GitGuardian
GitGuardian is the credential layer security platform for securing the secrets that let code, machines, and AI agents access systems and act as trusted identities. API keys, tokens, passwords, and other secrets carry real access. When they leak, attackers do not need to break in, they can log in. The scale of the problem keeps growing: 28.6 million new secrets were exposed on public GitHub in 2025, a 34% year-over-year increase and the largest jump on record. GitGuardian finds the secrets that matter across an organization's entire secrets surface, inside and outside the perimeter. Internal Secrets Monitoring detects hardcoded credentials across private repositories, CI/CD pipelines, container images, cloud configs, and collaboration tools like Slack, Jira, Confluence, and Google Drive, using 550+ detectors with live validity checks that confirm each secret is active before it hits your queue. Public Secrets Monitoring scans public GitHub (1B+ commits per year) and DockerHub in real time for corporate secrets exposed online. Developer Endpoint Protection extends coverage to the developer machine itself: config files, shell history, MCP configs, and files persisted by AI coding agents like Claude Code, Cursor, and Copilot. AI Hooks add runtime guardrails inside the agents, checking prompts before they are sent. For every secret it finds, GitGuardian reveals context and blast radius. NHI Governance supplies that identity layer, discovering every machine identity across repos, CI/CD, cloud, and collaboration tools, attributing ownership, scoring risk, helping configure rotation policies, and surfacing continuous compliance evidence for PCI-DSS v4.0, NYDFS, DORA, NIS 2, and NIST 800-53. The detection surfaces find what's leaking. The identity layer connects each leak back to who owns it and what it accesses. One closed loop, from a developer's laptop to public GitHub. Honeytokens alert teams the moment an attacker uses a decoy credential. Backed by a $50M Series C raised in February 2026 (Insight Partners, Quadrille Capital) and trusted by 600K+ developers, GitGuardian is the #1 most-installed security app on the GitHub Marketplace. Enterprises including ING, BASF, Datadog, Bouygues Telecom, Euronext, and Orange Business rely on the platform.
Average Rating: 4.8/5.0
Total Reviews: 305
Who Is the Company Behind GitGuardian?
- Seller: GitGuardian
- Company Website:
- Year Founded: 2017
- HQ Location: Paris, Île-de-France
-
LinkedIn® Page: www.linkedin.com
208 employees on LinkedIn®
Who Uses This Product?
- Who Uses This: Software Engineer, Software Developer
- Top Industries: Computer Software, Information Technology and Services
- Company Size: 85% Small, 12% Medium
What Do G2 Reviewers Say About GitGuardian?
AI-generated summary from verified user reviews
Pros
- Users value the instant alert notifications from GitGuardian, enabling quick detection and remediation of sensitive data issues.
- Users value the real-time secret detection of GitGuardian, enhancing security seamlessly within their development workflows.
- Users value the fast and accurate vulnerability detection of GitGuardian, which ensures code safety effortlessly.
- Users value the easy Git integration of GitGuardian, enhancing security without disrupting their coding workflow.
- Users commend GitGuardian for its high accuracy in secret detection, enhancing security without disrupting their workflow.
Cons
- Users experience false positives with GitGuardian, necessitating manual reviews and slowing down the workflow.
- Users find the inefficient notifications overwhelming due to volume, false positives, and cluttered incident navigation.
- Users note the limited customization options in GitGuardian, which can affect alert management and overall configuration.
- Users find the confusing interface complicates navigation and increases manual filtering time for multiple incident alerts.
- Users find the difficulty for beginners in navigating alerts overwhelming, impacting their ability to assess real threats effectively.
What Are Recent G2 Reviews of GitGuardian?
"Fast, Reliable Secret Detection That Fits Seamlessly into Our GitHub Workflow"
Rating: 5.0/5.0 stars
— Meeti D.
"Fast, Detailed Secret Detection That Fits Seamlessly into GitHub Workflows"
Rating: 4.0/5.0 stars
— Disha L.
What Are G2 Users Discussing About GitGuardian?
- What is GitGuardian used for? - 1 comment, 3 upvotes

