What Jit does

Jit is an AI-native Application Security Posture Management (ASPM) platform founded in 2021 and headquartered in Boston, with Israeli origins in Tel Aviv. The platform consolidates more than 30 built-in security scanners (SAST, SCA/ SBOM, secrets, DAST, IaC, CSPM, container, Kubernetes, CI/CD) and bidirectional integrations with code repositories (GitHub, GitLab, BitBucket, Azure DevOps), cloud providers (AWS, Azure, GCP), ticketing systems, SIEMs, and CNAPP/runtime tools (Wiz, Orca, CrowdStrike, Upwind, Sweet Security, Cyera) to give engineering and security teams a single backlog of product-security findings. Its proprietary Context Graph continuously maps relationships among code, identities, roles, permissions, data sensitivity, and runtime behavior for each customer environment, enabling risk prioritization grounded in business context rather than raw scanner output.

The company's differentiated capability is its agentic AI execution layer, built on LangGraph, organized around two specialized agents — Sera (Security Evaluation and Remediation Agent) and Deva (Developer Enablement and Verification Agent) — that follow a "Connect, Correlate, Prioritize, Act" execution loop. Three agent tiers (Core, Pre-Built, and Custom) cover governance, secure design, secure SDLC, vulnerability detection, and vulnerability management, with an MCP Server extending agent reach into IDEs such as Cursor and VS Code. Additional capabilities include natural-language security queries, an MCP-aware short-term memory architecture, and compliance automation (SOC 2 evidence via Drata integration).

Jit monetizes via a SaaS subscription model with a product-led growth motion anchored by a free public beta and self-service onboarding, supplemented by sales-assisted demos for enterprise customers. The customer base spans horizontal enterprise segments — automotive, telecommunications, market research, advertising technology, veterinary healthcare, insurance technology, and digital media — with named reference customers including Perion. By 2025 the company reported $10.8M in ARR with a 101–250 person organization. In May 2026 Jit was acquired by Torq for approximately $70M in an all-cash transaction, with the founding team and roughly 30 engineers joining Torq's AI SOC platform to integrate Jit's Context Graph and agentic capabilities into Torq's security operations offering.

Name

Jit

Legal name

Jit

Website

https://jit.io

Company type

Private

Founded year

2021

Operating status

Acquired

Headcount range

101–250 employees

Short description

Jit is an AI-native application security (ASPM) platform that uses agentic AI agents — Sera and Deva — built on a proprietary Context Graph to consolidate 30+ scanners and prioritize vulnerabilities for engineering and security teams across startups and enterprises.

Ownership category

akta.pro rank

Product category

Application Security Posture Management (ASPM)

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)

akta.pro secondary industry

Cloud-Native Application Protection Platforms (CNAPP) (HDABAHAH)

Keywords

• Application security
• Security posture management
• DevSecOps automation
• Agentic AI security
• Vulnerability prioritization

Headquarters

HQ city

Tel Aviv

HQ country

Israel

HQ region

Middle East

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription: Jit operates as a SaaS platform offering subscription-based access to its AI-powered application security platform. The platform offers automated security plans and tools to streamline security and compliance for developers. A free public beta was launched at inception.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

Jit is an AI-powered Application Security Posture Management (ASPM) platform that uses autonomous AI agents (Sera and Deva) to execute product security workflows across code scanning, cloud security, data security, and compliance. The platform orchestrates 30+ built-in security scanners, consolidates findings into a unified backlog, applies a proprietary Context Graph for runtime-based risk prioritization, and provides in-IDE remediation via an MCP Server for tools like Cursor and VS Code.

Product overview

Jit is an AI-powered Application Security Posture Management (ASPM) platform that offers autonomous security agents for product security execution. The core Jit AI Agents Platform features Sera (Security Evaluation and Remediation Agent) and Deva (Developer Enablement and Verification Agent), which automate Code Scanning, Cloud Security, Data Security, and Compliance workflows. The platform includes three agent tiers: Core Agents for high-volume workflows, Pre-Built Agents covering the full security lifecycle, and Custom Agents for organization-specific needs. Key platform capabilities include Context Engine for runtime-based vulnerability prioritization, Workflows for automated triage, MCP Server for IDE integration, and a VS Code Extension for in-IDE security scanning. Jit's Minimal Viable Security (MVS) Plan integrates tools and workflows into development pipelines. The platform also participates in Opengrep, an open-source SAST fork of Semgrep OSS.

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• 40+ analyst-years equivalent of automated security work
• +4 more outcomes

Named customers7 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration35 records

AI capability7 records

Feature5 records

Partnerships

20 partnerships are on record, tiered core.

• TorqcoreTechnology or Integration · 1 May 2026Torq acquired Jit in 2026 to enhance its AI SOC platform with Jit's AI Context Graph technology. Jit's technology maps relationships among code, identities, roles, permissions, data sensitivity, and runtime behavior within organizations, enabling AI agents to assess risk in business context. The founding team including David Melamed and approximately 30 engineers joined Torq.
• GitHubcoreTechnology or IntegrationSource code management integration enabling continuous scanning for every pull request, daily codebase scanning, and PR comment feedback for developers.
• GitLabcoreTechnology or IntegrationSource code management integration with continuous scanning for every merge request and daily codebase scanning.
• AWScoreTechnology or IntegrationAWS Partner Network member. Scans EC2, RDS, S3 instances and many other services for security misconfigurations via CSPM integration.
• AzurecoreTechnology or IntegrationScans Azure Defender, IAM, storage instances and many other services for security misconfigurations.
• GCP (Google Cloud Platform)coreTechnology or IntegrationScans compute, BigQuery, CloudSQL instances and many other services for security misconfigurations. Recognized with New Customer Acquisition award from GCP Israel.
• JiracoreTechnology or IntegrationTicket management integration streamlining assignment of security tickets to Engineering and Security teams.
• LinearcoreTechnology or IntegrationTicket management integration for assigning security tickets directly to Engineering and Security teams.
• WizcoreTechnology or IntegrationBidirectional integration. Jit pushes SAST findings to Wiz to unify vulnerability reporting, while pulling Wiz findings and runtime context into Jit's risk prioritization. Enables AppSec and CloudSec teams to collaborate.
• Orca SecuritycoreTechnology or IntegrationConsolidates Orca-detected CSPM findings into Jit to unify code and cloud security risk mitigation. Correlates cloud and application security for smarter risk management.
• Upwind SecuritycoreTechnology or IntegrationPulls runtime data from Upwind to quickly understand security impact of potential vulnerabilities in runtime, enabling vulnerability prioritization from runtime back to code.
• Sweet SecuritycoreTechnology or IntegrationUnifies Sweet Security findings alongside Jit findings for a single view into app and cloud security. Helps prioritize exploitable CVEs based on runtime context.
• CrowdStrikecoreTechnology or IntegrationJit connects with CrowdStrike's Falcon Cloud Security to deliver runtime-verified vulnerability insights directly into developer workflows.
• CyeracoreTechnology or IntegrationData security integration enabling quick understanding of how code and cloud security issues impact sensitive data. Maps vulnerabilities to sensitive data discovered by Cyera.
• Semgrep CodecoreTechnology or IntegrationOrchestrates Semgrep One's SAST scans to automatically scan every code change with cross-file and cross-function detection. Findings unified with Jit's security backlog.
• Bright SecuritycoreTechnology or IntegrationDAST integration bringing accurate, low-noise security testing into Jit's unified product security platform. Less than 3% false positives.
• DratacoreTechnology or IntegrationEnables automated evidence submission for key technical SOC2 controls to Drata platform. SOC2 by Drata plan available.
• SplunkcoreTechnology or IntegrationSIEM integration enabling forwarding of Jit audit logs to Splunk Cloud for storage and analysis using Splunk's event collector.
• Google ChroniclecoreTechnology or IntegrationGoogle SecOps (Chronicle) integration allowing organizations to stream audit logs and security findings for enhanced visibility, analysis, and risk management.
• SlackcoreTechnology or IntegrationCollaboration integration enabling viewing of security-related notifications in team's native environment for day-to-day communications.

Scale indicators9 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Snyk: Developer-first application security platform covering SAST, SCA, IaC, and container security. Directly comparable to Jit in the ASPM and developer-security category, with a much larger customer base and recurring revenue.
• Aikido Security: Consolidated application security platform with SAST, SCA, DAST, CSPM, and a no-backlog developer UX. Closest direct competitor to Jit's 'minimal viable security' positioning for startups and mid-market.
• StackHawk: DAST-first application security platform with developer-centric UX that integrates with Jit. Comparable as a developer-friendly scanner-and-ASPM platform for cloud-native teams.

Broad incumbents

• GitHub Advanced Security: Native application security offering (CodeQL, Dependabot, secret scanning) embedded in the GitHub platform. Competes with Jit's SAST/SCA/secrets coverage and benefits from distribution through the world's largest developer platform.
• CrowdStrike: Endpoint and cloud security leader extending into ASPM and agentic SOC (Charlotte AI, Falcon Cloud Security). Jit integrates with CrowdStrike while also competing for the same AppSec/CNAPP wallet share.
• Torq: Acquirer of Jit and a security hyperautomation/SOAR platform. Comparable as a security-orchestration and AI-SOC platform where Jit's ASPM and agent technology is now embedded.
• Orca Security: Agentless cloud security platform that has expanded into ASPM and application risk prioritization. Jit integrates with Orca and competes for cloud-to-code correlation use cases.

Others

• Wiz: Cloud security platform (CNAPP) that has expanded into ASPM and agentic security. Jit integrates bidirectionally with Wiz but also competes for the same ASPM budget, especially for cloud-native customers.

Emerging players

• Apiiro: Application Security Posture Management (ASPM) platform that prioritizes risk using code, cloud, and runtime context — closely aligned with Jit's Context Graph approach, particularly for enterprise ASPM.
• ArmorCode: AI-powered ASPM platform that consolidates findings from 100+ scanners and prioritizes risk. Direct overlap with Jit's product security orchestration, correlation, and triage capabilities.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/jit_io
• YouTubeyoutube.com/@jitsec
• Facebookfacebook.com/thejitcompany
• LinkedInlinkedin.com/company/jit

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds1 record

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Jit