GitHub Secret Scanning

Name: GitHub Secret Scanning
Price: 19 USD

Web · Self-hosted · API · paid plans from $19/mo

Visit site Alternatives

Freedom report

One barScore 5.4

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

GitHub Secret Scanning is ranked #14 of 26 in DevSecOps platforms on Freedom251. It runs on API, Self-hosted, Web. Paid plans start at $19/mo.

GitHub Secret Scanning plans and pricing

All plans

GitHub Secret Protection $19/mo per active committer/month Secret scanning and push protection included for Team and Enterprise · Free for public repositories · Validity checks, Copilot secret scanning, generic patterns, bypass controls, security overview insights, and scan history API included for Team and Enterprise github.com · 4 Oct 2026

Compared on DevSecOps platforms

Free plan: Yes
Paid from: $19/mo
Self-hosted deployment: Yes

Best GitHub Secret Scanning alternatives

See all 12

Two bars Aikido CSPM Free tier No. 1$300/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Endor Labs Free tier No. 3Free6.6 Two bars Semgrep Code Free tier No. 4$30/mo6.6 Two bars Snyk Open Source Free tier No. 5$25/mo6.6 One bar Contrast Security Platform Free tier No. 6$750/mo6.5

The record

Purpose: Secret scanning automatically detects exposed credentials so they can be secured before they are exploited.
Scan coverage: It scans all branches across Git history and also scans issue and pull request content, discussions, wikis, and secret gists.
Alerts: When it detects a credential leak, GitHub creates an alert on the repository’s Security and quality tab with details about the exposed credential.
Push protection: Push protection proactively blocks secrets before they reach code.
Custom patterns: Organizations can define regular expressions to detect organization-specific secrets not covered by default patterns.
Generic patterns: Generic patterns can detect secrets not tied to a specific provider, including private keys, connection strings, and generic API keys.
AI detection: AI-detected secrets can identify unstructured secrets such as passwords.
Provider integration: GitHub partners with service providers to validate detected secrets and may notify a provider so it can take action, such as revoking the credential.
Validity checks: Validity checks determine whether a detected secret is still active and may contact its issuing service to check whether it was revoked.
Public repositories: Secret scanning runs automatically for free on public repositories.
Private repository access: Organization-owned private and internal repositories can use secret scanning with GitHub Secret Protection enabled on GitHub Team or GitHub Enterprise Cloud.
Enterprise option: GitHub Enterprise Server supports secret scanning for user-owned repositories when the enterprise has GitHub Secret Protection enabled.
Public monitoring: An enterprise can enable public monitoring to detect secrets its members leak in public repositories across GitHub.
Founded: 2008
Price from: $19/mo

Where it ranks on Freedom251

Best DevSecOps Platforms in 2026#14 of 26
Best Dependency Management Software in 2026#13 of 25

Is GitHub Secret Scanning yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote GitHub Secret Scanning

Sources

docs.github.com/en/code-security/concepts/secret-securi· checked 4 Oct 2026
github.com/security/plans· checked 4 Oct 2026
github.com/security/advanced-security· checked 28 Sept 2026