GitGuardian

What GitGuardian is

GitGuardian helps enterprises detect exposed secrets and govern non-human identities and AI agent security. Internal Secrets Monitoring checks code, CI/CD, and collaboration tools; Public Secrets Monitoring looks for secrets exposed on public GitHub. Repository scans can run in real time or historically, and the ggshield CLI supports scanning during development and pre-commit hooks. The platform also lists CI/CD, pull-request, and push-protection scanning, with custom detection rules. Starter is free for up to 25 developers and includes unlimited real-time scanning, up to 500 historical scan detections, and 10K API calls per month. Growth adds internal monitoring and limited public monitoring; pricing is available by contacting sales. Enterprise adds unlimited public monitoring, NHI governance, self-hosted deployment, unlimited teams, and 12-month audit log retention; its pricing is custom. Growth and Enterprise features include remediation capabilities and team or hosting options described in their plan details. A 30-day trial is listed. Supported version-control systems include GitHub, GitLab, Bitbucket, and Azure DevOps.

Who it suits

GitGuardian suits development and security teams seeking secret monitoring across repositories, CI/CD, and collaboration tools. Public monitoring is typically used by Threat Response teams, while Application Security teams typically use internal monitoring.

Limits

Starter supports up to 25 developers, up to 500 historical scan detections, and 10K API calls per month. Growth supports up to 10 teams and limited public monitoring. The pricing comparison lists repository scan capacities of 12 GB for Growth and 1 GB for Starter.

Getting started

1. Visit the GitGuardian website.
2. Choose the free Starter plan or review the Growth and Enterprise options.
3. Start the 30-day trial if evaluating a paid plan.
4. Connect a supported version-control system: GitHub, GitLab, Bitbucket, or Azure DevOps.
5. Use ggshield for command-line scanning and pre-commit checks.

Verdict

GitGuardian covers secret detection across code and related development workflows, with free Starter access and expanded monitoring in paid plans. Teams needing NHI governance or self-hosted deployment must consider Enterprise, whose price is custom.