Likelihood to Recommend I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.
Read full review SDLC deployment is simple. simple to use The coverage is thorough and complete as a DAST product.
Read full review Pros Secret scanning for secrets like Github OAuth Secrets Git commit/push hooks, so there's a check before you even try to push to a VCS Automatic rollback on accidentally pushed secerts Awesome dashboard and amazing options to resolve any false-positives Read full review Detection of vulnerabilities Scanning pipelines Integration is super easy Scanned cloud based applications Read full review Cons Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans. Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner. More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found. Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed. Read full review Reporting could be better Can be an involved setup if your organization is not using common build tools Users get spammed with a lot of email updates from the service Read full review Likelihood to Renew Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.
Read full review Support Rating Always receive excellent support from the vendor. No issues there.
Gene Baker Vice President, Chief Architect, Development Manager and Software Engineer
Read full review Alternatives Considered We selected GitGuardian because I attended a webinar from them. And they explained excellent which security issues can be in secrets in public/private repositories and to mitigate this risks we decided to use GitGuardian. Also, the free tier is one of the things which are really great and good starting point into repository security. And it does what they promise, really good.
Read full review Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.
Read full review Return on Investment GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business. We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches. No more. Read full review DevSecOps helped in reducing efforts License cost was less We could roll out double the count of applications with implementation of WebInspect Read full review ScreenShots GitGuardian Internal Monitoring Screenshots