GitGuardian is an end-to-end NHI security platform designed to help organizations strengthen their Non-Human Identity (NHI) security posture and address compliance standards and regulations. As attackers increasingly target NHIs, such as service accounts, service principals, and applications, protecting and managing these critical assets has become paramount. NHIs rely on “secrets” like API keys and certificates for authentication, and their rapid proliferation has led to significant…
$0
(for individuals or up to 25 devs)
Nasuni
Score10 out of 10
N/A
The Nasuni File Data Platform is a cloud-native suite of services offering user productivity, business continuity, data intelligence, cloud choice, and simplified global infrastructure. The platform and its add-on services replace traditional file infrastructure, including network attached storage (NAS), back-up, and DR, with a cloud-scale solution. By consolidating file data in easily expandable cloud object storage from Azure, AWS, Google Cloud, and others, Nasuni aims to become a cloud-native…
I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Well suited if you have a lot of data that doesn't need to be stored and read right away. I think even if you don't have much data, you can still use it for it's intended purpose to great effect, but think of it as the more data you have, the even better it will work. I don't think it would be particularly useful if you already have a slick file restore system in place and you don't need to store your data elsewhere with redundancy.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping
The management console is extremely simple and easy to navigate, making common tasks easy to do.
Our storage appliance is configured to snapshot data several times an hour, making the risk of data loss very low.
Data restores are very intuitive, and take seconds to initiate regardless of whether it is one file or 300GB of data. We have successfully restored many Gigs of data in minutes.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
As I mentioned, the user interface is amazing and straight forward. It's very easy to learn how to configure and restore files. I would like a bit more reporting, especially in terms of live reporting and monitoring. The support is great when you have a question on how to do something, which helps with usability.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Again, it may have a little to do with the size and speed of your own environment, but we've been nothing but pleased with the speed of access of the files - even pulling old files from the cloud storage. Recovery of huge and many data files is a bit slow if you don't have the specs of the filer up to snuff.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I've evaluated quite a few other tools, like git-secrets, Git-leaks, scan, and maybe a few more. They're all great but quite surprisingly none of them detected Github OAuth Secrets for us. A lot of the FOSS tools out there focus on much simpler, generic secrets, which is good in itself but with GitGuardian, it was dead simple from day one. I just connected our Github Account and set up the gg-shield cli and that was all.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The technical support and escalation path for Nasuni is much more reliable and efficient. No getting transferred to various teams. Often times, the person who answers your call is able to resolve your issue. If they cannot, they get the case assigned to the appropriate engineer right away. Time to close has always been very good.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
Dramatically reduced time spent managing our storage platform. Quotas and reporting tools take all the guesswork out of data growth. Updates are easy to deploy. Time freed up can be used for more user-facing activities that we consider more valuable to the organization.
The overall stability of the platform has been very good. We have been running on the same hardware for the past four years without any performance issues.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
