GitGuardian helps enterprises detect exposed secrets and govern non-human identities and AI agent security. Internal Secrets Monitoring checks code, CI/CD, and collaboration tools; Public Secrets Monitoring looks for secrets exposed on public GitHub. Repository scans can run in real time or historically, and the ggshield CLI supports scanning during development and pre-commit hooks. The platform also lists CI/CD, pull-request, and push-protection scanning, with custom detection rules. Starter is free for up to 25 developers and includes unlimited real-time scanning, up to 500 historical scan detections, and 10K API calls per month. Growth adds internal monitoring and limited public monitoring; pricing is available by contacting sales. Enterprise adds unlimited public monitoring, NHI governance, self-hosted deployment, unlimited teams, and 12-month audit log retention; its pricing is custom. Growth and Enterprise features include remediation capabilities and team or hosting options described in their plan details. A 30-day trial is listed. Supported version-control systems include GitHub, GitLab, Bitbucket, and Azure DevOps.
Who it is for
GitGuardian suits development and security teams seeking secret monitoring across repositories, CI/CD, and collaboration tools. Public monitoring is typically used by Threat Response teams, while Application Security teams typically use internal monitoring.
What is good
- Free Starter plan for up to 25 developers
- Real-time and historical repository scanning
- Supports GitHub, GitLab, Bitbucket, and Azure DevOps
- CLI supports pre-commit scanning
- Enterprise offers self-hosted deployment
What to know first
- Starter historical detection is limited to 500 scans
- Starter allows up to 25 developers
- Growth and Enterprise pricing requires contacting sales
- Enterprise self-hosting is limited to that plan
Verdict
GitGuardian covers secret detection across code and related development workflows, with free Starter access and expanded monitoring in paid plans. Teams needing NHI governance or self-hosted deployment must consider Enterprise, whose price is custom.
GitGuardian plans and pricing
All plansCompared on secrets scanning software
- Free plan
- Yes
- Supported VCS
- GitHub, GitLab, Bitbucket, Azure DevOps
- CI/CD scanning
- Yes
- Pre-commit scanning
- Yes
- Pull-request scanning
- Yes
- Push protection
- Yes
- Custom detection rules
- Yes
