gitguardian

GitGuardian is a credential security platform that finds exposed secrets such as API keys, tokens and passwords in a company's own code and infrastructure, then helps remediate and prevent leaks. It monitors code repositories, CI/CD systems, container registries, Jira, Slack and public GitHub, and detects more than 550 secret types with validity checks. For developers, its command line tool ggshield scans before commit and push, in the IDE and in AI coding tools and sessions. Developer Endpoint Protection extends this to laptops and to the agent skills, plugins and MCP servers developers run. For security teams, agentic prioritization triages incidents, assigns owners automatically and routes them through remediation playbooks with Slack, Jira and ServiceNow integrations. A non human identity governance module inventories service accounts, API keys and AI agents and flags orphaned, over privileged or overdue credentials. A free GitHub security audit is offered. It suits security, application security and engineering teams. The Starter plan is free with no credit card, covering internal secrets monitoring for up to 25 developers, unlimited real time scanning, detection of up to 500 historical findings and 10,000 API calls a month. The Growth and Enterprise plans are quoted through sales. Growth adds public monitoring in limited form, endpoint protection, playbooks, AI risk scoring, SSO and SCIM, up to 10 teams and US or EU hosting. Enterprise adds unlimited public monitoring, governance, self hosting, unlimited teams, custom detectors and audit log retention.