GitGuardian vs. RMail

I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.

Incentivized

RMail is great for sending emails with information that is sensitive but that the recipient is not going to put a lot of work into retrieving. I do psychological evaluations for criminal courts and I use it to send reports to courts and attorneys. I need to use something compatible with HIPAA privacy rules, which courts and attorneys are typically not as concerned about. If they had to use a password or go to an outside web address to retrieve the email, they wouldn't do it. It's also common for an attorney to say they didn't get an email, but I always know if they did or not, and I have clear documentation of it, which is important in legal cases.

• GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
• It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
• It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
• GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping

• Read receipts tell you the time a message was actually opened
• The electronic signature feature is nice, and usually not included with these types of services
• Many times, a recipient doesn't need a password to open their email. RMail leverages TLS technology in most cases
• Recipients do have the option of creating an account, but generally they don't need to
• Outlook integration is very easy to set up
• Gmail integration within Chrome is pretty amazing

• Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
• Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
• More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
• Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.

• Program plug-in crashes on occasion.
• Issues can arise if your computer's clock is not synced to RMail's time servers.
• Setup was initially tedious (but has gotten much better since 2019).

Incentivized

I don't think RPost has any competition, at least none that I can use. I think that once registered email becomes widely accepted (someday soon?), it will be indispensable for anyone in business, and RPost is the leading vendor (maybe the only vendor).

It is as simple as downloading a plug-in or installing a chrome extension, then you click a button to use it. The interface is straightforward.

Works well routinely without problems.

Support is easy to access via email or phone. They also reach out to you periodically with new features, but they aren't intrusive about it. I usually appreciate it when I get an email from RMail, which is not very often.

Works great.

I've evaluated quite a few other tools, like git-secrets, Git-leaks, scan, and maybe a few more. They're all great but quite surprisingly none of them detected Github OAuth Secrets for us. A lot of the FOSS tools out there focus on much simpler, generic secrets, which is good in itself but with GitGuardian, it was dead simple from day one. I just connected our Github Account and set up the gg-shield cli and that was all.

Incentivized

RMail is really useful when wanting to send important encrypted information, and have control of what happens on the other end. It also comes with a complete set of features that help in any other way you can imagine. I've been through other products, and nothing compares to it.

• GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
• We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
• No more.

• There's not much ROI, because we don't get it much cheaper than the list price.
• However, being able to offer this service strengthens our service offerings.