CrowdStrike Falcon Cloud Security vs Legit Security comparison

CrowdStrike and Legit Security are both solutions in the Application Security Posture Management (ASPM) category. CrowdStrike is ranked #7 with an average rating of 7.7, while Legit Security is ranked #15. CrowdStrike holds a 3.7% mindshare in ASPM, compared to Legit Security’s 2.5% mindshare. Additionally, 93% of CrowdStrike users are willing to recommend the solution, compared to 100% of Legit Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 13, 2024

CrowdStrike Falcon Cloud Security and Legit Security are competing in the cybersecurity category. CrowdStrike has the upper hand in pricing and support, while Legit Security has a feature advantage, suggesting it justifies its higher cost.

Features: CrowdStrike Falcon Cloud Security offers comprehensive threat intelligence, real-time response capabilities, and scalable cloud-native protection. Legit Security provides robust vulnerability management, integration with DevSecOps pipelines, and automated security monitoring.

Room for Improvement: CrowdStrike could improve its integration with DevSecOps environments and expand developer-focused features. Additionally, optimizing its interface for better customization could enhance user experience. Meanwhile, Legit Security could benefit from reducing false positives in secret detection and increasing feature automation to minimize manual interventions. Better scalability options would also bolster its usability for larger organizations.

Ease of Deployment and Customer Service: CrowdStrike provides streamlined cloud-based deployment with 24/7 customer support, ensuring fast integration. Legit Security offers a seamless deployment process, focusing on integration within development lifecycles, with supportive service that ensures the optimal use of its features.

Pricing and ROI: CrowdStrike offers scalable pricing models based on the needed features, promising strong ROI due to its comprehensive security measures and support. Legit Security, although potentially more costly, justifies its price with its specialized features for DevSecOps integration and vulnerability management. CrowdStrike aligns with broader organizational needs, while Legit Security offers a focused return through its developer-oriented integrations.

To learn more, read our detailed CrowdStrike Falcon Cloud Security vs. Legit Security Report (Updated: June 2026).

Buyer's Guide

CrowdStrike Falcon Cloud Security vs. Legit Security

June 2026

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex Cloud by Palo Alto N...

Mindshare comparison

As of August 2026, in the Application Security Posture Management (ASPM) category, the mindshare of Cortex Cloud by Palo Alto Networks is 2.3%, up from 0.3% compared to the previous year. The mindshare of CrowdStrike Falcon Cloud Security is 3.7%, down from 4.4% compared to the previous year. The mindshare of Legit Security is 2.5%, down from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Posture Management (ASPM) Mindshare Distribution
Product	Mindshare (%)
Cortex Cloud by Palo Alto Networks	2.3%
CrowdStrike Falcon Cloud Security	3.7%
Legit Security	2.5%
Other	91.5%

Application Security Posture Management (ASPM)

Featured Reviews

Sonali Jha

Technical Solutions Architect at IBM

Cloud security has improved as AI-driven runtime protection detects threats and reduces incidents

In my opinion, Cortex Cloud by Palo Alto Networks could be improved or enhanced in various ways. I don't have an idea about that yet because for that you actually need to use two or three different other tools to make a basic comparison. If you ask me how good the tool is, I would fairly rate it quite high. The tool is very popular, and customers can already see that it is one of the cloud leaders in the security space. The platform had a very good feature which provides documentation links about how to use a specific feature on the UI. It takes you to the proper documentation page where it suggests what to do and tells you about the steps that need to be done for a resource deployment. My thoughts about improving the product which I believe could greatly aid vendors is that it used to be a very user-friendly tool, but now they have incorporated everything under one umbrella. It has XDR, XSOAR, and Cortex Cloud by Palo Alto Networks. Before, we used to have separate modules and separate environments for each of these capabilities or features. Right now, it is a little complex and users would take their own time to know the tool better. This is something that would have been way better, but I would say there would be different opinions on this. Talking about user-friendliness, it has decreased now.

Read full review

Manish Indupuri

senior DevOps engineer at a tech services company with 10,001+ employees

Provides centralized visibility and real-time threat detection across multiple cloud accounts

Regarding how CrowdStrike Falcon Cloud Security can be improved, I would say they can improve their support. There were a couple of cases where we needed to escalate issues in order to get proper support. That part could use some tweaking on their end. Additionally, the recent incident during the last summer literally impacted our systems. We had some of our workloads that affected the business, and it was a difficult experience. Apart from that, it is a good tool and the experience with CrowdStrike Falcon Cloud Security has been excellent. We did not find any kind of issues, but if they could improve their response to security-related incidents and provide on-time support or better understand our concerns and address them accordingly, it could be very helpful. Regarding needed improvements, I think they should enhance automatic alerting with CI/CD scanning and reporting capabilities. Additionally, it would be better to implement Falcon sensor health monitoring so agents are always active. We could know how it is behaving and how it is treating our environment. That could be a little helpful.

Read full review

Tim Crothers

CISO at Mandiant / FireEye

Provides strong visibility, straightforward integration, and reduces the risk of attacks

Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I have absolutely seen improvements in our incident close rates, with mean time to detect and respond reduced significantly, sometimes by at least forty to fifty percent."

"Previously with Cortex Cloud by Palo Alto Networks, I deployed this product for one of my customers, and after three to four months, they said that previously they had around four hours of MTTR, and now it has reduced to just 15 to 20 minutes."

"I have seen several benefits from using Cortex Cloud by Palo Alto Networks: It was easy to use and easy to migrate from the IBM platform."

"Cortex Cloud by Palo Alto Networks has impacted our organization positively by keeping our machines secure and our team using the dashboard to find issues quickly."

"From a technical standpoint or pricing, Cortex Cloud by Palo Alto Networks is a stronger solution in the market at the moment compared to other products from ConnectWise or Symantec."

"The most beneficial aspect of Cortex Cloud by Palo Alto Networks and Palo Alto in general is that there is a single platform for all cloud providers for securitization."

"The AI and automation features in detecting and responding to high-risk threats are impressive; it's one of the best tools regarding AI technology and unifies security in one platform in real-time, improving vulnerability analysis, incident response, and compliance reporting."

"Overall, Cortex Cloud by Palo Alto Networks is a technically strong product, and I rate it ten out of ten."

More Cortex Cloud by Palo Alto Networks pros

"The RTR feature stands out as particularly valuable to me due to its capability to log into machines."

"CrowdStrike Falcon Cloud Security is user-friendly."

"The most significant benefit is how quickly malware and other malicious attacks are detected."

"CrowdStrike utilizes signatureless technology, eliminating the need for regular signature updates on endpoint systems."

"Cloud security posture management (CSPM) is most valuable."

"The alerts are clearer, and the capabilities are much better than the others."

"The threat intelligence is the most vital feature"

"CrowdStrike Falcon Cloud Security has positively impacted my organization by reducing false positives and enhancing security day by day; after testing it on 100 to 200 systems, we convinced the client to deploy it across 6,000 workstations and over 500 servers."

More CrowdStrike Falcon Cloud Security pros

"Legit has had a positive effect on our overall security posture."

"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."

"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."

"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."

Cons

"Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent."

"Cortex Cloud by Palo Alto Networks is not the cheapest solution in the market, but I know that is the best solution for SOC and Cloud once have all tools to connect cloud issues with SOC procedures, because we are partners with T-Systems."

"In my opinion, Cortex Cloud by Palo Alto Networks can be improved by addressing forensic information collection and storage, although I cannot suggest specific things right now, based on what customers might need."

"The pricing is high, making ROI challenging to justify, especially during transitions between solutions."

"Overall, I rate Cortex Cloud by Palo Alto Networks as an eight out of ten. I think that it could improve on price, as I know that the Google solution has the best price, and this is one of the conditions."

"The negative aspects or areas for improvement in the product include the fact that the cost might be a bit high, which challenges commercials, but not technically."

"From the commercial perspective, we have some limitations because Palo Alto has a minimum number of users of endpoints set at 200, which is quite high for the Italian market."

"My thoughts about improving the product which I believe could greatly aid vendors is that it used to be a very user-friendly tool, but now they have incorporated everything under one umbrella."

More Cortex Cloud by Palo Alto Networks cons

"In terms of improvement, CrowdStrike Falcon Cloud Security could expand into the remediation path."

"The tool could give us more templates so that people who are not updated with the platform can easily get acquainted with how to secure and utilize the product more."

"The tool's scalability is low."

"There should be cloud storage scanning. We would like to have cloud storage vulnerability and threat management on any cloud storage."

"The only challenge lies in token verification."

"The CrowdStrike partner portal documentation could be improved to provide proper instructions for integrating their products."

"There is room for improvement in the solution's ability to handle Linux systems."

"For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower."

More CrowdStrike Falcon Cloud Security cons

"The one we're working on right now is the ability to dynamically rerun development teams and groups."

"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."

"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."

"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."

Pricing and Cost Advice

Information not available

"I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive."

"It is expensive, but it adds value."

"CrowdStrike Falcon Cloud Security is very expensive for us. Last month, we had a big issue that took much time and money to resolve. It slowed down our business and required our management team to get involved. We had a problem similar to the "Blue Screen of Death" issue many US companies faced. This incident used up many of our IT resources in just a few months. That's why we're looking for a replacement tool now."

"It's an expensive product"

"It's an expensive package but does what it says it will do."

"CrowdStrike Falcon is very expensive."

"Its price is moderate."

"The pricing is reasonable, neither overly expensive nor excessively cheap, making it competitive compared to other market options."

More CrowdStrike Falcon Cloud Security pricing and cost advice

"The pricing is reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Posture Management (ASPM) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

17%

Construction Company

11%

Financial Services Firm

Outsourcing Company

Financial Services Firm

12%

Computer Software Company

Manufacturing Company

Government

University

13%

Financial Services Firm

12%

Construction Company

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	6
Large Enterprise	15

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cortex Cloud by Palo Alto Networks?

I am not fully aware of the pricing and licensing of Cortex Cloud by Palo Alto Networks. The pricing is also based on...

See all answers

What needs improvement with Cortex Cloud by Palo Alto Networks?

In my opinion, Cortex Cloud by Palo Alto Networks could be improved or enhanced in various ways. I don't have an idea...

See all answers

What is your primary use case for Cortex Cloud by Palo Alto Networks?

The usual use cases for Cortex Cloud by Palo Alto Networks that I have been working with mostly are as simple as dete...

See all answers

What is your experience regarding pricing and costs for CrowdStrike Falcon ASPM?

In terms of pricing, the setup cost and licensing are comparatively a bit expensive, but the solution's effectiveness...

See all answers

What needs improvement with CrowdStrike Falcon ASPM?

I recommend enhancing CrowdStrike Falcon Cloud Security, particularly in the areas of vulnerability management and ag...

See all answers

What is your primary use case for CrowdStrike Falcon ASPM?

I have been using CrowdStrike Falcon Cloud Security for almost three years. My primary use case involves securing end...

See all answers

Ask a question

Earn 20 points

Comparisons

Wiz vs Cortex Cloud by Palo Alto Networks

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs Cortex Cloud by Palo Alto Networks

Compared 10% of the time

SentinelOne Singularity Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 8% of the time

WithSecure Elements Exposure Management (XM) vs Cortex Cloud by Palo Alto Networks

Compared 7% of the time

Microsoft Defender for Cloud vs Cortex Cloud by Palo Alto Networks

Compared 4% of the time

More Cortex Cloud by Palo Alto Networks Competitors

Prisma Cloud by Palo Alto Networks vs CrowdStrike Falcon Cloud Security

Compared 5% of the time

SentinelOne Singularity Cloud Security vs CrowdStrike Falcon Cloud Security

Compared 5% of the time

AWS GuardDuty vs CrowdStrike Falcon Cloud Security

Compared 5% of the time

Wiz vs CrowdStrike Falcon Cloud Security

Compared 5% of the time

Snyk vs CrowdStrike Falcon Cloud Security

Compared 2% of the time

More CrowdStrike Falcon Cloud Security Competitors

Docker vs Legit Security

Compared 19% of the time

Ox Security vs Legit Security

Compared 13% of the time

Ivanti Autonomous Endpoint Management vs Legit Security

Compared 10% of the time

Heeler vs Legit Security

Compared 9% of the time

Snyk vs Legit Security

Compared 7% of the time

More Legit Security Competitors

Product Reports

Buyer's Guide

Cortex Cloud by Palo Alto Networks

August 2026

Cortex Cloud by Palo Alto Networks report

Download Cortex Cloud by Palo Alto Networks product report

Buyer's Guide

CrowdStrike Falcon Cloud Security

August 2026

CrowdStrike Falcon Cloud Security report

Download CrowdStrike Falcon Cloud Security product report

Buyer's Guide

Legit Security

August 2026

Download Legit Security product report

Also Known As

No data available

CrowdStrike Falcon ASPM

No data available

Overview

Cortex Cloud by Palo Alto Networks enhances cloud security with features like AI/ML threat detection and automated remediation, ensuring real-time protection and efficient management across cloud environments.

Cortex Cloud by Palo Alto Networks offers comprehensive cloud security posture management and runtime protection. It reduces manual tasks and accelerates incident investigation through advanced threat detection and AI-driven anomaly detection. With integration to the MITRE ATT&CK framework, it boosts threat response while reducing incident resolution time. Although users find the UI complex and pricing high, its capabilities in securing AWS, Azure, and other environments, as well as its potential integration with CyberArk, emphasize its enterprise-ready design for cloud transformation across diverse industry sectors.

What are the key features of Cortex Cloud by Palo Alto Networks?

Runtime Protection: Ensures real-time security for workloads.
AI/ML-powered Threat Detection: Identifies threats using AI/ML technology.
Automated Remediation: Streamlines threat response through automation.
Comprehensive Detection Coverage: Offers extensive detection capabilities with unified data.
Integration with MITRE ATT&CK: Enhances threat response efficiency.

What benefits or ROI should users consider?

Enhanced Security Visibility: Provides dashboards for better security insights.
Reduced Manual Tasks: Automates processes for efficiency gains.
Improved Threat Response: Accelerates incident resolution with AI-driven anomaly detection.
Seamless Cloud Integration: Supports APIs and multi-cloud environments.

Cortex Cloud by Palo Alto Networks is deployed across industries like telecom, BFSI, and manufacturing for robust cloud security. It's leveraged for detecting misconfigurations and vulnerabilities, aiding cloud transformation and compliance with standards such as GDPR and NIST. The integration across cloud infrastructures, including AWS and Azure, supports policy creation and threat management strategies for diverse enterprises.

Palo Alto Networks

CrowdStrike Falcon Cloud Security helps organizations stop cloud breaches from code to runtime. As CrowdStrike's cloud-native application protection platform (CNAPP), it combines real-time cloud detection and response with proactive cloud security to help security teams prevent, detect, investigate, and stop modern cloud attacks.

Industry-leading threat intelligence and AI-powered insights help security teams understand how adversaries operate, uncover evasive threats, and respond with confidence. The result is a stronger cloud security posture, faster investigations, and reduced mean time to detect and respond.

What are CrowdStrike Falcon Cloud Security's key features?

Real-Time Protection: Detects and responds to cloud attacks in real time.
Industry-Leading Adversary Intelligence: Turns intel into prioritized risk and threats.
Cloud Asset Visibility: Discovers and maps assets across the entire cloud estate.
Preemptive Security: Identities risks earlier in development to prevent insecure deployments.

What benefits should users look for in reviews?

Faster Threat Detection and Response: Achieve up to 89% faster cloud detection and response
Improved Cloud Security Posture: Identify and prioritize high-risk vulnerabilities and misconfigurations faster
Reduce Blind Spots: Gain up to 72% faster ability to monitor the entire cloud estate
Compliance Assurance: Aids in maintaining industry standards.
Return on Investment: 264% Return on Investment over 3 year period

Organizations use Falcon Cloud Security to stop cloud breaches from code to runtime. It helps teams reduce blind spots, focus on the risks most likely to lead to a breach, and detect and respond to attacks faster. By connecting proactive cloud security with real-time detection and response, it strengthens security from development through production.

CrowdStrike

Legit Security offers comprehensive solutions for managing software security risks, ensuring efficient code integration, risk reduction, and policy adherence through centralized controls and robust integration with existing tools.

Legit Security provides organizations with a powerful platform for enhancing software security. It offers a unified control panel that highlights high-risk findings and enhances security posture with risk scoring. By facilitating seamless integration with existing tools, it promotes a security shift-left approach. Centralized management helps enforce policy adherence while secret management capabilities add another layer of security. Despite some false positives in secret detection, Legit collaborates with engineering teams to ensure secure code integration.

What are the key features of Legit Security?

Noise Reduction: Minimizes noise from scanning tools for increased efficiency.
Risk Scoring: Highlights high-risk findings to prioritize security efforts.
Unified Control Panel: Centralizes oversight for improved policy enforcement.
Seamless Integration: Works with existing tools to reduce security risks.
Secret Management: Ensures secure handling of sensitive information.

What benefits should be considered when evaluating Legit Security?

Comprehensive Visibility: Offers end-to-end insights into the software development lifecycle.
Security Shift-left: Facilitates early security integration for proactive risk management.
Partnership with Engineering Teams: Promotes collaborative secure code implementation.
Responsive Enhancement Requests: Reflects adaptability to user feedback for continuous improvement.

In industries dealing with sensitive data and complex code deliveries, Legit Security is implemented to manage the entire software development lifecycle. Organizations utilize it for compliance, integrating it with other scanning tools to bolster code supply chain security and application security management. In the wake of incidents like the SolarWinds breach, the importance of securing the software delivery pipeline has been underscored, positioning Legit Security as a crucial component in protecting against similar threats.

Legit Security

Sample Customers

Information Not Available

Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...

Buyer's Guide

CrowdStrike Falcon Cloud Security vs. Legit Security

June 2026

Free Report: CrowdStrike Falcon Cloud Security vs. Legit Security

Find out what your peers are saying about CrowdStrike Falcon Cloud Security vs. Legit Security and other solutions. Updated: June 2026.

DOWNLOAD NOW

909,725 professionals have used our research since 2012.

See our CrowdStrike Falcon Cloud Security vs. Legit Security report.

See our list of best Application Security Posture Management (ASPM) vendors.

We monitor all Application Security Posture Management (ASPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.