About Legit or Lit?
Hey, I'm Grant Stoebner. I've spent my career in IT and cybersecurity, and a lot of it teaching people how not to get owned. This newsletter does one job: I read the privacy policy, the terms, and the security page so you don't have to, then grade the tool A to F with receipts.
Our mascot is Squint, a magnifying glass with a raised brow. Squint trusts nobody until the documentation says otherwise.
Methodology
Every tool is scored across six categories, 100 points total:
| Category | Points |
|---|---|
| Privacy | 25 |
| Security | 25 |
| Transparency | 20 |
| Pricing honesty | 15 |
| Agent and action safety | 10 |
| Scam signals | 5 |
Grades: 90+ A · 80–89 B · 65–79 C · 50–64 D · under 50 F.
Verdicts: LEGIT = A–B · SKETCHY = C–D · LIT = F (run).
Automatic F: credential harvesting, brand impersonation, or "guaranteed returns."
Rules we hold ourselves to
- Every claim links to a source. Sources are listed per issue on the sources page.
- If a company doesn't tell us something, we write "not disclosed" and it costs them points.
- Each review states the date documentation was fetched and whether we ran hands-on tests.
- Vendors get 48 hours to answer factual questions before we publish a D or F.
- Got a fact wrong? Send a source and we'll publish the correction.