New Legit Security AI detection capabilities help protect software development

Legit Security Ltd., an application security posture management platform startup, today announced the launch of new artificial intelligence detection capabilities within its application security posture management platform.

This new AI discovery capability, an industry first, is designed to enable secure application delivery by providing visibility into the use of AI and large-scale language models in the software development process. The company says the service bridges the gap between security and development teams to ensure applications are secure, compliant, and delivered efficiently without compromising software delivery timelines.

Legit Security argues that new risks arise as developers harness the power of AI and LLM to develop and deploy capabilities faster. Code generated by AI can contain unknown vulnerabilities and flaws that compromise the entire application, create legal issues where copyright restrictions exist, and lead to data leaks. It may be possible to connect. Nevertheless, security teams are struggling to understand how developers use the code generated by his AI, and as a result, both the organization and his supply chain of software. The company says it has created a security blind spot that impacts users.

Legit's platform gives security leaders, including chief information security officers, product security leaders, and security architects, comprehensive visibility into risks across the development pipeline, from the infrastructure to the application layer. With clear visibility into the development lifecycle, customers can ensure that deployed code is traceable, secure, and compliant, the company says. New AI code detection capabilities enable platforms to close critical visibility gaps by mitigating the risk of legal exposure and taking preventive measures to ensure compliance.

“AI has great potential to enable developers and organizations to deliver and innovate faster, but it is important to understand whether such decisions pose risks,” Legit Security said. said Liav Caspi, co-founder and chief technology officer. “Our goal is to provide developers with peace of mind that they have visibility and control over their AI and LLM usage, while providing security without hindering their delivery.”

Legit's service capabilities include AI-generated code insights from tools like GitHub Copilot, repositories with LLM, MLOps services, and other code generation tools. This feature enables the enforcement of security policies, such as requiring human review of all AI-generated code and providing real-time notifications of the usage of generated AI code for transparency and accountability. Masu.

The platform also acts as a safeguard against the deployment of vulnerable code, including AI-generated code, and scans and alerts you to certain risks associated with LLM, such as prompt injection and unsafe output handling. Doing so ensures that your applications are secure, compliant, and reliable throughout the development lifecycle.

Legit Security is a venture capital-backed company that last raised $40 million in funding in September. Investors include Charles River Ventures LLC, Cyberstarts Inc., Bessemer Venture Partners LLC, and Technology Crossover Ventures LLC.

Image: Legitimate Security