# GitGuardian vs StackHawk

**Leader by Vioscale score:** GitGuardian

| Attribute | GitGuardian | StackHawk |
|---|---|---|
| **Vioscale score** | 75.1 (71% (medium)) | 50.5 (73% (medium)) |
| deployment.options | `{"cloud":true,"hybrid":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | A platform that detects hardcoded secrets and leaked credentials in source code, CI/CD pipelines, container images, developer machines, and public repositories, then automates remediation through context-aware prioritization and integration with existing security workflows. | A platform that enables AI coding agents (such as Claude, GitHub Copilot, Cursor) to automatically identify, analyze, and remediate security vulnerabilities in applications during development, eliminating context switching and manual handoffs to security teams. |
| features.capabilities | `{"sast":true,"hosting":"both","ci_native":true,"ide_plugin":true,"auto_fix_pr":true,"open_source":true,"reachability":true,"secret_scanning":true,"container_scanning":true}` | `{"dast":true,"hosting":"cloud","ci_native":true,"ide_plugin":true,"auto_fix_pr":true,"open_source":true}` |
| integrations.count | 15 | 11 |
| integrations.list | `[{"name":"GitHub"},{"name":"GitHub Enterprise Server"},{"name":"GitLab"},{"name":"Bitbucket"},{"name":"Azure Repos"},{"name":"Azure DevOps"},{"name":"Jira"},{"name":"Slack"},{"name":"ServiceNow"},{"name":"Confluence"},{"name":"Docker"},{"name":"Container registries"},{"name":"HashiCorp Vault"},{"name":"CyberArk"},{"name":"AWS Secrets Manager"}]` | `[{"name":"Claude Code"},{"name":"Codex"},{"name":"Gemini CLI"},{"name":"GitHub Copilot"},{"name":"OpenCode"},{"name":"Cursor"},{"name":"Snyk"},{"name":"Auth0"},{"name":"GitHub Actions"},{"name":"GitLab"},{"name":"Jenkins"},{"name":"CircleCI"}]` |
| market.availability | `{"hqCountry":"FR","primaryMarkets":["US","EU"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"web":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"subscription","plans":[{"free":true,"name":"Starter","summary":"Free, no credit card required","features":["Internal secrets monitoring","Unlimited real-time scanning","Multi-VCS support (GitHub, GitLab, Bitbucket, Azure Repos)","Developer workstations scan via Git hooks","Remediation tracking and guidelines","GitGuardian CLI (ggshield)","VSCode extension"],"minSeats":25,"description":"For individuals and teams up to 25 devs","contactSales":false,"includedLimits":{"devs":"25","historical_scans":"500","api_calls_per_month":"10K"}},{"free":false,"name":"Growth","summary":"Free trial available","features":["Everything in Starter, plus:","Internal secrets monitoring (code, CI/CD, containers, custom sources)","Public secrets monitoring (limited)","Endpoint protection for developer machines","Remediation playbooks with automated routing","Slack, Jira, ServiceNow integrations","AI-driven risk scoring and false-positive filtering","SSO (SAML 2.0) and SCIM provisioning","US and EU data hosting options"],"description":"For teams up to 500 developers","contactSales":false,"includedLimits":{"devs":"500","teams":"10","repository_scan_size_gb":"12"}},{"free":false,"name":"Business","summary":"Custom pricing via sales","features":["Internal secrets monitoring","Remediation playbooks","Up to 20 teams","Large repository scanning"],"description":"For teams up to 200 devs","contactSales":true,"includedLimits":{"teams":"20","repository_scan_size_gb":"12"}},{"free":false,"name":"Enterprise","summary":"Custom enterprise pricing","features":["Everything in Growth, plus:","Unlimited public secrets monitoring","NHI governance (vault management, identity mapping, policy enforcement)","Endpoint protection (developer and standard endpoints)","Corporate and enterprise data sources (Jira, Slack, Confluence, file storage)","Self-hosted deployment with GitGuardian Bridge","Unlimited teams and custom RBAC","Custom regex-based detectors","12-month audit log retention","Premium Care support"],"minSeats":500,"description":"For 500+ developer organizations","contactSales":true,"includedLimits":{"teams":"None","repository_scan_size_gb":"60"}}],"addOns":[{"name":"Extra endpoints (endpoint protection)"},{"name":"Premium Care support"}],"summary":"Free Starter tier for up to 25 developers. Paid plans start with Growth tier; Enterprise and Business require custom quote.","currency":"USD","freeTier":true,"sourceUrl":"https://www.gitguardian.com/pricing","retrievedAt":"2026-08-14T15:23:02.350Z","billingPeriods":["month","year"]}` | `{"type":"subscription","plans":[{"free":false,"name":"Wingman","summary":"$10/user/month","features":["Works inside Claude Code, Cursor, GitHub Copilot","Auto-configures and boots app","Runtime testing against running app","Finds and fixes vulnerabilities in same session","Auto-rescanning to verify fix","Pre-PR security attestation","Unlimited apps","50 scans/user/month"],"commitment":"monthly","components":[{"kind":"per_unit","unit":"user","amount":10,"period":"month","currency":"USD"}],"description":"For individuals and teams shipping with AI coding agents","contactSales":false,"includedLimits":{"apps":"unlimited","scans":"50/user/month"}},{"free":false,"name":"Scale","summary":"Custom pricing. Contact sales.","features":["Everything in Wingman","Attack surface discovery","Sensitive data detection","Deeper, broader scan coverage","Program reporting (coverage, fix rates by team)","Teams, roles, and enterprise support","Unlimited agentic scans"],"description":"For security teams needing attack surface discovery, coverage, and proof across every app","contactSales":true,"includedLimits":{"apps":"unlimited","scans":"unlimited"}}],"summary":"From $10/user/month (Wingman). 14-day free trial. Scale plan available via sales consultation.","currency":"USD","freeTier":true,"sourceUrl":"https://www.stackhawk.com","retrievedAt":"2026-08-03T22:45:21.019Z","freeTrialDays":14,"startingPrice":{"amount":10,"period":"month","currency":"USD"},"billingPeriods":["month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | freemium | freemium |
| pricing.price_level | low | low |
| pricing.transparent | yes | no |
| reliability.status_page | yes | yes |
| security.disclosure_policy | yes | yes |
| security.gdpr | yes | - |
| security.iso27001 | yes | - |
| security.pci | yes | - |
| security.soc2 | yes | yes |

## Capabilities (DevSecOps Tools)

| Capability | GitGuardian | StackHawk |
|---|:--:|:--:|
| **Scan types** |  |  |
| SAST (static analysis) | ✓ | - |
| DAST (dynamic analysis) | - | ✓ |
| SCA / dependency scanning | - | - |
| Secret scanning | ✓ | - |
| Container / image scanning | ✓ | - |
| IaC misconfiguration scanning | - | - |
| **Governance** |  |  |
| OSS licence compliance | - | - |
| SBOM generation (SPDX/CycloneDX) | - | - |
| **Remediation** |  |  |
| Automated fix / upgrade PRs | ✓ | ✓ |
| **Prioritisation** |  |  |
| Reachability / exploitability prioritisation | ✓ | - |
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | Cloud only |
| **Integration** |  |  |
| First-class CI / pipeline integration | ✓ | ✓ |
| In-editor / IDE scanning | ✓ | ✓ |
| **Licensing** |  |  |
| OSS engine available | ✓ | ✓ |

*Source: Vioscale. Generated 2026-09-01T15:00:45.560Z. "-" = undocumented, not absent.*