CAST Highlight vs. GitGuardian Internal Monitoring

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
CAST Highlight
Score 8.2 out of 10
Enterprise companies (1,001+ employees)
CAST headquartered in New York offers Highlight, an application portfolio management solution providing software component analysis , application security, application benchmarking, and technical due diligence.
$25,000
per year
GitGuardian Internal Monitoring
Score 8.6 out of 10
N/A
GitGuardian Internal Monitoring helps organizations detect and fix vulnerabilities in source code at every step of the software development lifecycle. With GitGuardian’s policy engine, security teams can monitor and enforce rules across their VCS, DevOps tools, and infrastructure-as-code configurations. GitGuardian boasts users among companies, including Instacart, Genesys, Orange, Iress, Beyond Identity, NOW: Pensions, and Stedi. GitGuardian Internal Monitoring is an…
$0
per developer in the perimeter
Pricing
CAST HighlightGitGuardian Internal Monitoring
Editions & Modules
Cloud
25k
Portfolio Size 25
SCA
$26k
Portfolio Size 25
Complete
33k
Portfolio Size 25
Small Teams - 1-25 developers
$0
per developer in the perimeter
Standard 26-100 developers
$18
per developer in the perimeter
Standard - 26 to 100 developers
$18
developer per month
Enterprise - above 100 developers
adhoc
developer
Enterprise - above 100 developers
adhoc
developer
Offerings
Pricing Offerings
CAST HighlightGitGuardian Internal Monitoring
Free Trial
YesYes
Free/Freemium Version
NoYes
Premium Consulting/Integration Services
YesNo
Entry-level Setup FeeOptionalNo setup fee
Additional DetailsAnnual Pricing by Size of Application Portfolio
More Pricing Information
Community Pulse
CAST HighlightGitGuardian Internal Monitoring
Best Alternatives
CAST HighlightGitGuardian Internal Monitoring
Small Businesses

No answers on this topic

GitLab
GitLab
Score 8.7 out of 10
Medium-sized Companies
Veracode
Veracode
Score 9.2 out of 10
Veracode
Veracode
Score 9.2 out of 10
Enterprises
Veracode
Veracode
Score 9.2 out of 10
Veracode
Veracode
Score 9.2 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
CAST HighlightGitGuardian Internal Monitoring
Likelihood to Recommend
10.0
(1 ratings)
8.6
(20 ratings)
Support Rating
10.0
(1 ratings)
-
(0 ratings)
User Testimonials
CAST HighlightGitGuardian Internal Monitoring
Likelihood to Recommend
CAST
I think CAST is a great tool to give insight into your applications. The tool can be met with resistance from team members as the tool is going to expose defects that should be addressed. Out of the box, it may need some tailoring to focus on certain areas so that you are not overwhelmed with defects the first time you scan your code. But ultimately, you will want to eliminate all defects in the code and have all violations turned on.
Read full review
GitGuardian
I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.
Read full review
Pros
CAST
  • Identifies common coding vulnerabilities.
  • Compares code to industry best practices.
  • Assesses the code for data privacy compliance.
Read full review
GitGuardian
  • Secret scanning for secrets like Github OAuth Secrets
  • Git commit/push hooks, so there's a check before you even try to push to a VCS
  • Automatic rollback on accidentally pushed secerts
  • Awesome dashboard and amazing options to resolve any false-positives
Read full review
Cons
CAST
  • Code scans could be faster. A large application may need to be broken down into smaller sub-applications in order to facilitate faster code scans.
  • We spent a lot of time trying to figure out how to best structure our code base in the application for ultimate performance.
Read full review
GitGuardian
  • Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
  • Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
  • More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
  • Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.
Read full review
Support Rating
CAST
Tech support and pro services are top-notch.
Read full review
GitGuardian
No answers on this topic
Alternatives Considered
CAST
These other tools only do a part of what CAST does. CAST gives a comprehensive view into the code looking at all aspects, code quality, security, maintainability, vulnerability, privacy, reuse, etc. These other tools only focus on one or two dimensions.
Read full review
GitGuardian
We selected GitGuardian because I attended a webinar from them. And they explained excellent which security issues can be in secrets in public/private repositories and to mitigate this risks we decided to use GitGuardian. Also, the free tier is one of the things which are really great and good starting point into repository security. And it does what they promise, really good.
Read full review
Return on Investment
CAST
  • I believe once we had the tool working for our code base, we immediately saw positive ROI.
  • We spent some time getting to where our code code be scanned efficiently but some of that was trying to do things ourselves instead of fully utilizing Cast Professional Services. I highly recommend to do an engagement with CAST to have them help setup the tool in your environment or to run it in the cloud for you.
Read full review
GitGuardian
  • GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
  • We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
  • No more.
Read full review
ScreenShots

CAST Highlight Screenshots

Screenshot of Application Portfolio ManagementScreenshot of Software Composition AnalysisScreenshot of Portfolio Advisor for Open SourceScreenshot of Portfolio Advisor for CloudScreenshot of Cloud Migration Blockers and Boosters

GitGuardian Internal Monitoring Screenshots

Screenshot of GitGuardian Internal Monitoring - Monitoring ScreenScreenshot of GitGuardian Internal Monitoring - Secrets detailsScreenshot of GitGuardian Internal Monitoring - Scanning screen