GitGuardian
Secrets detection across your repositories, history and developer machines.
What it is
GitGuardian scans repositories, commit history, CI logs and container images for leaked credentials, with detectors tuned for hundreds of specific secret types and validity checking that confirms whether a found key still works. It also monitors public GitHub for leaks of your organisation's secrets.
Best for
Where it is strong
- Validity checking distinguishes a live credential from a revoked one, which transforms triage priority.
- Scans full commit history, where most leaked secrets actually live.
- Free for teams up to 25 developers.
Where it falls short
- Secrets scanning only — not a general security platform.
- Historical scans on old repositories produce a large initial backlog.
- Requires repository access, which needs a security review of its own.
Pricing
Free tier available
Free tierFree tier: Free for individuals and teams up to 25 developers.
What drives the bill: Free tier covers small teams entirely; business pricing is quote-based per developer.
Check current pricing on GitGuardian’s siteFigures are indicative and were last reviewed August 2026. Vendors change pricing often; confirm before you commit.
Works with
What people who use GitGuardian say
No reviews of GitGuardian yet. If you have used it in anger, yours would be the first.
Alternatives to GitGuardian
If GitGuardian is not the right fit, these solve the same problem differently.
