GitGuardian vs. IBM Cloud Continuous Delivery

I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.

Incentivized

It provides a cloud-based integrated development environment that integrates with other IBM Cloud services to provide a streamlined development workflow. This includes real-time collaboration and code sharing capabilities, making it easy for teams to work together on projects. This feature is very useful for our app to maintain the code

Incentivized

• GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
• It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
• It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
• GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping

• It contains the deployment templates which are much more time saving and is of great use.
• This has the integration of the Cloud applications which makes the work much more convenient.
• This is flexible when it comes to development, deployment, and delivery.
• [It] also has a much more reasonable pricing.
• Provides space for the data storage.
• [IBM Cloud Developer Tools] also can support many useful tools.

Incentivized

• Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
• Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
• More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
• Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.

• Its price is quite high and this made it unsuitable for us as we cannot afford such high rates.
• Its Setup takes much longer time and this is frustrating.
• Its interface needs to be improved and easy even for the Newbies.

Incentivized

It's a great platform to develop, run, test and deploy the applications easily. And it makes very easier and secure the implementation of continuous delivery process. For first time and experts also can use this service so easily. Great service provided by the IBM Cloud Continuous Service. There are more services that helps a lot to work on it. Thanks a lot.

Incentivized

Nothing special to say : the UX is clear and simple.

Incentivized

In more than a year using the IBM Cloud Continuous Delivery tool, I haven't had any major complaints or problems. However, in the last month, IBM suffered from a couple of problems through several of its services, and for a short period of time, I couldn't deploy successfully my projects. The problem was brief and was quickly fixed.

Incentivized

I've evaluated quite a few other tools, like git-secrets, Git-leaks, scan, and maybe a few more. They're all great but quite surprisingly none of them detected Github OAuth Secrets for us. A lot of the FOSS tools out there focus on much simpler, generic secrets, which is good in itself but with GitGuardian, it was dead simple from day one. I just connected our Github Account and set up the gg-shield cli and that was all.

Incentivized

We chose IBM Cloud Developer Tools for multiple reasons. Cost, current infrastructure vendor list, and Cloud Operations team experience were key driving factors for us. Palo Alto's Prisma Cloud product was slick for sure but we found it more difficult to deploy and integrate with our current environment and applications

Incentivized

• GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
• We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
• No more.

• This has made the configuration files much easier to access.
• Has made the commands more logical as well as easy for use and learning.
• Contains great AI capabilities
• The documentation needs improvement.
• Error received from commands are pretty hard to understand.

Incentivized