Legit Security has introduced VibeGuard 2.0, an update to its security solution for AI coding agents, which now includes endpoint security capabilities. The initial VibeGuard product, released in the fourth quarter of 2025, focused on securing AI-generated code and establishing guardrails for coding agents. The latest iteration aims to enhance the developer experience while bolstering the security of AI-driven coding environments and agents.
VibeGuard 2.0 operates directly on the developer's endpoint, a departure from IDE extension solutions that can be difficult to deploy and easily removed by users. This design allows it to automatically detect and protect all coding agents, integrating seamlessly with them. The system is designed to interact with developers rather than imposing blocks, which could lead to frustration.
The updated platform is engineered to cover a wide range of agentic variations and plugins, offering comprehensive coverage and granular policy enforcement. This allows for the security of specific agent commands and tools. Legit Security emphasizes that agentic security should occur at the developer endpoint, with the goal of enhancing agent functionality rather than impeding it.
According to Legit Security CTO Liav Caspi, securing code generation at its point of creation is the most effective method for achieving speed and security in application development. Caspi stated that VibeGuard 2.0's new architecture and capabilities enable risk mitigation at the code generation stage, protecting both individual users and the organization.
Key features of VibeGuard 2.0 include its endpoint security, which is based on a new technology designed for complete agent security. It is capable of discovering and integrating with various coding agents, such as Claude Code, Cursor, and GitHub Copilot, to provide automated guardrails and policy enforcement.
The solution also incorporates real-time security guardrails, which include skill discovery and protection, the blocking of dangerous operations, and granular Multi-Cloud Platform (MCP) security. Furthermore, VibeGuard 2.0 enables security teams to monitor commands executed by agents and block hazardous operations based on either custom or built-in policies that encompass thousands of industry best practices.
This command monitoring capability is intended to mitigate risks such as the unintentional or malicious leakage of sensitive information or the destruction of production data. An additional anti-tampering feature has been integrated to prevent agents or threat actors from disabling VibeGuard and to stop users from bypassing essential protections. Legit Security showcased VibeGuard 2.0 at Black Hat USA 2026.
