Legit Security, whose service helps identify app vulnerabilities from code, raised a $40M Series B led by CRV, taking its total funding to $77M
Context & Ripple Effects
Legit Security’s round sits within a cluster of application-security vendors attracting growth funding: ProjectDiscovery raised a $25M Series A for vulnerability scanning shortly before this report, while ShiftLeft had earlier raised a Series B for checking code before runtime.
The coverage also extends from code and API discovery to vulnerability-data consolidation, including ArmorCode’s $40M Series B for consolidating vulnerability data. That breadth makes Legit’s code-focused approach part of a wider effort to move security work closer to software development.
First-order effects
- Legit Security gains $40M of new capital and reaches $77M in total funding, giving it added resources to build and sell its code-based vulnerability-identification service.
- CRV deepens its exposure to application-security tooling through another investment in the category.
Second-order effects
- Code-scanning and vulnerability-management rivals face stronger pressure to differentiate on where they find issues—source code, APIs, running systems, or consolidated security data—and how those findings fit developer workflows.
- Enterprise buyers evaluating application-security platforms gain another funded specialist, potentially increasing scrutiny of overlap between point tools and broader vulnerability-management offerings.
Third-order effects
- If funding continues across code analysis, API security, scanning, and consolidation, application security may increasingly be bought as a connected workflow rather than as isolated detection products.
- The category’s long-term differentiation is likely to hinge on whether vendors can turn findings into remediation and prioritization, not merely identify more vulnerabilities.
The trend: Application security is shifting toward earlier, more integrated vulnerability detection and management across the software-development lifecycle.