Skip to main content
TrustRadius
GitGuardian Public Monitoring

GitGuardian Public Monitoring

Overview

What is GitGuardian Public Monitoring?

GitGuardian Public Monitoring allows real-time GitHub scanning and alerting to uncover sensitive company information hiding in online repositories. It monitors both organization repositories and developers' personal repositories. The solution gives visibility to developers and security teams on this very critical…

Read more

Learn from top reviewers

Best code security management and alerting tool

Rating: 9 out of 10
March 28, 2024
IncentivizedVetted ReviewVerified User
We use it to detect leakage of sensitive information, API keys, credentials and other secrets, preventing data leaks and unauthorised access. Real time monitoring and instant ...
Continue reading
Verified user
Engineer
GitGuardian Public Monitoring2 years of experience

Reliable Solution for Secrets Detection

Rating: 9 out of 10
February 17, 2024
Vetted ReviewVerified User
GitGuardian helps us to protect our code from leaking any sensitive information like passwords, API keys, tokens or accidental push of .env files. These are called secrets and...
Continue reading
Ashish Singh
Team Lead - Engineering
Full stack web developer
Fitsheet
GitGuardian Public Monitoring2 years of experience

Low false-positives and immediate value

Rating: 10 out of 10
January 11, 2022
IncentivizedVetted ReviewVerified User
GitGuardian helps us address the problem of credentials being committed to our code repositories. Whether it's accidentally not excluding an environment file or not realizing ...
Continue reading
C.J. May
Analyst - Information Technology
IT Security Analyst II
Vermeer Corporation
GitGuardian Public Monitoring1 year of experience
Log in with LinkedIn to see content from your network

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing
GitGuardian Public Monitoring

GitGuardian Public Monitoring

N/A
Unavailable

What is GitGuardian Public Monitoring?

GitGuardian Public Monitoring allows real-time GitHub scanning and alerting to uncover sensitive company information hiding in online repositories. It monitors both organization repositories and developers' personal repositories. The solution gives visibility to developers and…

Entry-level set up fee?

  • No setup fee
For the latest information on pricing, visithttps://www.gitguardian.com/pricing

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

Alternatives Pricing

Rapid7 InsightVM

Rapid7 InsightVM

$19
per GB
What is Rapid7 InsightVM?

InsightVM is presented as the next evolution of Nexpose, by Rapid7. This Insight cloud-based solution features everything included in Nexpose, such as Adaptive Security and the proprietary Real Risk score, and extends visibility into cloud and containerized infrastructure. InsightVM also offers…

CrowdStrike Falcon

CrowdStrike Falcon

$6.99
per endpoint/month (for 5-250 endpoints, billed annually)
What is CrowdStrike Falcon?

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no…

Return to navigation

Product Demos

GitGuardian Public Monitoring demo – protect your attack surface on GitHub

YouTube
Return to navigation

Product Details

What is GitGuardian Public Monitoring?

GitGuardian Public Monitoring allows real-time GitHub scanning and alerting to uncover sensitive company information hiding in online repositories. It monitors both organization repositories and developers' personal repositories. The solution gives visibility to developers and security teams on this very critical blindspot that are the organization developers' personal repositories on GitHub (80% of leaked corporate secrets on public GitHub come from developers’ personal repositories).

GitGuardian Public Monitoring can be used by companies with large development teams (above 200 developers) and modern development practices.

GitGuardian Public Monitoring cover 250+ API providers, database connection strings, private keys, certificates, usernames and passwords and intellectual property. It uses pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials). The algorithm boasts precision, 91% “true positive” feedback following alerts, as reported by users, according to the vendor.

The alerting is done in real-time (a few seconds after the secret was publicly exposed) to enable fast remediation involving in a collaborative way developers, security teams and operations.


GitGuardian Public Monitoring Features

  • Supported: Real-time GitHub scanning for organization's repos and Developers's personal repos
  • Supported: Perimeter Definition and Management
  • Supported: Collaboration dashboard

GitGuardian Public Monitoring Screenshots

Screenshot of GitGuardian Public Monitoring - Secrets details viewScreenshot of GitGuardian Public Monitoring - Activity viewScreenshot of GitGuardian Public Monitoring - Perimeter Settings

GitGuardian Public Monitoring Integrations

GitGuardian Public Monitoring Competitors

GitGuardian Public Monitoring Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported LanguagesEnglish
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(3)

Reviews

(1-3 of 3)
Companies can't remove reviews or game the system. Here's why

Best code security management and alerting tool

Rating: 9 out of 10
Incentivized
March 28, 2024
Verified User
Vetted Review
Verified User
GitGuardian Public Monitoring
2 years of experience
Use Cases and Deployment Scope
We use it to detect leakage of sensitive information, API keys, credentials and other secrets, preventing data leaks and unauthorised access.<br>Real time monitoring and instant alerts enable us to quickly identify and address security issues as they arise.<br>It works with existing work flows and we can also customise policies and rules to match some filters
Pros and Cons
  • Security Coverage
  • Monitoring and Alerts
  • Integration with Version Control
Likelihood to Recommend
GitGuardian is well suited to prevent data leaks and alert users about their exposed secrets.
It enhances security by monitoring repositories in real time and mitigation potential security risks.
GitGuardian's monitoring and alerting capabilities are the best out there.
It integrates easily with version control systems and users don't need to go extra mile to set it up since it's very easy to use.
GitGuardian Public Monitoring Feature Ratings
Vulnerability Management Tools (5)
80%
8.0
IT Asset Realization
80%
8.0
Authentication
70%
7.0
Configuration Monitoring
80%
8.0
Web Scanning
80%
8.0
Vulnerability Intelligence
90%
9.0
Threat Intelligence (7)
77.14285714285714%
7.7
Network Analytics
80%
8.0
Vulnerability Classification
80%
8.0
Automated Alerts and Reporting
70%
7.0
Threat Analysis
70%
7.0
Threat Intelligence Reporting
80%
8.0
Automated Threat Identification
80%
8.0
Threat Recognition
80%
8.0
Return on Investment
  • It has mitigated some potential security risks
  • Saving us on cybersecurity cost

Reliable Solution for Secrets Detection

Rating: 9 out of 10
February 17, 2024
AS
Ashish Singh
Full stack web developer
Fitsheet (Apparel & Fashion, 11-50 employees)
Vetted Review
Verified User
GitGuardian Public Monitoring
2 years of experience
View profile
Use Cases and Deployment Scope
GitGuardian helps us to protect our code from leaking any sensitive information like passwords, API keys, tokens or accidental push of .env files. These are called secrets and they can be very dangerous if they fall into the wrong hands. Hackers can use them to access our data, servers, or accounts and cause a lot of damage.We use GitGuardian Public Monitoring to scan our code repositories and alert us if it finds any secrets that should not be there. It also integrates with our development tools like GitHub, GitLab, or Bitbucket, so we can easily fix any issues before they become a problem. We also customize the rules and policies to suit our needs and preferences. And trust me guys GitGuardian sometimes make us lazy 😁 coz we know that any accidental push of secret will be handled by GitGuardian.
Pros and Cons
  • GitGuardian monitors every public or private GitHub commit ( that have GitGuardian installed) and event in real-time for secrets and sensitive data. In a leak scenario it immediately notifies us.
  • It uses sophisticated pattern matching techniques to detect credentials that cannot be strictly defined with a distinctive pattern (like unprefixed credentials)
  • It covers several API providers, database connection strings, private keys, certificates, usernames and passwords etc
  • GitGuardian have high True Positive Rate of around 91% and reduces alert fatigue with smart occurrences regrouping
Likelihood to Recommend
If we are working on serious projects like an organization or company than GitGuardian is a must to use thing according me 🥰. Developers who use GitHub for their personal or open source projects. You want to make sure that anyone do not accidentally expose any secrets or sensitive data related to your company on their public repositories. GitGuardian Public Monitoring can help you monitor both your organization repositories and your developers’ personal repositories on GitHub and alert you if it finds any secrets that should not be there.

IF working in a very complex or customized code base or secrets detection needs. GitGuardian Public Monitoring may not be able to detect some secrets that are not covered by its predefined rules or policies. You may need to use another tool or service that allows you to create your own rules or policies for secrets detection.
GitGuardian Public Monitoring Feature Ratings
Vulnerability Management Tools (5)
90%
9.0
IT Asset Realization
80%
8.0
Authentication
100%
10.0
Configuration Monitoring
90%
9.0
Web Scanning
80%
8.0
Vulnerability Intelligence
100%
10.0
Threat Intelligence (7)
90%
9.0
Network Analytics
100%
10.0
Vulnerability Classification
90%
9.0
Automated Alerts and Reporting
80%
8.0
Threat Analysis
80%
8.0
Threat Intelligence Reporting
80%
8.0
Automated Threat Identification
100%
10.0
Threat Recognition
100%
10.0
Return on Investment
  • Can't provide exact numbers due to restrictions but trust me our organization saved a decent amount of money coz there were several instances of secret leaks that is notified by GitGuardian.
  • GitGuardian has helped us identify and remediate secrets leaks in our public GitHub repositories. It has also helped us enforce our internal security policies and educate our developers on the best practices for secrets management
  • GitGuardian has been a great addition to our security toolset. It has helped us monitor our public GitHub repositories for any secrets or sensitive data. It has also integrated well with our existing systems and processes.
Alternatives Considered
GitGuardian Public Monitoring stacks up well against its alternatives and competitors, as it offers some unique and advanced features that make it stand out from the rest. some of these features
include:-
GitGuardian Public Monitoring stacks up well against its alternatives and competitors.

GitGuardian Public Monitoring stacks up well against its alternatives and competitors.

It integrates with my favorite SIEMs and ITSMs and enables developer-driven incident response1. This gives me the most convenient and efficient way to manage and remediate my secrets and sensitive data leaks on public GitHub
Other Software Used

Low false-positives and immediate value

Rating: 10 out of 10
Incentivized
January 11, 2022
CM
C.J. May
IT Security Analyst II
Vermeer Corporation (Machinery, 5001-10,000 employees)
Vetted Review
Verified User
GitGuardian Public Monitoring
1 year of experience
View profile
Use Cases and Deployment Scope
GitGuardian helps us address the problem of credentials being committed to our code repositories. Whether it's accidentally not excluding an environment file or not realizing the severity of hard-coding secrets, GitGuardian has been there to help us identify leaked secrets as soon as it happens. I have tried other tools in the past, but GitGuardian seems to be the most effective in terms of low false positives and low false negatives.
Pros and Cons
  • Breadth of coverage for different types of secrets.
  • Low false positives.
  • Low false negatives.
Likelihood to Recommend
GitGuardian public monitoring should be set up in all public repositories. It's free for open-source repositories, so it's a no-brainer to use it. The private offering is the same, but it protects your private repositories as well. Even though the private code isn't open source and readable by everyone, hard-coded credentials may still leak depending on the application type and configuration.
Most Important Features
  • Secret detection.
  • Timely alerts.
  • GitHub integration.
Return on Investment
  • Risk reduction.
  • Achieving zero hard-coded credentials.
Alternatives Considered
GitGuardian has more secret type definitions than any similar offering, yet it has an extremely low false-positive rate and won't waste your time.
Other Software Used
Return to navigation