No more typing reviews! Try our Samantha, our new voice AI agent.

Docker vs Legit Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
56
Ranking in other categories
Development Platforms (1st), Container Management (4th), AI Software Development (5th)
Legit Security
Ranking in Software Supply Chain Security
14th
Average Rating
10.0
Reviews Sentiment
7.8
Number of Reviews
4
Ranking in other categories
Application Security Posture Management (ASPM) (13th)
 

Mindshare comparison

As of May 2026, in the Software Supply Chain Security category, the mindshare of Docker is 5.8%, up from 1.4% compared to the previous year. The mindshare of Legit Security is 4.0%, down from 4.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Supply Chain Security Mindshare Distribution
ProductMindshare (%)
Docker5.8%
Legit Security4.0%
Other90.2%
Software Supply Chain Security
 

Featured Reviews

PB
Senior Cloud Engineer - AWS at Bytedance
Time-saving deployment with seamless virtualization for diverse environments
I used Docker to Dockerize Java code. We had a code base, and I needed to create a Docker image from it so that it could be deployed. At the time, we used Docker Compose, which is somewhat similar to Kubernetes Docker allows virtualization at a higher level without the need for a host machine.…
Tim Crothers - PeerSpot reviewer
CISO at Mandiant / FireEye
Provides strong visibility, straightforward integration, and reduces the risk of attacks
Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The scalability of Docker is good."
"The tool's most valuable feature is its sandbox environment. It makes it very easy to run and test applications without needing configurations, which is the core advantage of containerization. Kubernetes and Helm are helpful as they provide high-level metrics, making tracking the status of all the containers and applications running easier."
"We find the auto scaling and auto healing functionality of this solution very good."
"Docker offers a resilient system with minimal failure chances and optimized performance"
"The solution is easy to deploy for clients so it saves a lot of hassle."
"Traditional deployments take more time and builds can be inconsistent across different environments. Docker solves these issues."
"I am impressed with the product's independence. We can also deploy it anywhere."
"It is neat and very flexible."
"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."
"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."
"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."
"Legit has had a positive effect on our overall security posture."
 

Cons

"We'd like knowledge transfer to be easier."
"Docker volumes. When I integrated volumes, I faced challenges. I have not essentially used add volumes to the existing instances."
"I think Docker can improve as it relates to overall stability."
"That said, Docker has some limitations and Kubernetes has discontinued using it."
"We would like to see improvement in adding the node into the Docker Swarm cluster, as at present it is a little tricky and requires a lot of manual steps."
"The solution is not easy to manage and it is one of the reasons why people introduce orchestration tools to manage it."
"The Kubernetes blocks need improvement since Docker has many holes in it."
"Docker could improve by having security vulnerability reports."
"The one we're working on right now is the ability to dynamically rerun development teams and groups."
"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."
"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."
"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."
 

Pricing and Cost Advice

"Docker's price is good."
"Customers pay for the license through a yearly subscription model, where they pay per license. This means that the license is based on a subscription, and the customer pays annually for each license they use."
"The solution is an open-source technology and not a commercial product. However, you will have to pay sometimes. The tool's pricing depends on the vendor."
"The solution offers an open-source version that is free and includes a lot of functionality."
"The current cost for us is nothing as an open source."
"I use the solution's open-source version."
"Pricing is based on the number of users."
"Docker is a free tool."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Financial Services Firm
11%
Construction Company
8%
Computer Software Company
7%
Financial Services Firm
14%
University
13%
Retailer
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise4
Large Enterprise35
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Docker?
The setup cost has balanced out, and I find Docker's pricing reasonable. Docker Engine is free and open source for Linux, and Docker Desktop is free for individual developers and small teams, but a...
What needs improvement with Docker?
As Docker is already a very mature tool, there are areas where it can be improved based on real-world usage. One area I consider is the Windows container experience. The pain point here is that Win...
What is your primary use case for Docker?
My main use case for Docker is to package applications into consistent, portable containers and use those images across CI/CD and production environments. I containerize applications so they can ru...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...
Find out what your peers are saying about Docker vs. Legit Security and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.