About GitGuardian
GitGuardian is a security platform focused on secrets, such as API keys, passwords and tokens that have been left in code. It finds these credentials, shows where they are, and helps teams deal with them.
What it does
The platform scans source code and commit history for credentials that should not be there. For each one it shows where it was found and what the credential might give access to, so teams can judge how urgent it is. It is offered as a hosted service or as a self-hosted install.
Key features
- Finds hardcoded secrets in source code
- Scans commit history for leaked credentials
- Shows what an exposed credential can reach
- Works with GitHub through a marketplace app
- Hosted or self-hosted deployment
Who it's for
GitGuardian suits security teams, developers and platform engineers who manage code repositories and want fewer exposed credentials. Larger organizations with many repositories are a common fit.
Pricing and good to know
The site offers a way to start for free, and it has a pricing page for paid plans. Scanning history can surface old secrets that need rotating, so plan time for that work. Check which code hosts and tools are supported before you roll it out.
Highlights
- Finds hardcoded secrets and credentials in source code
- Scans commit history for leaked credentials
- Shows what an exposed credential can reach
- Works with GitHub through a marketplace app
- Available as hosted or self-hosted
