FAQ GitGuardian

GitGuardian is a global cybersecurity startup focusing on code security solutions for the DevOps generation. A leader in the market of secrets detection and remediation, its solutions are already used by hundred thousands developers in all industries. GitGuardian helps developers, cloud operation, security and compliance professionals secure software development, define and enforce policies consistently and globally across all their systems.

GitGuardian solutions monitor public and private repositories in real-time, detect secrets and alert to allow investigation and quick remediation.

GitGuardian is a company founded in 2018 and backed by famous VCs and investors: Balderton Capital, Solomon Hykes and Scott Chacon. GitGuardian raised $44M at the end of 2021 with prominent funds such as Eurazeo, Sapphire and Balderton.

GitGuardian is trusted by more than %nggsu%k developers and by large organizations in the financial, health, and software sectors.

You can see for yourself what developers have to say about us here.

‍

GitGuardian is trusted by individual developers as well as security teams from companies of all sizes. Thanks to our community of %nggsu%k+ developers, we are now the #1 security app on the GitHub marketplace!

‍

We treat our user’s data with great care, and protecting this information is our top priority. We are therefore in the process of becoming SOC2 certified.

Additionally, we also naturally comply with GDPR regulations when it comes to storage and retention of customer data.

‍

GiGuardian is available as a cloud-based software. If your company handles sensitive data and you would rather not push your code to the cloud for security reasons, you can also install GitGuardian on-premise.

GitGuardian is helping developers secure software development with automated secrets detection & remediation for private or public source code.
We scan public GitHub for secrets such as API keys or credentials in real-time. If you received an email from GitGuardian after committing to a public repository, it means we were able to find a secret in your code.

Don’t panic! Just click here to find the steps that will help you remediate this potential leak.

If this is a false positive, we apologize for the alert. Secrets detection is probabilistic: our algorithms achieve a tradeoff between not raising false alerts and not missing exposed credentials.

Yes, GitGuardian’s Internal Monitoring is and will always be free for individual developers.

‍

Does this mean your personal data is being monetized?

Not at all. We sell our products to enterprises with sizable development teams and this is how we do our revenue. But as a part of our product’s scanning capabilities, we stumble upon API keys, passwords and other credentials that individual developers are leaking to public GitHub everyday. We consider it our duty to provide pro bono alerting for these developers.

We do hope that you will spread the word about GitGuardian and secret detection if you see value in our product: help a developer out!

GitGuardian is also free for small development teams and for open-source organization.

‍

You can find all pricing information on our pricing page.

Although Secrets detection is a new category, we are currently gathering vetted customer and user reviews of GitGuardian.

You can find reviews on the following sites:

Peerspot

Capterra

Gartner Peer Insights

G2

Trustradius

You can also find out what developers have to say about us and how customers such as Talend, Bokeh, Mirantis or Genesys use and benefit from GitGuardian

This page is regularly updated with information about alternatives to GitGuardian, so you can find the best suited tool.