Jit
DevSecOps platform that orchestrates security tools across the SDLC and surfaces actionable findings for engineering teams.
Jit provides AI Agents that automatically execute product security workflows with human oversight. The platform handles the continuous execution loop of connecting to security tools, correlating signals, prioritizing issues, and acting on findings across vulnerability detection, secure SDLC, secure design, and governance.
The platform includes three agent types: Core Agents (out-of-box security automation), Pre-Built Agents (dozens of ready-to-deploy workflows), and Custom Agents (created via natural language). It integrates 30+ security scanners covering SAST, DAST, SCA, IaC, CSPM, and more.
Jit consolidates product security scanning, prioritization, reporting, and remediation in one place with integrations into source code managers and IDEs, enabling full-stack security coverage with continuous monitoring and immediate feedback on code changes.
[ToS] Section 6.2 explicitly states: "For the avoidance of doubt, Jit shall not use Your Content to train any AI Models
No training on user data means no opt-out is necessary.
Moderate risk. Suitable for internal data but avoid confidential information.
[ToS] Section 6.2 explicitly states: "For the avoidance of doubt, Jit shall not use Your Content to train any AI Models or permit AI Models to train on the Content without your prior written consent." This is a clear, unambiguous protection against AI training on user data without explicit opt-in consent.
“[ToS] "For the avoidance of doubt, Jit shall not use Your Content to train any AI Models or permit AI Models to train on the Content without your prior written consent."”
[ToS] Section 6.2 grants Jit a "worldwide, non-exclusive, limited, non-transferable and non-sublicensable (other than to Jit's affiliates and Third Party Service providers)" license for the Subscription Term. While the license is limited in scope and terminates with the subscription, the ability to sublicense to affiliates and third-party service providers introduces moderate concern about downstream use.
“[ToS] "You hereby grant Jit a worldwide, non-exclusive, limited, non-transferable and non-sublicensable (other than to Jit's affiliates and Third Party Service providers involved in the provision of the Services), royalty-free right and license for the Subscription Term..."”
[Subprocessors] Jit publishes a list of 7 subprocessors including AWS, MongoDB, Mixpanel (analytics), and others. [ToS] Section 6.2 permits sharing with "Third Party Service providers involved in the provision of the Services." While a subprocessor list exists and sharing is limited to service provision, Mixpanel's inclusion for analytics and the broad "Third Party Service providers" language creates moderate concern about scope of sharing.
“[Subprocessors] "The following entities are authorized to process Customer Personal Data on behalf of Jit...Mixpanel Inc. - Analytics services"; [ToS] "share the Content...with certain AI Models hosted by Third Party Service cloud infrastructure providers"”
[ToS] Section 3.4 states Jit will "retain Your Content during the Subscription Term as required...and will delete such Content promptly after fulfilment of said purposes" and "Jit shall permanently delete the Account and all Content from Jit's environment and systems within 30 days of the termination." While deletion timelines are specified, "promptly" is vague and the 30-day post-termination window creates moderate concern about data exposure duration.
“[ToS] "Jit will only retain Your Content during the Subscription Term...and will delete such Content promptly after fulfilment of said purposes...Jit shall permanently delete the Account and all Content...within 30 days of the termination"”
[ToS] Section 6.3 explicitly states: "Jit relinquishes all rights it might have in the Output, and hereby assigns to You all its right, title and interest in and to the Output." This is a clear assignment of all IP ownership of generated outputs to the customer with no vendor retention of rights.
“[ToS] "Jit relinquishes all rights it might have in the Output, and hereby assigns to You all its right, title and interest in and to the Output"”
[Trust Portal] displays a SOC 2 Type II badge and AWS partner badge, indicating some compliance certification. [Security Policy] references alignment with NIST RMF, AICPA SOC 2 Trust Services Criteria, and CIS Critical Security Controls. However, no formal GDPR compliance statement, ISO 27001, HIPAA, or published DPA is explicitly mentioned in the provided documents, creating moderate concern about completeness of certifications.
“[Trust Portal] SOC 2 Type II badge displayed; [Security Policy] "Risk management program aligned with National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), and the American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC) 2 Trust Services Criteria"”
Integrations
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai