GitGuardian is an end-to-end NHI security platform designed to help organizations strengthen their Non-Human Identity (NHI) security posture and address compliance standards and regulations. As attackers increasingly target NHIs, such as service accounts, service principals, and applications, protecting and managing these critical assets has become paramount. NHIs rely on “secrets” like API keys and certificates for authentication, and their rapid proliferation has led to significant…
$0
(for individuals or up to 25 devs)
Riskified
Score9 out of 10
Enterprise companies (1,001+ employees)
Riskified, headquartered in Tel Aviv, helps businesses to realize the potential of eCommerce by making it safe, accessible, and frictionless. Their eponymous platform allows online merchants to create trusted relationships with their consumers. Leveraging machine learning that benefits from a global merchant network, the platform identifies the individual behind each online interaction, helping merchants eliminate risk and uncertainty.
I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Riskified is the perfect tool if your current set up is based in lots of manual review and high chargebacks rate. Once implemented it will inmediately increase the authorization rate as well as decrease the chargeback rate significantly. For a company that needs automated decision on blocking abusers it also makes sense, specially using the Policy protect returns and item limit modules.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping
Collaboration; Riskified builds strong relationships with their clients and works to always meet the clients' needs
Ascend; This is a great way for Riskifieds clients to meet, collaborate and learn from each other
Innovations; Riskified puts a huge emphasis on listening to their clients and finding a way to meet their needs, whether it's chargeback related, fraud screening related or abuse related.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.
Missing functionality/ explanation: not having full understanding why some orders with multiple "red flags" are accepted/approved by Riskified
Missing functionality: It would be great if there was an option to resubmit an order after approving a second look (so that the customer doesn't have to place a second order)
The support I've received isn't always uniform (sometimes the agent will ask me to provide additional information about an order, sometimes they won't. It seems to be random?)
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
We are likely to renew our use of Riskified. Their solution has become a critical component of our fraud prevention strategy and day-to-day operations. The combination of increased approval rates, reduced chargeback risk, and operational efficiency has delivered consistent value. Additionally, their collaborative approach and alignment with our customer experience goals reinforce our confidence in continuing the partnership long term.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It's very easy to use. When an interaction is declined, there's reasoning located on the right side of the screen. It's incredibly easy to use Single-Sign-On to log into the account, and explaining that to new team members is very easy. The process for adding new team members is easy and the FAQ's are very helpful.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The account management is great and very responsive, but as previously mentioned, the company does not seem to be very proactive with spotting exiting integration issues or things that could be wrong from technical point of view. I would like to see Riskified doing more proactive integration monitoring and more regular technical reviews.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I've evaluated quite a few other tools, like git-secrets, Git-leaks, scan, and maybe a few more. They're all great but quite surprisingly none of them detected Github OAuth Secrets for us. A lot of the FOSS tools out there focus on much simpler, generic secrets, which is good in itself but with GitGuardian, it was dead simple from day one. I just connected our Github Account and set up the gg-shield cli and that was all.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I would say that the main difference between Riskified and Signifyd is the level of client service, which drives success in other aspects. We did not have a dedicated account manager with Signifyd, so there was no one to deal with issues. Signifyd's billing is also very messy, and we found that they did not reimburse us for a significant amount of chargebacks. Riskified's billing is easy to reconcile, and we've never had that issue.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
Since implementing and working with Riskified we have seen a steady decrease in our fraud losses on our e-commerce orders. Riskified is able to quickly adjust its models to mitigate new trends
By eliminating the need to "challenge" orders we have been able to save on staffing needed for manual review and we have seen a decrease in callback rates for our fraud reviewed orders.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
