IT Brief New Zealand - Technology news for CIOs & IT decision-makers
Story image
Legit Security announces strategic partnership with GuidePoint Security
Tue, 23rd Apr 2024

Legit Security, a platform allowing businesses to effectively manage their application security posture throughout the entire developer landscape, has revealed a new strategic partnership with GuidePoint Security. GuidePoint offers tailor-made solutions to organisations seeking to enhance their cybersecurity protocols and reduce risk.

The expanding landscape of application security programmes often comes with challenges such as adhering to consistent policies within a myriad of product and application teams, as well as meeting the standards of various regulatory frameworks and security policies. By working with GuidePoint Security and utilising Legit Security's cutting-edge platform, customers will now be able to fortify their application security positions, all without hindering the crucial innovation that impacts their bottom line, according to the company.

Aaron Cote, Chief Revenue Officer at Legit Security, acknowledges the increasing risks linked with software development and delivery. He says, "Organisations need a consistent means of managing application security programs across both development and security". He conveys the company's excitement about this strategic partnership with GuidePoint Security. "Together we are providing organizations with solutions that provide critical insights so they can prioritize risk and bolster productivity by reducing developer time to close vulnerabilities."

Justin Iwaniszyn, Director of New and Emerging Alliances at GuidePoint Security, comments on the troubling growth in sophistication of threat actors focusing on software supply chains. He acknowledges newly emerging digital complications as well as software delivery security issues, which pose "unprecedented challenges to their overall cybersecurity postures". Iwaniszyn emphasises the importance of comprehensive application security as a key tool in helping businesses to "mitigate risk and protect against emerging threats across their software supply chain ecosystems".

Legit Security's platform aims to offer total visibility to security teams, product security leaders, and security architects across the entire build pipeline from infrastructure to application layer. With unparalleled transparency of the development lifecycle, clients can be confident that all deployed code is both secure and compliant. The platform carries several capabilities to assist businesses in managing their application security posture effectively, which include SDLC Visibility & Security, Software Supply Chain Security, Compliance, Application Vulnerability Management, and Secrets Detection & Remediation.

SDLC Visibility & Security allows customers to have a complete view of their software factory, inclusive of the various development assets and underlying security protocols. With Genius AI code, customers can discover unknown assets and accompanying activities.

Software Supply Chain Security is a feature designed to automatically discover, assess, and secure your software supply chain. It also maintains a continuous inventory of SDLC assets and current software bill of materials (SBOMs).

Compliance helps companies align regulatory compliance to existing regulatory frameworks like CISA SSDF, SLSA, FedRAMP, and ISO 27001and prepares them for both internal and external audits.

Application Vulnerability Management and Secrets Detection & Remediation are features aimed at consolidating findings from multiple AppSec tools and making sense of results by understanding the developer environment to effectively prioritise remediation.

The AI-based system enables companies to identify, resolve and prevent the divulging of secrets throughout the software development pipeline. Consequently, Legit Security's approach forms a part of the digital strategy for companies aiming to manage and scale their application security efficiently, address code-to-cloud risks and maintain the quality of their output.