Application security posture management platform startup Legit Security Ltd. today announced the launch of Legit MCP Server, a new feature designed to bring real-time ASPM to artificial intelligence-led software development.

The new Legit MCP server allows AI code assistants such as GitHub Copilot, Cursor and Windsurf to evaluate the security of generated code, enforce policy guardrails and automatically drive remediation processes. MCP Server functions as an application programming interface for AI agents by integrating directly into code editors and integrated development environments, allowing developers to run in-code vulnerability checks during the pre-production development process.

Model Context Protocol is an open standard that can connect with any AI-agnostic code editor and source data repository, offering broad interoperability across modern development environments. Legit says the MCP Server allow developers to receive security feedback in natural language, embedded directly within their existing AI tools, with no additional learning curve or context switching required.

The new offering is a response to the changing nature of software development, where AI tools are increasingly used to write and deploy code at large scale. The shift to AI tools has many positives, such as productivity gains, but it also increases security risks, particularly from vulnerabilities introduced by auto-generated code. Legit argues that traditional security tools were not designed for these workflows and that its AI-native ASPM platform is uniquely suited to fill the gap.

“AI has completely changed the way engineering teams build software and created an opportunity to bring security directly into that process,” said co-founder and Chief Technology Officer Liav Caspi. “Legit MCP empowers developers and AppSec teams to run security checks on the go, with no learning curve, while making secure coding 100 times easier, faster and just more enjoyable.”

Legit MCP Server not only benefits developers but also security teams. Using Legit’s security data fabric, teams can extract and interact with security posture reports simply by querying them via natural language, an approach that Legit describes as a “game changer” for modern application security operations.

The new feature ensures that AI-generated code is automatically scanned, assessed and remediated in real time, helping organizations maintain quality and compliance without slowing development velocity.

Legit Security is a venture capital-backed company, having last raised $40 million in funding in September 2023. Investors include Charles River Ventures, Cyberstarts Inc., Bessemer Venture Partners and Technology Crossover Ventures.

Image: Legit Security