"Snyk should improve the scanning capabilities for other languages. For example, Veracode is strong with different languages such as Java, C#, and others."

"The log export function could be easier when shipping logs to other platforms such as Splunk."

"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license."

"We've also had technical issues with blocking newly introduced vulnerabilities in PRs and that was creating a lot of extra work for developers in trying to close and reopen the PR to get rid of some areas. We ended up having to disable that feature altogether because it wasn't really working for us and it was actually slowing down developer velocity."

"Snyk's API and UI features could work better in terms of speed."

"Right now, we receive too many high vulnerabilities. If we enable notifications, then we just get a lot of spam message."

"The solution's reporting and storage could be improved."

"We tried to integrate it into our software development environment but it went really badly. It took a lot of time and prevented the developers from using the IDE. Eventually, we didn't use it in the development area... I would like to see better integrations to help the developers get along better with the tool. And the plugin for the IDE is not so good. This is something we would like to have..."

More Snyk cons

Pricing and Cost Advice

Information not available

"The pricing is reasonable."

"The solution is less expensive than Black Duck."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing a three. It is a cheap solution."

"It's good value. That's the primary thing. It's not cheap-cheap, but it's good value."

"The license model is based on the number of contributing developers. Snyk is expensive, for a startup company will most likely use the community edition, while larger companies will buy the licensed version. The price of Snyk is more than other SLA tools."

"Cost-wise, it's similar to Veracode, but I don't know the exact cost."

"The pricing is acceptable, especially for enterprises. I don't think it's too much of a concern for our customers. Something like $99 per user is reasonable when the stakes are high."

"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."

"You can get a good deal with Snyk for pricing. It's a little expensive, but it is worth it."

More Snyk pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Posture Management (ASPM) solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

17%

Construction Company

11%

Financial Services Firm

Outsourcing Company

Financial Services Firm

13%

University

12%

Construction Company

Retailer

Financial Services Firm

13%

Manufacturing Company

11%

Computer Software Company

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	4

No data available

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	10
Large Enterprise	23

Questions from the Community

What is your experience regarding pricing and costs for Cortex Cloud by Palo Alto Networks?

I am not fully aware of the pricing and licensing of Cortex Cloud by Palo Alto Networks. The pricing is also based on...

See all answers

What needs improvement with Cortex Cloud by Palo Alto Networks?

In my opinion, Cortex Cloud by Palo Alto Networks could be improved or enhanced in various ways. I don't have an idea...

See all answers

What is your primary use case for Cortex Cloud by Palo Alto Networks?

The usual use cases for Cortex Cloud by Palo Alto Networks that I have been working with mostly are as simple as dete...

See all answers

Ask a question

Earn 20 points

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to...

See all answers

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false posi...

See all answers

What is your primary use case for Snyk?

I use Snyk ( /products/snyk-reviews ) in the DevOps pipeline to identify vulnerabilities before deploying the applica...

See all answers

Comparisons

Wiz vs Cortex Cloud by Palo Alto Networks

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs Cortex Cloud by Palo Alto Networks

Compared 11% of the time

SentinelOne Singularity Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 8% of the time

WithSecure Elements Exposure Management (XM) vs Cortex Cloud by Palo Alto Networks

Compared 7% of the time

Microsoft Defender for Cloud vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

More Cortex Cloud by Palo Alto Networks Competitors

Docker vs Legit Security

Compared 21% of the time

Ox Security vs Legit Security

Compared 14% of the time

Ivanti Neurons for ASPM vs Legit Security

Compared 9% of the time

Heeler vs Legit Security

Compared 8% of the time

Apiiro vs Legit Security

Compared 6% of the time

More Legit Security Competitors

SonarQube vs Snyk

Compared 7% of the time

Black Duck SCA vs Snyk

Compared 2% of the time

Trivy vs Snyk

Compared 2% of the time

GitHub Advanced Security vs Snyk

Compared 2% of the time

JFrog Xray vs Snyk

Compared 2% of the time

More Snyk Competitors

Product Reports

Buyer's Guide

Cortex Cloud by Palo Alto Networks

June 2026

Cortex Cloud by Palo Alto Networks report

Download Cortex Cloud by Palo Alto Networks product report

Buyer's Guide

Legit Security

June 2026

Download Legit Security product report

Buyer's Guide

Snyk

May 2026

Download Snyk product report

Also Known As

No data available

Fugue, Snyk AppRisk

Overview

Cortex Cloud by Palo Alto Networks enhances cloud security with features like AI/ML threat detection and automated remediation, ensuring real-time protection and efficient management across cloud environments.

Cortex Cloud by Palo Alto Networks offers comprehensive cloud security posture management and runtime protection. It reduces manual tasks and accelerates incident investigation through advanced threat detection and AI-driven anomaly detection. With integration to the MITRE ATT&CK framework, it boosts threat response while reducing incident resolution time. Although users find the UI complex and pricing high, its capabilities in securing AWS, Azure, and other environments, as well as its potential integration with CyberArk, emphasize its enterprise-ready design for cloud transformation across diverse industry sectors.

What are the key features of Cortex Cloud by Palo Alto Networks?

Runtime Protection: Ensures real-time security for workloads.
AI/ML-powered Threat Detection: Identifies threats using AI/ML technology.
Automated Remediation: Streamlines threat response through automation.
Comprehensive Detection Coverage: Offers extensive detection capabilities with unified data.
Integration with MITRE ATT&CK: Enhances threat response efficiency.

What benefits or ROI should users consider?

Enhanced Security Visibility: Provides dashboards for better security insights.
Reduced Manual Tasks: Automates processes for efficiency gains.
Improved Threat Response: Accelerates incident resolution with AI-driven anomaly detection.
Seamless Cloud Integration: Supports APIs and multi-cloud environments.

Cortex Cloud by Palo Alto Networks is deployed across industries like telecom, BFSI, and manufacturing for robust cloud security. It's leveraged for detecting misconfigurations and vulnerabilities, aiding cloud transformation and compliance with standards such as GDPR and NIST. The integration across cloud infrastructures, including AWS and Azure, supports policy creation and threat management strategies for diverse enterprises.

Palo Alto Networks

Legit Security offers comprehensive solutions for managing software security risks, ensuring efficient code integration, risk reduction, and policy adherence through centralized controls and robust integration with existing tools.

Legit Security provides organizations with a powerful platform for enhancing software security. It offers a unified control panel that highlights high-risk findings and enhances security posture with risk scoring. By facilitating seamless integration with existing tools, it promotes a security shift-left approach. Centralized management helps enforce policy adherence while secret management capabilities add another layer of security. Despite some false positives in secret detection, Legit collaborates with engineering teams to ensure secure code integration.

What are the key features of Legit Security?

Noise Reduction: Minimizes noise from scanning tools for increased efficiency.
Risk Scoring: Highlights high-risk findings to prioritize security efforts.
Unified Control Panel: Centralizes oversight for improved policy enforcement.
Seamless Integration: Works with existing tools to reduce security risks.
Secret Management: Ensures secure handling of sensitive information.

What benefits should be considered when evaluating Legit Security?

Comprehensive Visibility: Offers end-to-end insights into the software development lifecycle.
Security Shift-left: Facilitates early security integration for proactive risk management.
Partnership with Engineering Teams: Promotes collaborative secure code implementation.
Responsive Enhancement Requests: Reflects adaptability to user feedback for continuous improvement.

In industries dealing with sensitive data and complex code deliveries, Legit Security is implemented to manage the entire software development lifecycle. Organizations utilize it for compliance, integrating it with other scanning tools to bolster code supply chain security and application security management. In the wake of incidents like the SolarWinds breach, the importance of securing the software delivery pipeline has been underscored, positioning Legit Security as a crucial component in protecting against similar threats.

Legit Security

Snyk excels in integrating security within the development lifecycle, providing teams with an AI Trust Platform that combines speed with security efficiency, ensuring robust AI application development.

Snyk empowers developers with AI-ready engines offering broad coverage, accuracy, and speed essential for modern development. With AI-powered visibility and security, Snyk allows proactive threat prevention and swift threat remediation. The platform supports shifts toward LLM engineering and AI code analysis, enhancing security and development productivity. Snyk collaborates with GenAI coding assistants for improved productivity and AI application threat management. Platform extensibility supports evolving standards with API access and native integrations, ensuring comprehensive and seamless security embedding in development tools.

What are Snyk's standout features?

Simplicity and Integration: Easy to integrate across platforms like GitLab, GitHub, and Jira.
Comprehensive Vulnerability Database: Offers accurate reporting for effective vulnerability management.
Developer-Friendly Design: Supports multiple programming languages, appealing to developers.
Automation and Flexibility: Enhances workflow efficiency with automated capabilities.

What benefits can users expect?

Efficiency in Vulnerability Detection: Streamlines prioritization and remediation processes.
Cost-Effectiveness: Offers a competitive pricing model compared to alternatives.
Enhanced Workflow: Integration with DevOps tools improves development processes.

Industries leverage Snyk for security in CI/CD pipelines by automating checks for dependency vulnerabilities and managing open-source licenses. Its Docker and Kubernetes scanning capabilities enhance container security, supporting a proactive security approach. Integrations with platforms like GitHub and Azure DevOps optimize implementation across diverse software environments.

Snyk

Sample Customers

Information Not Available

Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief

Buyer's Guide

Legit Security vs. Snyk

April 2026

Free Report: Legit Security vs. Snyk

Find out what your peers are saying about Legit Security vs. Snyk and other solutions. Updated: April 2026.

DOWNLOAD NOW

900,747 professionals have used our research since 2012.

See our Legit Security vs. Snyk report.

See our list of best Application Security Posture Management (ASPM) vendors.

We monitor all Application Security Posture Management (ASPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.