GitGuardian Pros and Cons

The steps to integrate the GitGuardian with your version control like GitHub is really easy and also we can integrate it in local as well so that at the time of code commit if you have any secrets like API Keys, IAM Keys or PII etc.gets detected by GitGuardian and it doesn't allow you to commit the code until you remove it. This is very helpful feature of GitGuardian in day to day life of any developer or devops person. Review collected by and hosted on G2.com.

There are no cons as such to tell here, it went well so far. Review collected by and hosted on G2.com.

GitGuardian is excellent at detecting sensitive information, such as API keys and credentials, in real-time across repositories. It integrates seamlessly with platforms like GitHub and provides timely alerts, which makes securing codebases easy and efficient. The dashboard is intuitive and helps track potential vulnerabilities effectively. Review collected by and hosted on G2.com.

The main downside is that the frequent alerts can sometimes feel overwhelming, especially for large projects with many contributors. More fine-tuned control over alert settings could help reduce noise without compromising security. Review collected by and hosted on G2.com.

Automated scanning of my github repositories. It's quite easy to use and get started. No implementation struggle so it's easy to implement. I've not tried to contact the customer support but I like that it's available. It's easy to integrate as you just login to github to get started. Review collected by and hosted on G2.com.

The cost seems to be quite high. I do understand it's for businesses but it helped me identify a secret key I had left in for my college project. I tend not to use it much as a college student but it's cost does not seem valid to me i.e., low frequency of use. Review collected by and hosted on G2.com.

GitGuardian does a fantastic job at what it’s meant to do—catching secret leaks in your code. I’ve been really impressed with how well it scans my repos and flags potential security issues. It’s definitely something that gives me peace of mind knowing my code is being looked after. Review collected by and hosted on G2.com.

There’s no option to exclude private repos from the scans, which feels a bit overkill for me. My private repos are just for my own projects, not shared with anyone, so I really don’t need them to be scanned. Review collected by and hosted on G2.com.

Suppose we accidentally add any sensitive information e.g. secret keys/passwords to GitHub/GitLab during the file upload. In that case, GitGuardian sends an email indicating the potentially vulnerable secret data so that we can immediately fix it. Review collected by and hosted on G2.com.

I don't find any downsides about GitGuardian as of now. Everything worked well for me as of now. Review collected by and hosted on G2.com.

As a novice, I stumbled upon GitGuardian and utilized it to protect sensitive data, particularly API keys and credentials, from accidental exposure. The tool continuously scans all repositories, including those that are private, in real time, which has been a source of confidence for me. The application is very user-friendly, and alarm bells are raised instantly when any threat is detected. I also appreciate that it does not interrupt my workflow, but rather enhances it by managing to integrate itself within my Git operations so that I devote more time towards coding rather than worrying about managing secrets. Customer support immediately responds with a valid mail about user having lost their confidential information online. This creates ease of implementation for a new member to the github community understanding what to and what not to disclose online. GitGuardian automatically gets active when a potential confidential information is leaked, making it the best among all other security methods. And no matter how many times does somebody repeat a mistake, GitGuardian always has their back which although makes frequency of use more but in the longer run teaches the end user something new each time. Review collected by and hosted on G2.com.

GitGuardian has many great functionalities for its users, but one drawback that I found is that some alerts tend to be over sensitive making them pick harmless things that do not require any action. This may be overwhelming especially for the newbie users, who are not yet clear with what a real threat entails. Furthermore, the usability of the software could be enhanced by making alert navigation as well as management easier. Nonetheless, these aspects are only a small fraction compared to the overall functionality commercialized, overall this creates easy environment for learners to protect their data whatsoever reevaluating confidential stuff. Review collected by and hosted on G2.com.

I love how GitGuardian helps me keep our repositories secure by scanning for exposed secrets and sensitive information. Its advanced monitoring capabilities ensure that any potential vulnerabilities are swiftly detected and addressed. The ease of integration into our existing workflows makes it a seamless addition to our development process. Plus, the real-time alerts and comprehensive reporting give me peace of mind knowing that our code and data are well protected. Overall, GitGuardian is an invaluable tool in maintaining the security and integrity of our projects. Review collected by and hosted on G2.com.

As much as I appreciate GitGuardian's security features, I find the user interface a bit challenging to navigate at times. It could benefit from some streamlining to make the experience more intuitive. Additionally, it would be helpful to have the option to remove commits directly within the platform, rather than having to resort to external tools or commands. Despite these minor inconveniences, GitGuardian remains a crucial asset in safeguarding our repositories. Review collected by and hosted on G2.com.

It's proactive and helpful. Easy to use. Great app. Review collected by and hosted on G2.com.

would it be possible for gitguardian to fix my repo, at my request, to remove secrets from my repo (including commit history in which secrets were inadvertently commited)? Review collected by and hosted on G2.com.

It's very easy to set up and use, it returns informative, detailed, and actionable findings on secrets, enables us to filter irrelevant findings easily, it's two clicks integration with GitHub, have a fairly swift support and quick alerting. Review collected by and hosted on G2.com.

A bit of tinkering is needed to set it up so you don't get delivered false positives, but initial setup is expected, so not sure if it's even a downside. Review collected by and hosted on G2.com.

Beautiful UI, Ease to use, very fast in finding secrets in code repositories, it took less than one minute to receive an email after some commits in a new branch I was working last week =) Review collected by and hosted on G2.com.

It's not a dislike, but I have a sugestion: I haven't studied a lot about gitguardian yet, but I think that it could have an automatic correction tool for hiding the secrets it finds in our repositories. Review collected by and hosted on G2.com.