Legit Security ASPM
5.2#12 in application security posture management softwareWebAPI
VisitLegit Security ASPM vs Strobes ASPM
Strobes ASPM
7.8#2 in application security orchestration platformsFrom $29,000 a yearFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | Legit Security ASPM | Strobes ASPM |
|---|---|---|
| Headquarters | Boston, Massachusetts, United States; Tel Aviv, Israel | Plano, Texas, United States |
| Integrations | Legit lists 120 integrations, including Black Duck SCA, GitHub Advanced Security, GitHub Actions, GitLab CI, Jenkins, Okta, and Wiz. | The integrations catalog advertises more than 100 connectors spanning scanners, cloud security, containers, ticketing and development tools. |
| Intended users | Legit describes its platform for enterprise security and AppSec teams managing application security and software supply chain programs. | Strobes describes its customers as security teams ranging from mid-market teams to large organizations with complex, high-volume environments. |
| Purpose | Legit’s ASPM platform unifies AppSec discovery, prioritization, and remediation to help manage application security posture and software supply chain risk. | Strobes ASPM combines findings from AppSec tools into a unified, risk-prioritized view for developers and security teams. |
| Risk prioritization | Its contextual risk scoring combines business criticality, compliance, GenAI use, APIs, and internet accessibility to prioritize fixes. | The platform scores findings using exploitability, EPSS, CISA KEV data, reachability and asset criticality instead of relying only on CVSS. |
Legit Security ASPM plans
- Legit Security ASPMPriced on request
Strobes ASPM plans
- FreeFree
- Starter$29,000 a year
- Growth$45,000 a year
- EnterprisePriced on request
Pick Legit Security ASPM if…
It is aimed at enterprise security and AppSec teams managing application security and software supply chain programs, especially those coordinating findings across development tools.
Pick Strobes ASPM if…
Strobes ASPM may suit security teams that need to consolidate findings from multiple AppSec tools and prioritize remediation. Its listed customer range includes mid-market teams and large organizations with complex, high-volume environments.