Legit Security AI agent now fixes open-source dependencies
Legit Security has expanded its Agentic Remediation feature so it now handles vulnerabilities in open-source dependencies, not only in code that a company writes itself. The goal is to take development teams from a vulnerability finding to a verified fix without anyone having to triage the issue by hand.
Until now, the agent worked on static analysis findings in first-party code, meaning code written by a company's own engineers. The new release points the same agent at packages pulled in from outside, which the company describes as the other major source of vulnerabilities in modern software.