GitGuardian Reviews & Product Details

I like GitGuardian best for its real-time detection of secrets (like API keys and credentials) in both public and private repositories, its easy integration with developer tools and CI/CD pipelines, and its powerful, intuitive dashboard for incident management. The platform groups and prioritizes alerts smartly, minimizing false positives and enabling fast, context-aware remediation. Many reviewers also mention its broad language support, seamless integration with GitHub and GitLab, and automated remediation workflows as standout features. Review collected by and hosted on G2.com.

While GitGuardian is a great tool, there are occasional false positives that require manual review. Setting up custom policies or integrating with certain on-prem pipelines also takes a bit more work. However, these minor issues are outweighed by the overall value the platform provides. Review collected by and hosted on G2.com.

I like the fact GitGuardian automatically checks and find all the secrets or suspicious things in the code and helps developers discovering them. This, although seems little for a non-developer is a very big thing as these secrets can leads to major data loss, security concerns and even loss of business. Review collected by and hosted on G2.com.

Could be a little more powerful to detect all the secrets and also not pose a threat if something is not a secret even if it looks like so. Example env variables should be skipped. Review collected by and hosted on G2.com.

What I like best about GitGuardian is its ability to automatically scan my code for sensitive information, such as API keys, passwords, and access tokens. It’s incredibly reassuring knowing that I’m alerted in real time if any secrets are accidentally committed to my repositories.

The integration with GitHub, GitLab, and Bitbucket is seamless, making it easy to set up and use without any hassle. Plus, the fact that it can scan both public and private repositories adds an extra layer of security, which is essential for any serious project.

Another standout feature is its detailed alerts that give you all the information you need to quickly address any vulnerabilities. It saves me from the stress of manually checking for potential leaks, which would be a huge pain, especially in larger codebases.

Overall, GitGuardian is a fantastic tool for anyone looking to maintain strong security practices while keeping their development process smooth. Highly recommend it! Review collected by and hosted on G2.com.

While GitGuardian is generally a great tool, there are a couple of things that could be improved. For starters, the alert system can sometimes be a bit too sensitive. I’ve received notifications about things that don’t always feel like high risks, which can be a little overwhelming if you’re working on multiple projects at once.

Another downside is that while the free tier is useful, it’s quite limited. If you need more advanced features like deeper scanning, monitoring private repositories, or getting more detailed reports, you have to pay for the premium version. This might be a bit of a stretch for solo developers or smaller teams on a tight budget.

Lastly, sometimes the false positives can get annoying, especially if you're working with a lot of environment-specific variables or certain configurations that GitGuardian flags as secrets when they’re really not. It requires a bit of manual tuning to filter out unnecessary warnings. Review collected by and hosted on G2.com.

I don't know when i enabled this service but I was really impressed on how it caught on to one of my exposed secrets, the notification was a huge help since i nearly had felt scared thinking that I exposed something but it was a fake key, still impressive, better to get it than not Review collected by and hosted on G2.com.

I can't login in mobile to see my error. It would be helpful since I don't carry my laptop around all the time Review collected by and hosted on G2.com.

I really like how GitGuardian automatically detects exposed secrets in my code and integrates smoothly with GitHub. It saves me a lot of time. Review collected by and hosted on G2.com.

Sometimes it can trigger false positives or flag secrets that are already safe, which requires extra review time. Review collected by and hosted on G2.com.

I like how GitaGuardian works seamlessly without requiring to go through a tedious setup process. Review collected by and hosted on G2.com.

I think the dashboard could be improved to have more space Review collected by and hosted on G2.com.

I really like how the notified incidents with keys are handled, and the detail for resolving them, plus the files involved in the leak. Review collected by and hosted on G2.com.

Instead of getting it by email, I'd like to set up a pipeline so that the email only comes through when something goes wrong. Review collected by and hosted on G2.com.

Oh man, since I discover GG like 3 years ago, it has become a MUST-HAVE on all of my repos, I always double-check everything, but still, I'm a human and I can make mistakes… So it is always good to have a (yeah, let's called “Guardian” Lol) Guardian keeping the gates to my endpoints, buckets, etc., safe. Review collected by and hosted on G2.com.

Something it's missing it's a Mobile App Review collected by and hosted on G2.com.

The steps to integrate the GitGuardian with your version control like GitHub is really easy and also we can integrate it in local as well so that at the time of code commit if you have any secrets like API Keys, IAM Keys or PII etc.gets detected by GitGuardian and it doesn't allow you to commit the code until you remove it. This is very helpful feature of GitGuardian in day to day life of any developer or devops person. Review collected by and hosted on G2.com.

There are no cons as such to tell here, it went well so far. Review collected by and hosted on G2.com.

Well the fact that aside from notifying you it tells you the specific location it helps a lot specially with a codebase that uses frameworks it kinda get messy. Since I install gitguardian all my repository is connected into it seamlessly. Review collected by and hosted on G2.com.

None so far but I would guess I don't know if it exist but it would be amazing to make it on click and store or remove the keys directly Review collected by and hosted on G2.com.