CheckOps home

Tools directory

G

CheckOps

GitGuardian

GitGuardian is a credential-layer security platform for secrets detection and remediation across code, CI and collaboration tools, available as SaaS or self-hosted, with a free plan.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

GitGuardian calls itself the credential-layer security platform: find every secret, see what it can reach and stop the next breach. It is available as SaaS or self-hosted.

It scans repositories and developer workflows for hard-coded secrets, provides a remediation workflow, and offers the ggshield CLI for pre-commit and CI checks.

Features

  1. Secrets detection: Hundreds of detectors across code and history.
  2. ggshield CLI: Pre-commit, pre-push and CI scanning.
  3. Remediation workflow: Assign, track and resolve incidents.
  4. Self-hosted option: For regulated environments.
  5. API: Programmatic scanning; free plans include 10,000 API calls a month.

Pros

Cons

  1. Paid tiers for teams: Advanced features need Business plans.
  2. SaaS data flow: Consider self-hosting for sensitive code.
pip install ggshield
ggshield auth login
ggshield secret scan repo .

Resources:

Pricing

From GitGuardian’s pricing page: a free Starter plan at $0 for internal secrets monitoring (API includes 10,000 calls a month on free plans); paid Business and Enterprise plans, see site.

  1. Teams wanting managed secrets detection with workflow.
  2. Organisations needing self-hosted secrets scanning.
  3. Not a fit if a free CLI alone is enough.

Conclusion

GitGuardian is a mature secrets-security platform with a free starting tier.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with GitGuardian side by side.