Jit is a product security platform built around AI agents that execute code scanning, cloud security, data security, and compliance workflows with humans in the loop. Its platform is designed to move teams from detection to remediation by connecting security signals, business context, and operational actions in one environment.
The company positions its platform as a new operating model for product security, giving security teams a single source of truth while keeping developers in their normal workflows. Jit supports organizations that are standing up an initial product security program as well as teams scaling secure development across hundreds of engineers, and it operates as a multinational company with offices on three continents.
Offerings, Capabilities, and Integrations
Jit combines application security posture management, AI-driven execution, and workflow automation. It pulls signals from code, cloud, runtime, scanners, identity systems, documentation, and internal policies into a Company Knowledge Graph that agents use to correlate findings, prioritize real risk, and drive remediation, reporting, and compliance activity.
Jit integrates with major source code platforms, cloud providers, IDEs, ticketing systems, collaboration tools, and specialist security products. Its ecosystem includes GitHub, GitLab, Bitbucket, Azure DevOps, AWS, Microsoft Azure, Google Cloud, Jira, Linear, Slack, Microsoft Teams, Wiz, Orca Security, Upwind Security, Cyera, Drata, Vanta, Splunk, and Google Chronicle, allowing teams to work inside the tools they already use.
Products and Services
- Agentic Product Security Platform: Jit’s flagship platform combines full-stack scanning, a centralized backlog, a Company Knowledge Graph, and AI agents to execute product security workflows from detection through remediation.
- Security Evaluation & Remediation Agent (Sera): Evaluates backlog findings in business and runtime context, maps exploitable attack paths, identifies systemic weaknesses, and helps generate patches, pull requests, and tickets.
- Developer Enablement & Verification Agent (Deva): Embeds change-based security scanning, plain-English feedback, and one-click remediation into pull requests, merge requests, and developer environments.
- Attestation and Threat Modeling Agent (Atma): Beta agent that automatically builds and updates threat models and supports attestation and architecture review workflows as applications change.
- Custom Agents: Natural-language-defined agents that monitor specific risks, generate dashboards, and automate follow-up actions across code, cloud, ticketing systems, and documentation.
- Static Application Security Testing (SAST): Scans custom code for security flaws and feeds findings into Jit’s prioritization and remediation workflows.
- Open Source Security (SCA): Identifies vulnerable open source components and dependencies and correlates them with vulnerability intelligence and environment context.
- Dynamic Application Security Testing (DAST): Scans web applications and APIs in runtime to surface vulnerabilities and unify them with the broader security backlog.
- Cloud Security Posture Management (CSPM): Monitors cloud environments for runtime misconfigurations and uses cloud integrations to assess exposure in context.
- IaC Security Scanning: Scans infrastructure-as-code for misconfigurations across frameworks such as Terraform, Pulumi, CloudFormation, AWS CDK, and Kubernetes manifests.
- Software Bill of Materials (SBOM): Maintains a continuously updated inventory of OSS components, dependencies, versions, and licenses and supports export in CycloneDX format.
- Secrets Detection: Detects hard-coded secrets such as API keys and cloud tokens as part of Jit’s code security coverage.
- Agentic Chat: Interactive interface for asking natural-language security questions, exploring the environment, generating dashboards, and saving investigations as agents.
- Jit Teams: Team-based security portal that maps repositories and resources to engineering teams so they can track posture, ownership, and notifications.
- Workflows: Automation layer for continuous monitoring, alerting, ticket creation, and other trigger-based actions tied to security events.
Target Customers
Jit targets product security, DevSecOps, and engineering organizations that need to improve security without slowing release velocity. It is positioned for teams launching a first formal product security program and for organizations that need to scale governance, backlog management, and developer feedback across larger engineering estates.
The platform fits cloud-native software teams working in GitHub, GitLab, Bitbucket, or Azure DevOps and operating across AWS, Microsoft Azure, and Google Cloud. Jit also appeals to organizations that need audit-ready evidence, continuous threat modeling, and tighter coordination between security practitioners and developers.
Cloud Integrations and Marketplace
- AWS Marketplace: Jit is available for procurement in AWS Marketplace as Jit Agentic Security Platform. Jit also integrates with AWS accounts and organizations to scan runtime misconfigurations, import AWS Security Hub findings, require MFA checks, and enrich contextual risk analysis.
- Google Cloud Marketplace: Jit is available in Google Cloud Marketplace for Google Cloud customers that want to purchase through committed spend and credits. Jit also integrates with GCP projects to scan runtime misconfigurations and supports Workload Identity Federation or service-account-based connectivity.
- Microsoft Azure: Jit integrates with Microsoft Azure for runtime misconfiguration scanning and supports Azure DevOps integrations for code scanning, resource coverage, and security workflow management in Microsoft-centric development environments.
Key People
- Shai Horovitz: CEO
- David Melamed, PhD: CTO and Co-Founder
- Aviram Shmueli: Co-Founder, Chief Research & Innovation Officer
- Yoed Grizim: VP Engineering
- Chris Koehnecke: VP Security Engineering & CISO
- Orit Golowinski: VP of Product Management
- Gilad Barzilay: VP of Business Development & Alliances
- Ariel Beck: Head of Architecture
- Charlie Klein: Director of Product Marketing
Key Facts
- Headquarters: Boston, Massachusetts, United States
- Employees: Approximately 155
- Annual Revenue: $10M-$25M
- Parent Company: None
- Subsidiaries: None
- Publicly Listed: Privately held
