--- title: GitGuardian Reviews meta_title: 'GitGuardian Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 275 reviews by the users' company size, role or industry to find out how GitGuardian works for a business like yours. aggregate_rating: rating_value: 4.8 review_count: 275 scale: '5' date_modified: '2026-07-17' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # GitGuardian Reviews **Vendor:** GitGuardian **Category:** [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast) **Average Rating:** 4.8/5.0 **Total Reviews:** 275 ## About GitGuardian GitGuardian is an end-to-end Secrets and Non-Human Identity (NHI) Security platform designed to help organizations eliminate secrets sprawl, govern machine identities, and meet compliance requirements under PCI-DSS v4.0, DORA, NYDFS Part 500, and NIS 2. As attackers increasingly target NHIs like service accounts, service principals, AI agents, and applications, protecting the credentials they rely on has become critical. GitGuardian's platform is built on three pillars: Secrets Security, NHI Governance, and Developer Endpoint Protection. \*\*Secrets Security\*\* eliminates leaks across every environment. Internal Secrets Monitoring detects hardcoded credentials in source code, CI/CD pipelines, container images, and collaboration tools like Slack, Jira, and Confluence with 500+ purpose-built detectors and a false positive rate under 10%. Public Secrets Monitoring scans 1B+ public GitHub commits daily, alerting teams the moment a secret is exposed externally. Honeytokens deploy decoy credentials that trigger immediate alerts on unauthorized access attempts. \*\*NHI Governance\*\* provides a centralized inventory of machine identities, including those outside vaults, with ownership attribution, risk scoring, and compliance evidence to support access reviews and rotation policy configuration. \*\*Developer Endpoint Protection\*\* extends coverage to the credential layer that repo and CI scanning can't reach: developer laptops. GitGuardian scans project directories, .env files, cloud credential stores, AI agent configs, and shell history across the entire fleet, delivering a prioritized inventory of exposed secrets by machine and severity. Trusted by Snowflake, ING, BASF, Datadog, Webflow, Bouygues Telecom, and more, and the #1 most-installed security app on the GitHub Marketplace. ## GitGuardian Pros & Cons **What users like:** - Users appreciate the **alert notifications** of GitGuardian, enabling instant updates on key leaks after code pushes. (17 reviews) - Users praise the **automated security features** of GitGuardian, ensuring seamless and proactive detection of secrets. (16 reviews) - Users love the **automated vulnerability detection** of GitGuardian, appreciating its swift and proactive monitoring of secrets. (11 reviews) - Users value the **accurate and fast detection** of GitGuardian, ensuring real-time alerts and precise incident management. (8 reviews) - Users commend GitGuardian for its **immediate detection speed** , offering quick alerts and actionable fixes during development. (8 reviews) - Users value the **easy Git integration** of GitGuardian, enhancing security without disrupting their coding workflow. (8 reviews) - Speed (8 reviews) - Users find GitGuardian's **ease of use** remarkable, allowing quick integration and seamless functionality within their codebase. (7 reviews) - Integrations (6 reviews) - Easy Integrations (5 reviews) **What users dislike:** - Users find that **false positives** can be cumbersome, requiring significant tuning and impacting user experience. (10 reviews) - Users find the **inefficient notifications** overwhelming, as alerts accumulate and false positives increase workflow complexity. (3 reviews) - Users find the **limited customization** options in GitGuardian a barrier for tailoring alerts and policies effectively. (3 reviews) - Users find the **interface confusing** , struggling with cluttered navigation and excessive alert filtering across multiple incidents. (2 reviews) - Users report **excessive notifications** from GitGuardian, leading to clutter and increased review time for incident management. (2 reviews) - Inadequate Reporting (2 reviews) - Users find the **lack of automation** in secret remediation less helpful, hoping for improved proactive solutions. (2 reviews) - Missing Features (2 reviews) - Time-Consuming (2 reviews) - Users find the **UI antiquated and clunky** , suggesting enhancements for a more intuitive experience and improved dashboard layout. (2 reviews) ## GitGuardian Reviews ### 1. Extremely fast identification of secrets **Rating:** 5.0/5.0 stars **Reviewed by:** Pedro C. | Graduate Research Assistant, Small-Business (50 or fewer emp.) **Reviewed Date:** February 27, 2023 **What do you like best about GitGuardian?** I think the best aspect of this is getting the instant notification that you committed a secret. With this I can quickly sweep in and remove the secret and keep the repo without any danger to APIs being abused/compromised. **What do you dislike about GitGuardian?** What I would improve upon is making the secret fixing automatic. In the page where you review the secret that was committed by mistake, I would add some automated mechanism to remove it from the history. **What problems is GitGuardian solving and how is that benefiting you?** It is helping to avoid compromise and abuse of API keys in repositories. ### 2. GitGuardian for Github code **Rating:** 5.0/5.0 stars **Reviewed by:** Satyendra S. | Senior Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** June 18, 2023 **What do you like best about GitGuardian?** Threat detection when check in new code. **What do you dislike about GitGuardian?** Use Interface can be made more user friendly **What problems is GitGuardian solving and how is that benefiting you?** Threat detection made life easier. When we put Database details in properties file. It quickly detects the threat ### 3. so fast and trustable **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** November 13, 2023 **What do you like best about GitGuardian?** nearly real-time sense of vulnerability,Ease of Use,Ease of Implementation C **What do you dislike about GitGuardian?** nothing,everything is ok,however sometimes there was advise removing which i do not want **What problems is GitGuardian solving and how is that benefiting you?** security of passwords ### 4. Never lets you escape any secret **Rating:** 5.0/5.0 stars **Reviewed by:** Álvaro C. | FullStack Developer, Small-Business (50 or fewer emp.) **Reviewed Date:** April 16, 2023 **What do you like best about GitGuardian?** The alert of some critical data that has been exposed in the code is almost immediate by the GitGuardian, and you can act immediately without taking risks. **What do you dislike about GitGuardian?** At the moment, I don't dislike anything. **What problems is GitGuardian solving and how is that benefiting you?** It has helped me not to expose a critical secret of my database and prevent any third party from taking control of it. ### 5. A great tool for tracking vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** Yegor V. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 28, 2023 **What do you like best about GitGuardian?** design and informative, easy to keep track of which files may be vulnerable **What do you dislike about GitGuardian?** No possibility to set your avatar in profile settings **What problems is GitGuardian solving and how is that benefiting you?** I have mistakenly uploaded API keys for my services to GitHub API several times, GitGuardian reported it to me via email, and I immediately fixed the vulnerabilities ### 6. Lifesaver **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** July 09, 2023 **What do you like best about GitGuardian?** Within just a few minutes or sometimes even seconds of pushing private information (API keys) to Github, I'm alerted about the vulnerability and can fix it. **What do you dislike about GitGuardian?** I'd like it if they had a feature to automatically clear out the private information from the repo and its history. **What problems is GitGuardian solving and how is that benefiting you?** Security vulnerabilities on Github ### 7. A great service **Rating:** 5.0/5.0 stars **Reviewed by:** Jashon O. | Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** February 04, 2023 **What do you like best about GitGuardian?** GitGuardian is a very useful tool to scan and find exposed secrets in GitHub. I like how quickly they react to exposed secrets before any damage is done. Has saved me many times when I've committed secrets unknowingly. **What do you dislike about GitGuardian?** Generally, I don't have any complaints as it has been an awesome tool to use. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian helps to minimize the effects of exposing private keys, certificates, and any other secrets to the public which might lead to huge losses for companies or even individual developers. ### 8. Great GitGuardian experience **Rating:** 5.0/5.0 stars **Reviewed by:** Kenneth Q. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 20, 2023 **What do you like best about GitGuardian?** I don't have to worry about my secret keys anymore. **What do you dislike about GitGuardian?** Nothing GitGuardian takes care of all my needs. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian saves my time by scanning repos and letting me know if I forgot to hide my secret keys before pushing to a repo ### 9. Excellent **Rating:** 5.0/5.0 stars **Reviewed by:** Nadia T. | Développeuse web (en formation), Small-Business (50 or fewer emp.) **Reviewed Date:** August 13, 2023 **What do you like best about GitGuardian?** Automated detection, reel time alerts... **What do you dislike about GitGuardian?** Nothing all are working good.......... . **What problems is GitGuardian solving and how is that benefiting you?** It's mentioned that i forget to hide my url mongodb ### 10. Secret Alert Awareness **Rating:** 4.0/5.0 stars **Reviewed by:** Olakunle O. | Geoscientist/Project Lead, Small-Business (50 or fewer emp.) **Reviewed Date:** April 24, 2023 **What do you like best about GitGuardian?** Alerting me if I mistakenly push a secret from the local environment to the GitHub account which I mistakenly forget when working. **What do you dislike about GitGuardian?** None for now from my personal usage and awareness **What problems is GitGuardian solving and how is that benefiting you?** Secret protection that often pushed into public ### 11. Amazing experience hunting secrets **Rating:** 5.0/5.0 stars **Reviewed by:** Ruan Gabriel G. | Software Engineer | Platform Engineer , Mid-Market (51-1000 emp.) **Reviewed Date:** March 01, 2023 **What do you like best about GitGuardian?** Gitguardian has helped us finding insidious secrets leaked on our source codes **What do you dislike about GitGuardian?** I dislike the fact that it is not a easy way to integrate GitGuardian with Microsoft Teams, but it is not annoying at all **What problems is GitGuardian solving and how is that benefiting you?** Gitguardian is helping my team to find leaked secrets, and we can securely delete our git history using the infos generated by gitguardian ### 12. Git Guardian Review **Rating:** 5.0/5.0 stars **Reviewed by:** Victor M. | Student, Small-Business (50 or fewer emp.) **Reviewed Date:** March 03, 2023 **What do you like best about GitGuardian?** I like that it informs me immediately after I post data to my GitHub, which is a security risk to my organization and me. **What do you dislike about GitGuardian?** Historical scan is not allowing me to check mark that I resolved the issue. **What problems is GitGuardian solving and how is that benefiting you?** Allows me to know when any API secret is exposed hence, enabling me to resolve as soon as possible. ### 13. Graduate Student **Rating:** 4.5/5.0 stars **Reviewed by:** Anurag B. | Small-Business (50 or fewer emp.) **Reviewed Date:** February 23, 2023 **What do you like best about GitGuardian?** It is very prompt in identifying exposed Keys and alerting the users. **What do you dislike about GitGuardian?** There is nothing to dislike as of now because I haven't used it a lot. **What problems is GitGuardian solving and how is that benefiting you?** Helps prevent your API keys, sensitive credentials to being exposed to the public. It is very beneficial because I like my apps to have a certain level of visibility. ### 14. Good experience **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** May 19, 2023 **What do you like best about GitGuardian?** It told me about exposed secrets and api keys. **What do you dislike about GitGuardian?** no downsides, i have actually using it for a few weeks, does not find any downsides **What problems is GitGuardian solving and how is that benefiting you?** it told me about my exposed secrets and api keys on which repository and on which line of that repository. ### 15. Great Product! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** April 10, 2023 **What do you like best about GitGuardian?** Gitguardian integrates nicely into our shift-left strategy of integrating security into our pipelines. It's simple to setup and get going quickly. **What do you dislike about GitGuardian?** Sometimes I find the GitGuardian UI a bit confusing, but once you get used to it, it works. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian is part of our shift-left security strategy. It benefits us by ensuring our team doesn't leak sensitive secrets where they shouldn't be. ### 16. Excellent unique service **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** May 03, 2023 **What do you like best about GitGuardian?** It captures security flaws almost instantaneously providing precise solutions to it. In addition, it's newsletter is really insightful. It is a unique service in the market **What do you dislike about GitGuardian?** There is not a link to redirect me to the file with the breach. **What problems is GitGuardian solving and how is that benefiting you?** It alerted whenever I had an API key exposed. ### 17. Security incidents review **Rating:** 4.5/5.0 stars **Reviewed by:** Ramoeletsi Naleli R. | Small-Business (50 or fewer emp.) **Reviewed Date:** February 27, 2023 **What do you like best about GitGuardian?** It warns me about private information leaks in my repositories, and allows me to delegate the incidents if the need arises. **What do you dislike about GitGuardian?** It sometimes takes a while to show when an issue has been resolved. **What problems is GitGuardian solving and how is that benefiting you?** It helps with making my code more secure. ### 18. really great **Rating:** 4.5/5.0 stars **Reviewed by:** Ali E. | Mentör || DevOps | Cloud | Terraform | Docker | Kubernetes | Linux | SQL | Data Analysis ||, Small-Business (50 or fewer emp.) **Reviewed Date:** March 10, 2023 **What do you like best about GitGuardian?** It sends very fast notifications. It shows my mistake right away. **What do you dislike about GitGuardian?** I've never had any problems until now. There may be more foreign language support. **What problems is GitGuardian solving and how is that benefiting you?** It warns me on token shares on my github. ### 19. Helpful product for the active developer **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Program Development | Small-Business (50 or fewer emp.) **Reviewed Date:** July 02, 2023 **What do you like best about GitGuardian?** i would say, my secret keys, i always forgot some secrets here and their in the code. But now i always fail to find the secrets **What do you dislike about GitGuardian?** nothing i would i say. i absolutely loved the product **What problems is GitGuardian solving and how is that benefiting you?** i would say my credentials saving and getting me staying out of trouble ### 20. Good functionality and protects data **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** January 28, 2023 **What do you like best about GitGuardian?** Automatically checks Git repositories for data breaches and sends timely notifications to users to protect data and see if any action is required. Useful as an additional safety measure. **What do you dislike about GitGuardian?** Nothing major to dislike, just some suggestions for future improvement -- identify when users put dummy PW/ID (I personally put "dummy PW" in sometimes but it still gets flagged as a privacy breach) **What problems is GitGuardian solving and how is that benefiting you?** Accidentally revealing personal data (email/pw/phone number) or API keys, serves as an additional safety measure to protect such sensitive info from being seen publicly ### 21. The perfect GitHub companion. **Rating:** 4.5/5.0 stars **Reviewed by:** Mattia R. | Chief Technical Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** June 17, 2022 **What do you like best about GitGuardian?** It helps you track any sensitive data you may have shared in the repos, either public or private. Its algorithm is pretty advanced and I've never had any false positives but it finds easily when secrets are shared, even from non-famous softwares like webhooks api keys and stuff like that. Super suggested, a must have on GitHub in my opinion. **What do you dislike about GitGuardian?** It really enforces you to be disciplined in GitHub with your secrets, it takes the slack completely off and it improves how careful you become with your .env files. I guess it's not a bad one actually haha Actually the only thing I'd love to see is a way of easily removing secrets that may have been shared on past commits, but that's more on Git than on this software I guess. **Recommendations to others considering GitGuardian:** There's no reason to non connect this software to your repos. It even has a generous free version so no reasons why not doing that. **What problems is GitGuardian solving and how is that benefiting you?** It's solving the problem on thoroughly making sure the repo doesn't contain any secrets that may be exposed. Anytime that happens is a huge issue as bad guys are always monitoring GitHub too for that to happen so to be notified right away is great! ### 22. Powerful and easy-to-use Secret Scanning **Rating:** 4.5/5.0 stars **Reviewed by:** Christian W. | Enterprise (> 1000 emp.) **Reviewed Date:** February 20, 2023 **What do you like best about GitGuardian?** + Easy to set up + Easy to use + Great for collaborative work in organizations with several Dev teams + Remediation workflow (including developers in the remediation/collecting feedback) + Integration for alerting (Discord, Slack etc.) **What do you dislike about GitGuardian?** - Advanced features are only available under Business and Enterprise plan **What problems is GitGuardian solving and how is that benefiting you?** - helped detecting secrets in a multi-team open-source setup - simplified remediation workflow - helped raise awareness about hardcoded secrets in git-repositories ### 23. Very useful but the UI is not optimal **Rating:** 3.5/5.0 stars **Reviewed by:** Stéphane R. | Backpacking in Asia, Small-Business (50 or fewer emp.) **Reviewed Date:** March 14, 2023 **What do you like best about GitGuardian?** I did not find one tool as accurate in finding forgotten credentials and security issues **What do you dislike about GitGuardian?** The UI is not great, hard to understand why I had two projects whereas my team had just one. **What problems is GitGuardian solving and how is that benefiting you?** We wanted to open-source our product source code and plugging a tool like Gitguardian to avoid leaking critical data was crucial to us ### 24. Essential, mandatory, a must have **Rating:** 5.0/5.0 stars **Reviewed by:** Daniel L. | Services Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** February 06, 2023 **What do you like best about GitGuardian?** I can sleep better, I know this service is doing the rounds for me, a watchman who never rests **What do you dislike about GitGuardian?** Nothing yet, everything is working as expected **What problems is GitGuardian solving and how is that benefiting you?** Oversights and oversights of commits late at night or rookie contributors ### 25. Good, but not perfect **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** April 05, 2023 **What do you like best about GitGuardian?** Well, it detects secrets quite well, with not too many false-positives. Happy to have our repo secrets free. **What do you dislike about GitGuardian?** Detection could still be improved. Adding something like const dbPassword = '#H96369Sjrs2' was not caught by ggshield. **What problems is GitGuardian solving and how is that benefiting you?** Avoiding secrets from being hardcoded in Git repositories. ### 26. An unintrusive tool that you forget is even there until it saves you a huge headache **Rating:** 5.0/5.0 stars **Reviewed by:** Joshua H. | Architect, Small-Business (50 or fewer emp.) **Reviewed Date:** June 14, 2022 **What do you like best about GitGuardian?** After you 'correct' an issue, it will tell you both whether the issue is still in the repo, but also, rather importantly, whether that secret is still in the git history as well. I cannot stress enough how many times this has saved me from a huge oversite, where a developer has committed some sort of secret, but then only removed it from their next commit. **What do you dislike about GitGuardian?** This is super nitpicky, and take it with a grain of salt because I haven't used the API that much as opposed to other features, but the pricing model of the API is not the most clear thing I have ever read. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian is making secret exposure easier to detect, and has a low effort to implement. Productivity is increased because immediately catching secret exposure prevents at leasst 4 other company employees from having to review the situation, so for every instance caught there is a significant time save. ### 27. Git Gurdian, The Best open source helper. **Rating:** 5.0/5.0 stars **Reviewed by:** Yusuf Arfan I. | Java Programmer, Small-Business (50 or fewer emp.) **Reviewed Date:** June 13, 2022 **What do you like best about GitGuardian?** I like the way gitgurdian is set up, where it automatically checks for any secrete that have been pushed by mistake. It also checks. it is very quickly which is really handy when creating prs. **What do you dislike about GitGuardian?** I don't dislike anything it is very user-friendly and easy to use with clear instructions on how to set it up. I can also see which secretes have been linked meaning I can go and revoke them. **Recommendations to others considering GitGuardian:** Use it, it is very good and useful and even if you do not need it now, it can still help you. Like if you accidentally upload your file full of secrets and tokens. **What problems is GitGuardian solving and how is that benefiting you?** It is solving one problem that I have a lot of which is accidentally pushing my .env file which contains all my secretes and when I push it by mistake it creates a big problem as I have to change everything. So it really helps with that problem. ### 28. good Security **Rating:** 4.5/5.0 stars **Reviewed by:** Seddik B. | Small-Business (50 or fewer emp.) **Reviewed Date:** February 16, 2023 **What do you like best about GitGuardian?** The most helpful on GitGuardian is the notification about the security issue when pushing personal issues on GitHub. **What do you dislike about GitGuardian?** Nothing till now, everything is working perfectly. **What problems is GitGuardian solving and how is that benefiting you?** security problem ### 29. GitGuardian really is my git guardian **Rating:** 5.0/5.0 stars **Reviewed by:** Leonardo L. | CTO, Small-Business (50 or fewer emp.) **Reviewed Date:** July 02, 2022 **What do you like best about GitGuardian?** GitGuardian is helping me to identify the hardcoded secrets that the team might commit and so in code reviews I already see and ask them to change to using environment variables. This already helps a lot, but there could be more features aimed at security gaps, but I can't explain it. I am still exploring some features. **What do you dislike about GitGuardian?** So far nothing, I am very surprised. So far nothing, I am very surprised. So far nothing, I am very surprised. So far nothing, I am very surprised. So far nothing, I am very surprised. **Recommendations to others considering GitGuardian:** Keep listening to your customers, just as you have listened to me. **What problems is GitGuardian solving and how is that benefiting you?** My team is junior and is learning to use good programming practices and sometimes they don't do it right and may expose sensitive data. GitGuardian helps me to catch this in revisions. ### 30. GitGuardian is My Hero! **Rating:** 5.0/5.0 stars **Reviewed by:** Jojo S. | Senior Web Developer, Internet, Small-Business (50 or fewer emp.) **Reviewed Date:** January 31, 2023 **What do you like best about GitGuardian?** Ease of use. Simple to integrate with our repositories. Quick to detect. **What do you dislike about GitGuardian?** Nothing that my developers have identified so far. **What problems is GitGuardian solving and how is that benefiting you?** Exposing any secrets which are inadvertently committed to the code repo. ### 31. Additional security assurance in a DevSecOps environment **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Restaurants | Enterprise (> 1000 emp.) **Reviewed Date:** July 19, 2022 **What do you like best about GitGuardian?** The ability to automatically scan source code and detect leaked secrets. GitGuardian has enabled us to add additional security control to our CI/CD pipeline, and enabled us to shift further left in the SDLC by implementing pre-commit hooks for Developers to test their code before it is committed. **What do you dislike about GitGuardian?** It would be great if GitGuardian could scan repositories such as Confluence, Jira, Service Now for secrets, as we have seen many Developers leaking secrets in those places too. I believe this can be done with the GitGuardian CLI tool, but a proper integration with the SaaS dashboard would add value to the tool. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian adds an additional control in our DevSecOps program to detect leaked secrets. This gives us greater security assurance that our application code repositories do not contain active leaked secrets. ### 32. Quick to Implement **Rating:** 4.5/5.0 stars **Reviewed by:** Morgan G. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 04, 2022 **What do you like best about GitGuardian?** GitGaurdian was easy to implement in our codebase and did not add much overhead. Their CLI is well documented, and setting up git actions was almost plug and play. **What do you dislike about GitGuardian?** The initial documentation suggested using another tool for running GitGuardian on developer machines, rather than making use of generic tools that are already used. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian helps provide complete trust between teams regarding the security of our codebase and gives confidence that all teams are focusing on security. Also provides the audit tools that we need to handle security issues. ### 33. We love GitGuardian. **Rating:** 5.0/5.0 stars **Reviewed by:** Mark W. | Co-Founder, Small-Business (50 or fewer emp.) **Reviewed Date:** June 12, 2022 **What do you like best about GitGuardian?** GitGuardian offers a free service for startups. We love the easy integration in our developer loop to protect from accidentally checking in secrets. The service was super easy to setup. **What do you dislike about GitGuardian?** We do not have anything to dislike about GitGuardian 10/10. We have been offered a free subscription as we are a startup with less then 10 developers which makes this the perfect fit to grow. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian protects us from accidentally checking-in secrets into our code base. This helps prevent us from leaking secrets that might be used to compromise our services. ### 34. best **Rating:** 4.5/5.0 stars **Reviewed by:** Manan k. | student, Small-Business (50 or fewer emp.) **Reviewed Date:** August 05, 2022 **What do you like best about GitGuardian?** I am a beginner to GitHub so when I first published my repository on GitHub guardian immediately notified me that I have made my API key public I am really impressed by this **What do you dislike about GitGuardian?** I didn't understand that is there any way in gitguardian to protect leaked secret keys **What problems is GitGuardian solving and how is that benefiting you?** it is notifies you of your leaked keys in your repositories ### 35. GitGuardian: Code Scanner for CICD microservices **Rating:** 4.5/5.0 stars **Reviewed by:** Sagar S. | InfoSec Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** February 17, 2022 **What do you like best about GitGuardian?** GitGuardian is an excellent tool to scan the code after every commit. It makes sure that developers didn't commit any secret value in the code by mistake. We have integrated it with the CI pipelines, and I must say that interation is very easy. We can monitor all the repo and reports from a single dashboard. ONe of the think which I like is, GitGuardian provides integration with almost all the CI tools and microservices tools. **What do you dislike about GitGuardian?** Currently, the features are limited to secrets scan, It's not something to dislike, but I would like to see the features like Docker image scan and IaC scans in the future. **What problems is GitGuardian solving and how is that benefiting you?** We generally encountered issues like pushing the tokens and secrets to the git repos. GitGuardian is helping by scanning the repos after every commit. This tool is beneficial for beginner developers and DevOps teams. ### 36. A guardian to my secret commits to GitHub **Rating:** 5.0/5.0 stars **Reviewed by:** Yohannis Kifle T. | Graduate student, Mid-Market (51-1000 emp.) **Reviewed Date:** June 11, 2022 **What do you like best about GitGuardian?** It's simple to set up. Even though I was very careful about exposing keys to GitHub, GitGuardian was able to detect those keys and informed me immediately. The website Interface is easy to navigate and explore the list of actions to take. **What do you dislike about GitGuardian?** Nothing yet, as I am still new to GitGuardian my experience has been great so far! **What problems is GitGuardian solving and how is that benefiting you?** I recently exposed secret access keys to GitHub and the immediate notification from GitGuardian helped me to revoke those access keys immediately. ### 37. Extremely useful service **Rating:** 5.0/5.0 stars **Reviewed by:** João Víctor C. | Information Technology Infrastructure Internship, Small-Business (50 or fewer emp.) **Reviewed Date:** July 04, 2022 **What do you like best about GitGuardian?** Email notifications and the dashboard page. **What do you dislike about GitGuardian?** No inherent dark mode and home page is not customizable to make it less cluttered. **Recommendations to others considering GitGuardian:** While the dashboard is very useful, explore other features as they provide useful information for your security and occurrence patterns and how you can act to avoid future problems. **What problems is GitGuardian solving and how is that benefiting you?** My mess ups when I upload sensitive information, I'm notified and the problem is corrected. ### 38. Amazing Experience as a Developer **Rating:** 4.5/5.0 stars **Reviewed by:** SHAMIK BERA 1. | Student, Full Stack Developer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 02, 2022 **What do you like best about GitGuardian?** The tracking of API keys and secret creds and the ability to resolve the issue. **What do you dislike about GitGuardian?** The least helpful is that it might give a newbie developer a hard time learning about it so some tutorials and such can be helpful. **What problems is GitGuardian solving and how is that benefiting you?** GitGuradian is helping me solve the problem of accidental secret tokens and creds leak which can be detrimental and costly for an organization to go through. ### 39. Instant Git repo scanning and security advisor service **Rating:** 4.5/5.0 stars **Reviewed by:** Norman K. | Development Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** June 22, 2022 **What do you like best about GitGuardian?** GitGuardian helped to scan potential security vulnerabilities in my Git repo automatically during Git check in. **What do you dislike about GitGuardian?** No, it works seamlessly in my journey. I did not encounter any problems/hiccups when using the product. **What problems is GitGuardian solving and how is that benefiting you?** GitGuardian digs out the secret key / API key that is embedded in the repo, and provides a portal page for me to review whether that is a confirmed case or a false alarm. ### 40. Secrete Credential Exposed on Github **Rating:** 5.0/5.0 stars **Reviewed by:** Bello O. | Full-Stack Web Development Student & Mentor , Small-Business (50 or fewer emp.) **Reviewed Date:** July 26, 2022 **What do you like best about GitGuardian?** The quick notification about my credentials being exposed on GitHub was super helpful **What do you dislike about GitGuardian?** Unable to automatically resolve the issue on the git guardian dashboard to remove all commit history of exposed credentials. **What problems is GitGuardian solving and how is that benefiting you?** Gitguardian is solving the issues of security involved when developing applications ### 41. Godsent protecion. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** August 02, 2022 **What do you like best about GitGuardian?** The speed of secret detections. I am always surprised by how fast it lets me know I have some exposed secret variables like JWT keys, and AWS keys. **What do you dislike about GitGuardian?** There can be some false flags that might be triggered. **What problems is GitGuardian solving and how is that benefiting you?** It notifies me of potential leaks of secret keys in my remote repositories on Github. It is very productive because it points out exactly where the leaks happened and how to mitigate them ### 42. A simple yet effective solution for our growing team, delivered with great customer service. **Rating:** 5.0/5.0 stars **Reviewed by:** Ryan H. | CTO, Small-Business (50 or fewer emp.) **Reviewed Date:** August 24, 2022 **What do you like best about GitGuardian?** Simple integration, non-invasive functionality and trustworthy, relevant feedback mean that I barely know its there, yet I know its helping us. **What do you dislike about GitGuardian?** I have yet to find something I don't like about the product. **What problems is GitGuardian solving and how is that benefiting you?** We are a small development team moving quite fast, and we need a cost-effective solution to help us minimize the risk of exposing things that shouldn't be. ### 43. A brilliant tool to help keep your codebase secret free! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** June 10, 2022 **What do you like best about GitGuardian?** The user interface is incredibly intuititive - it looks great. **What do you dislike about GitGuardian?** In "Permeter" - I always tend to click on the "source" link first, as I instictively think this will take me to open secrets, but it takes me to Github. Not a biggie, and of course I will learn to click on "Secret Incidents", which is the third column(second URL) across in the table so I get to it second. **Recommendations to others considering GitGuardian:** Why wouldn't you use Git Guardian? Protect your codebase and get real time updates of security risks. **What problems is GitGuardian solving and how is that benefiting you?** Protecting my codebase from being compromised by containing open secrets. ### 44. A great tool to improve security starting from the development **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Program Development | Mid-Market (51-1000 emp.) **Reviewed Date:** October 05, 2021 **What do you like best about GitGuardian?** I greatly appreciated the precommit integration that allows to very easily prevent accidental commits **What do you dislike about GitGuardian?** Just some false positives in particular with configurations used for CI, but it is enough to mark them as safe by accessing the web interface **Recommendations to others considering GitGuardian:** You should really try GitGuardian and enjoy when it will save your day from bad commits :-) **What problems is GitGuardian solving and how is that benefiting you?** We had in the past some passwords committed in a public repo and we lost an amount of time to clean the git history and change these password... by using gitguardian we are now able to prevent this ### 45. Must have to keep commit safe **Rating:** 5.0/5.0 stars **Reviewed by:** Jean-Louis Q. | Angel Investor, Small-Business (50 or fewer emp.) **Reviewed Date:** June 06, 2022 **What do you like best about GitGuardian?** I like the 2 clicks integration into the hot workflow for pull request integrate. Like the fact that got guardian went backward to perform all security check in previous commits at first. **What do you dislike about GitGuardian?** Nothing the product meets all requirements. **What problems is GitGuardian solving and how is that benefiting you?** Catching security issue/ data leak within public (or private) for repository. This is particularly usefully for certification process (adding to best practices). ### 46. Easy to Use **Rating:** 5.0/5.0 stars **Reviewed by:** Phillip M. | Information Security Associate, Small-Business (50 or fewer emp.) **Reviewed Date:** May 12, 2022 **What do you like best about GitGuardian?** is easy to set up. there are some false positives on config.yaml.dist files that say FOOBAR_APIKEY: "yourKeyHere" but this is hard to check for if it is a false positive, but it lets you declare whether it is or not which is nice. **What do you dislike about GitGuardian?** is slow on pre-commit hooks while waiting for it to run, if it ran faster that'd be cool lol **What problems is GitGuardian solving and how is that benefiting you?** no issues. ### 47. I was very impressed by your solution, let's see about results in short and medium term... **Rating:** 5.0/5.0 stars **Reviewed by:** Benone B. | D, Mid-Market (51-1000 emp.) **Reviewed Date:** June 17, 2022 **What do you like best about GitGuardian?** Scan detection had amazing results and the web UI interface was very friendly. **What do you dislike about GitGuardian?** Not sure yet, still on POC, but I need to get more familiar with the tool. **What problems is GitGuardian solving and how is that benefiting you?** We are initiating the DevSecOps this fiscal year and Github is one of the major concerns. ### 48. Has saved me from making mistakes at 3am more than once **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** May 16, 2022 **What do you like best about GitGuardian?** GitGuardian is very painless to use, has a simple and intuitive UI, and will tell you specifically where you made a mistake in regards to secrets or exploitable methods. **What do you dislike about GitGuardian?** Initial usage can be a bit daunting - there's alot to take in at first, and it is a bit irritating that private collaborative repositories are not under the default plan (although that is understandable) **What problems is GitGuardian solving and how is that benefiting you?** When working late hours on code, GitGuardian helps prevent making innocent mistakes, where an IDE might automatically add a configuration file to a branch push that contains a secret. ### 49. It helps me auto detecting credentials that I overlooked **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** June 15, 2022 **What do you like best about GitGuardian?** The best thing about GitGuardian is that it notified users about the potential leak with credentials. I just started with software development earlier this year, so it help with building my habits to use environment variables **What do you dislike about GitGuardian?** Well, I am not experienced enough in software development and programming. So I have not found anything that I can say that I dislike about GitGuardian. **What problems is GitGuardian solving and how is that benefiting you?** Credentials leak problem and it helps make my project safe in public spaces like GitHub. ### 50. We are using GitGuardian to scan Django our repos for credentials that might have been commited **Rating:** 4.5/5.0 stars **Reviewed by:** Allan Stockman r. | Software Developer, Small-Business (50 or fewer emp.) **Reviewed Date:** October 13, 2021 **What do you like best about GitGuardian?** You get a worry-free commit. Integrated into the SDLC pipeline, it is helpful for internal security, mainly if the credentials are not not to be shared with the public. Better, since we produce open-source software, GitGuardian helps ensure we do not publish sensitive info that somebody can use to target us. The fact that you can restrict the scan of particular folders is very appreciated. **What do you dislike about GitGuardian?** It scans even sub repositories that are not ours. If some packages that we use but do not maintain are included in the scan, we get false positives that we wouldn't like to have. Fortunately, that can be easily corrected on the GUI. **What problems is GitGuardian solving and how is that benefiting you?** We use GitGuardian to solve the problem of securing our repositories, especially when we have new developers that do not know best practices for not including sensitive information in their commits. GitGuardian has been helpful to remind them that. ## GitGuardian Discussions - [What is GitGuardian used for?](https://www.g2.com/discussions/what-is-gitguardian-used-for) - 1 comment, 2 upvotes - [View GitGuardian pricing details and edition comparison](https://www.g2.com/products/gitguardian/reviews?page=5§ion=pricing&secure%5Bexpires_at%5D=2026-07-19+01%3A43%3A28+-0500&secure%5Bsession_id%5D=1a9de368-b80a-407a-824f-ede22845ea64&secure%5Btoken%5D=096618d823362a406d9504180ab5c3a379e65e669430cc2ecdc3465f23beb6e6&format=llm_user) ## GitGuardian Integrations - [Cursor](https://www.g2.com/products/cursor/reviews) - [Git](https://www.g2.com/products/git/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [Linear](https://www.g2.com/products/linear/reviews) - [Linter](https://www.g2.com/products/linter/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews) - [TallyPrime](https://www.g2.com/products/tallyprime/reviews) ## GitGuardian Features **Administration** - API / Integrations **Documentation** - Feedback - Prioritization - Remediation Suggestions **Lifecycle & Provisioning - Non-Human Identity Management (NHIM) Solutions** - Credential Rotation & Revocation - Automated Registration & Provisioning - De-Provisioning & Retirement **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Code Analysis **Security** - False Positives - Custom Compliance - Agility **Access, Authentication & Authorization - Non-Human Identity Management (NHIM) Solutions** - Fine-Grained Access Control - Machine-Native Authentication Methods - Contextual / Just-In-Time Access **Testing** - Command-Line Tools - Manual Testing - Test Automation - Detection Rate - False Positives **Visibility, Governance & Compliance - Non-Human Identity Management (NHIM) Solutions** - Policy Enforcement & Governance - Audit Logging & Activity Monitoring - Integration with IAM/Cloud/DevOps Ecosystem - Discovery & Inventory of Non-Human Ids **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution ## Top GitGuardian Alternatives - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,315 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (881 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) - 4.4/5.0 (364 reviews)