GitGuardian is an end-to-end NHI security platform designed to help organizations strengthen their Non-Human Identity (NHI) security posture and address compliance standards and regulations. As attackers increasingly target NHIs, such as service accounts, service principals, and applications, protecting and managing these critical assets has become paramount. NHIs rely on “secrets” like API keys and certificates for authentication, and their rapid proliferation has led to significant…
$0
(for individuals or up to 25 devs)
Sisense
Score6.9 out of 10
N/A
Sisense is a BI software and analytics platform. With what the vendor calls their In-Chip™ and Single Stack™ technologies, users have access to a comprehensive tool to analyze and visualize large, disparate data sets without IT resources.
I do think it'll absolutely fit everyone who codes integrates with another platform or services. We all forget that one credentials one in a while, and especially those who managed public repository, it is important to keep an eye on accidentally committed credentials. While I think you don't really needs it for personal project, it's a nice to have, you don't want to waie up to 50k USD of sudden surcharge on resources you don't use.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I believe Sisense is perfectly suited for any organization of any size that have access to the proper resources, as the tool is very expensive. The data connectors come in all shapes and sizes out of the box, which allows a great deal of data control within the ElastiCubes. Additionally, while the platform only runs on Windows platforms, the web application can be accessed on any client: mobile, Apple, Windows, etc. This allows a much more flexible user experience, resulting in data and dashboards reaching further than any other tool.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Improved user interface: It would be beneficial to have a more intuitive and user-friendly interface for Internal Monitoring on GitGuardian. This would make it easier for users to quickly access the data they need and understand the results of their scans.
Automated alerts: It would be helpful to have automated alerts when certain conditions are met, such as when a scan reveals sensitive data or when a new repository is created. This would help users stay informed and take action in a timely manner.
More detailed reports: Currently, Internal Monitoring reports are limited in terms of the depth of information they provide. It would be useful to have more detailed reports that include additional metrics, such as the number of repositories scanned and the types of sensitive data found.
Faster scan times: Scan times can be slow at times, making it difficult to stay on top of changes in repositories quickly. It would be beneficial to have faster scan times so that users can take action quickly when needed.
The usability of the application on mobile devices needs some improvement, especially navigation and filtering.
Dashboards that are created by multiple users can be a bit of a hassle to share by Admins.
If you need to embed dashboards into your website, you are require to buy a license separate from the user and platform license. This is a norm on most BI visualization tools, but Sisense can seem a bit on the high side, cost-wide.
I think the business and myself as a user has come to rely on SiSense as a dashboarding and quick ad-hoc reporting tool. I am hoping to integrate SiSense dashboards into more parts of the business in the future. We have reduced our report turn-around time for the most part from hours/days to minutes and in some cases almost the speed of thought. Reports are also easier on the eye and more easily distributed. I would also like to say that the support and professionalism from the SiSense team has been excellent.
New V5 is ground floor of an exciting collection of possibilities. Weekly Sisense developers come up with new functionality that they share with us in their forums. The move to HTML5 has been pleasing in that widgets auto size themselves into appropriate forms in the board but everyone of them can be popped out to full page size to be looked at in more detail
There are very few situations when there is unexpected downtime. Mostly during development, new dashboard implementation and during upgrades. other then that there were very few crashes.
SiSense is usually performing better then other solutions even if going for complex reports/dashboards(of course within reasonable frames). I haven't noticed any bad influence on other systems, usually if something happens it stays within SiSense.
SiSense's support ninjas are very knowledgeable and are exceptionally responsive. So far, all of the issues we ran into were resolved within minimum time. My sense of dealing with the support staff at SiSense is that they are very focused on not just answering your immediate question, but also to delve into the cause of the matter.
Easy and free training that allowed us quickly understand basics in SiSense and start using them. More advanced features requires some browsing through SiSense forums, but there is always support to help, and SiSense support is one of the best whith which I worked so far.
Many examples, videos and scenarios which you try on your own right away. This combined with in-person training gives you enough to utilize most of SiSense's power.
I've evaluated quite a few other tools, like git-secrets, Git-leaks, scan, and maybe a few more. They're all great but quite surprisingly none of them detected Github OAuth Secrets for us. A lot of the FOSS tools out there focus on much simpler, generic secrets, which is good in itself but with GitGuardian, it was dead simple from day one. I just connected our Github Account and set up the gg-shield cli and that was all.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
1) Easy to use, really, there is nothing too much to say. The set up is easy and not confusing. You can use it internally or externally.
2) Customer Service, having spoken to various product reps from similar industry. Sisense rep provides you with the best support to get started, and it is really appreciated.
GitGuardian Internal Monitoring has had a positive impact on our overall business objectives. By providing visibility into our code repositories and alerting us to potential security risks, we have been able to identify and mitigate security issues before they become a problem. This has allowed us to focus more on developing our product and less on responding to security incidents. We have also seen an increase in customer confidence in our product as a result of using GitGuardian Internal Monitoring, which has led to increased customer loyalty and retention. Overall, the ROI of using GitGuardian Internal Monitoring has been very positive for our business.
We have seen an increase in the security of our codebase, as well as an improvement in the speed and accuracy of our code reviews. This has enabled us to quickly identify and address any potential security issues before they become a problem. Additionally, we have seen an increase in our ROI as a result of using GitGuardian Internal Monitoring, as it has allowed us to save time and money by preventing costly security breaches.
