Try our new research platform with insights from 80,000+ expert users

Docker vs Legit Security comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Docker
Ranking in Software Supply Chain Security
5th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
55
Ranking in other categories
Development Platforms (1st), Container Management (5th)
Legit Security
Ranking in Software Supply Chain Security
7th
Average Rating
10.0
Reviews Sentiment
7.8
Number of Reviews
4
Ranking in other categories
Application Security Posture Management (ASPM) (6th)
 

Mindshare comparison

As of December 2024, in the Software Supply Chain Security category, the mindshare of Docker is 2.2%, down from 3.8% compared to the previous year. The mindshare of Legit Security is 12.7%, up from 10.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Supply Chain Security
 

Featured Reviews

Gur Sannikov - PeerSpot reviewer
Offers reliability and helps to save on costs
In terms of the impact of container orchestration, I would say that though my company does not currently use a lot of containers, we plan to move to containers. I recommend others to just use the internet than ChatGPT since mostly all issues are already known and very easy to deal with so it is better to use the knowledge from the industry. In terms of the use of Docker for AI projects or workflows, I would say that my company deploys AI applications on Docker, like any other application and pipeline. The tools or practices that have proven to be the most beneficial for our company's AI initiatives are agnostic to Docker. There is nothing special in Docker, and our company just uses it to deploy applications. The value derived from the use of the product revolves around the scalability and the reliability it offers. The product helps with the cost-savings part since it saves time and money linked with the amount of engineers required to spend time on operations. I rate the solution a nine out of ten.
Tim Crothers - PeerSpot reviewer
Provides strong visibility, straightforward integration, and reduces the risk of attacks
Legit Security is a product that hyper-focuses on the various aspects of the software development pipeline. For example, if an engineer spins off a new project and stands up a new Git project, Legit automatically detects it, connects Snyk and other tools, and ensures the engineering team doesn't have to think about it. This way, we stay on top of security from the beginning. On the other hand, Legit provides a clear view of the controls around repositories. We have standards requiring code reviews and similar practices, and Legit shows us whether these are being followed. Additionally, Legit helps us identify unmaintained repositories, which often arise when engineering teams try something and leave it behind. This knowledge allows us to determine the appropriate action for these neglected projects. One area where Legit falls short is secret detection. While it functions well overall, the feature has a 10-20 percent false positive rate, requiring some manual intervention. Almost everything else works flawlessly. The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates. Unlike traditional programs that require security reviews at specific stages, hindering development flow, we strive to partner with the product engineering team to ship secure code seamlessly within their existing workflows. Legit plays a crucial role in this by automatically notifying us of new projects, eliminating the need for manual communication. This partnership approach, enabled by Legit, allows us to work much closer with our engineering teams than ever before.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a very stable solution. Stability-wise, I rate the solution a ten out of ten."
"The solution is stable."
"It is a quite mature technology."
"Docker is easy to understand and follow. It provides good scalability to the application."
"Docker is perfect for what I do...The solution is scalable."
"The solution offers speed and flexibility."
"There are ways of using Docker where you have absolutely no dependencies on the environment that you work in. This allows us to deploy Docker anywhere anytime and this has been most valuable."
"I think the best feature is to replicate anything in our local machine using a simple command."
"Legit has had a positive effect on our overall security posture."
"We implemented Legit Security to gain visibility into all development teams and ensure that consistent controls are in place and accounted for on every route."
"The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates."
"Legit has increased my security posture to a level I couldn't achieve before. I don't need to worry as much about what's happening within my developer environments. I can rest assured that my vulnerabilities are being detected."
 

Cons

"One of the challenges I face with Docker is debugging containers within the infrastructure. It can be tricky to debug applications inside containers, which is a common issue among developers. If easier tools or methods were available to debug applications within Docker containers, it would be very beneficial."
"I think Docker can improve as it relates to overall stability."
"Docker could improve by having more advanced features."
"The command line interface could be more intuitive. I constantly struggle with it."
"The solution could improve with a GUI instead of only a command line interface. Having to use the command line interface can be a hassle."
"As for improving Docker, I would like to see enhancements in its user interface and documentation to make it even more user-friendly and accessible. I believe Docker will expand its scope and reduce limitations to support more applications, both online and offline. For instance, in scenarios like deployments on ships or during upgrades, Docker can continue to offer software services and container-based intelligence."
"The solution is not easy to manage and it is one of the reasons why people introduce orchestration tools to manage it."
"Deployment could be quicker."
"One issue is that engineering teams don't always embed secrets in the same way, making it difficult for the tool to consistently identify them."
"The one we're working on right now is the ability to dynamically rerun development teams and groups."
"I would like them to have their own static code scanner, and I'd like them to have their own open-source software scanners."
"Legit Security could do a little better with detecting publicly exposed keys. It's not bad. The detections that they are running get to everything eventually, but it would be great if they could increase some of that awareness."
 

Pricing and Cost Advice

"I would rate the pricing of Docker as ten out of ten"
"The product is a free open-source tool."
"The solution is an open-source technology and not a commercial product. However, you will have to pay sometimes. The tool's pricing depends on the vendor."
"For commercial use, it's about $30 per month. The license itself isn't expensive, but if there are many users, the price becomes high."
"The product is not expensive."
"Pricing is based on the number of users."
"Docker is a free open-source solution."
"Customers pay for the license through a yearly subscription model, where they pay per license. This means that the license is based on a subscription, and the customer pays annually for each license they use."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
824,052 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Insurance Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
21%
Financial Services Firm
14%
University
11%
Pharma/Biotech Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Docker?
We are using Docker to host applications.
What is your experience regarding pricing and costs for Docker?
Our customers buy the software and the prices are available on Docker Hub. The subscription is typically yearly, and customers will need to buy the subscription directly. They can purchase it thems...
What needs improvement with Docker?
Docker is a time-tested, proven solution with industry-wide applications. There can be challenges with port mapping, however, that's not related to Docker itself.
What do you like most about Legit Security?
The true value proposition of Legit lies not in its features but in its ability to support our product security program's focus on creating guardrails instead of toll gates.
What needs improvement with Legit Security?
Legit Security's secret detection works. However, there are some limitations to its effectiveness. One issue is that engineering teams don't always embed secrets in the same way, making it difficul...
 

Comparisons

 

Learn More

Video not available
 

Overview

 

Sample Customers

Information Not Available
Google, NYSE, Kraft-Hienz, Takeda Pharmaceuticals, and many other large enterprise and Fortune 500 customers. Learn more by going to: https://www.legitsecurity.com/...
Find out what your peers are saying about Docker vs. Legit Security and other solutions. Updated: December 2024.
824,052 professionals have used our research since 2012.