GitGuardian

Name: GitGuardian
Author: GitGuardian

Secrets detection across your repositories, history and developer machines.

Security TestingFree tierSelf-hostableAI features

What it is

GitGuardian scans repositories, commit history, CI logs and container images for leaked credentials, with detectors tuned for hundreds of specific secret types and validity checking that confirms whether a found key still works. It also monitors public GitHub for leaks of your organisation's secrets.

Best for

Any organisation with more than a handful of repositories and no secrets scanning today.

Where it is strong

Validity checking distinguishes a live credential from a revoked one, which transforms triage priority.
Scans full commit history, where most leaked secrets actually live.
Free for teams up to 25 developers.

Where it falls short

Secrets scanning only — not a general security platform.
Historical scans on old repositories produce a large initial backlog.
Requires repository access, which needs a security review of its own.

Pricing

Free tier available

Free tier

Free tier: Free for individuals and teams up to 25 developers.

What drives the bill: Free tier covers small teams entirely; business pricing is quote-based per developer.

Check current pricing on GitGuardian’s site

Figures are indicative and were last reviewed August 2026. Vendors change pricing often; confirm before you commit.

Works with

GitHubGitLabBitbucketJiraSlackSplunkPagerDuty

What people who use GitGuardian say

No reviews of GitGuardian yet. If you have used it in anger, yours would be the first.

Alternatives to GitGuardian

If GitGuardian is not the right fit, these solve the same problem differently.

TruffleHog

Security Testing

Open-source secret scanning that verifies whether the credential is still live.

Free tierOpen sourceSelf-host

Snyk