GitGuardian
Find every credential. Stop the next breach.
- Also known as
- gitguardian
What is GitGuardian?
Secrets Security and Non-Human Identity Governance platform that finds, fixes, and prevents hardcoded secrets across development environments and protects against credential-based attacks.
GitGuardian pricing
Plans, per-tier features and add-ons, dated and linked to live pricing. Pricing changes often; always verify at source before you rely on it.
Free tier available. Growth and Enterprise plans require contact/demo.
Starter
FreeFor individuals and teams up to 25 developers
- devs
- 25
- historical_scans
- 500
- api_calls_monthly
- 10K
- Internal Secrets Monitoring
- Unlimited real-time scanning
- GitHub, Azure Repos, GitLab, Bitbucket support
- 550+ specific detectors
- Automated severity scoring
Growth
For teams up to 500 developers
- devs
- 500
- Internal secrets monitoring: code, CI/CD, containers, custom
- Public secrets monitoring (limited)
- Endpoint protection for developer machines
- Remediation playbooks
- Slack, Jira, ServiceNow integrations
- AI risk scoring and false-positive filtering
- SSO (SAML 2.0) + SCIM
- Up to 10 teams
- US and EU data hosting regions
Enterprise
Contact salesFor 500+ developer organizations
- Public secrets monitoring (unlimited)
- NHI governance: vaults, identity mapping, OWASP policies
- Endpoint protection: developer + standard endpoints
- Corporate and enterprise data sources integration
- Self-hosted deployment + GitGuardian Bridge
- Unlimited teams and custom RBAC
- Custom detectors
- 12-month audit log retention
- Premium Care support (add-on)
Add-ons
- Endpoint Protection
- Extra endpoints
- Premium Care
What GitGuardian does
The capabilities that matter for devsecops tools, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.
- SAST (static analysis)
- ✗
- DAST (dynamic analysis)
- ✗
- SCA / dependency scanning
- ✗
- Secret scanning
- ✓
- Container / image scanning
- ✓
- IaC misconfiguration scanning
- ✗
- OSS licence compliance
- ✗
- SBOM generation (SPDX/CycloneDX)
- ✗
- Automated fix / upgrade PRs
- ✗
- Reachability / exploitability prioritisation
- ✓
- Hosting
- Cloud + self-hosted
- First-class CI / pipeline integration
- ✓
- In-editor / IDE scanning
- ✗
- OSS engine available
- ✗
Platform & deployment
Independently observed- CLI
- Web
- Cloud / SaaS
- Self-hosted
Integrations (8)
Independently observed- Slack
- Jira
- ServiceNow
- GitHub
- Azure Repos
- GitLab
- Bitbucket
- Docker
GitGuardian alternatives
Other devsecops tools we track, ranked by the same independent score.
- Endor LabsSpeed or security. The best teams code without compromise.low · 36%
- SemgrepAI-assisted SAST, SCA and Secrets Detectionmedium · 51%
- SnykAI Security Fabricmedium · 60%
- OWASP ZAPThe world's most widely used web app scanner. Free and open source.low · 13%
- MendSecure code, AI, and every interaction between themmedium · 53%
- TrivyThe All-in-One Security Scannerlow · 18%
The Vioscale score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for GitGuardian, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Security Posture | 90 | 40.00 | 3600.0 | ✓ |
| Reliability | 50 | 18.00 | 900.0 | ✓ |
| Capabilities | 67 | 12.00 | 805.4 | ✓ |
| Price Level | 80 | 8.00 | 640.0 | ✓ |
| Integrations | 27 | 12.00 | 329.3 | ✓ |
| Pricing Transparency | 25 | 10.00 | 250.0 | ✓ |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.
Features
| Attribute | Value | Evidence |
|---|---|---|
| Capabilities | {"sca":false,"dast":false,"sast":false,"sbom":false,"hosting":"both","ci_native":true,"ide_plugin":false,"auto_fix_pr":false,"open_source":false,"iac_scanning":false,"reachability":true,"secret_scanning":true,"container_scanning":true,"license_compliance":false} | mediumsource · 2026-08-01 · 60% |
Integrations
| Attribute | Value | Evidence |
|---|---|---|
| Count | 8 | mediumsource · 2026-08-01 · 60% |
Pricing
Reliability
| Attribute | Value | Evidence |
|---|---|---|
| Status page | Yes | mediumsource · 2026-08-01 · 60% |