GitGuardian Reviews

Summary: Overall, GitGuardian has helped my fix my security mistakes more than once, also showing me historical data about past leaks.

Positive: When dealing with secrets inside your code (like API keys), it's easy to overlook something and push a secret to your version control system. For any such case, GitGuardian immediately sends a notification alerting of the error. Not only that, but inside their dashboard you can see past leaks data, details about specific leaks and mark it as solved, not solved, or other different states.

Negative: No glaring Cons using this product. Overall a good experience.

Summary: My overall experience with GitGuardian has been incredibly positive. The team is supportive and attentive to user feedback and suggestions. The product itself is extremely easy to use, and offers a comprehensive suite of security features to help users protect their source code. Additionally, their customer support and technical support teams have been responsive and knowledgeable, allowing us to quickly address any issues we have encountered. All in all, GitGuardian has been an invaluable asset for our software development team. 💖

Positive: • Automates the process of monitoring for sensitive data in your code repositories, allowing you to react quickly when a breach is detected.
• Alerts you when suspicious activity or commits containing sensitive data are made, so that you can take necessary steps to prevent a breach.
• Easily integrates with popular Git services such as GitHub and Bitbucket to continuously monitor for sensitive files.
• Comprehensive incident response capabilities, such as providing detailed reports on potential security issues, helping you to address them quickly and proactively.
• Easy to use and cost-effective, making it suitable for all businesses regardless of their size.

Negative: - Can be expensive for large organizations with many repositories
- Some false positives can occur due to false matches or spelling mistakes
- It requires a certain level of technical skill to understand the reports and optimize scanning services

Summary: I did my first proof of concept implementation in my own dotfiles, where it can be quite easy to forget that there is (I mean was) a secret key in a particular file of your very public repository. And that's how you end up with an AWS account full of p3dn.24xlarge instances that are all crypto-mining some dumb altcoin. No, this did not happen to me, but that's always been my fear with AWS credentials.

Positive: GitGuardian provides seamless integration with existing workflows by utilizing pre-commit and GitHub Actions. Installation and adoption can be performed in minutes across multiple repos if you use shared configurations in GitHub Actions and pre-commit.

Negative: I haven't really found anything that I do not like about GitGuardian.

Summary: At Graasp, GitGuardian has really helped us implement a number of best practices with respect to what you commit and how you deal with the situation when things leak. Because everything we do is open source and accessible, GitGuardian is a must have!

Positive: GitGuardian gives you the peace of mind you need to ensure that whatever you are committing to your repository is safe to share with your team members and with the public in general.

Negative: Sometimes you get a false positive, which can really stress out the team unnecessarily. Nevertheless, it's better to be safe than sorry!

Summary: It was an amazing experience because it helps to improve my code quality and teach me how to work with credentials.

Positive: I like the security feature where GitGuardian can notify the developer using confidential credentials which helps to not leak the credentials and the developer can set whether credentials are testing or not, that's also what I liked. Apart from that I also liked the UI and analytics features as well integrations.

Negative: To be honest I think UI can be smoother and user-friendly.

Summary: Usually not happy to be spammed by emails but this one was an exception, i received a clean email from GitGuardian which helps me making my repo more safe. Thanks GitGuardian team.

Positive: Very deep repo scan (even in history of commit).
No false negatives.
Provides advise to fix leaks.
Get to your repo leaks in one click from email.
Sweet user interface and experience.
No bugs encountered.

Negative: I don't see any cons for my usage of this product, it does what it promises and in a very efficient manner.

Summary: It was quite shocking to see complete code security review within seconds. I am happy that I found such a tool.

Positive: GitGuardian has instantly informed me of an insecure file upload within seconds even with minute details regarding the file and line where the secret has been placed.

Negative: I haven't faced any cons yet. I don't think there will ever be any cons.

Summary: So far, I’ve had a really good experience with this service and it has really helped me in securing my public repos.

Positive: I’m instantly notified when I push a commit to GitHub and it contains any secrets that I forgot to keep out of the push.

Negative: I can’t automatically remove leaked keys and certificates from the dashboard.

Summary: Good product, need some improvements but overall it is easy to use, intuitive and very fast to identify problems.

Positive: Easy to find security breaches and fix them.
Has a clean interface.
Send direct mails when find a security breach.

Negative: Can show some links to rapid docs for fix the problems.

Summary: It has been a great experience to get notified every time I do something stupid while committing in the repo and put my privacy at risk .. GitGuardian saves me every time.

Positive: This is what I've been looking for so long.
This is the best tool for eliminating security risks from our repo indeed.

Negative: So far there's nothing about the GitGuardian that I didn't like . I find it amazing!

Summary: I have good experience with GitGuardian, it would be great if they can share the CLI as library without any dependency.

Positive: The tool keeps me away from committing credentials in my repository. I recommend this tool to everyone.

Negative: Need a python runtime for the CLI, so it's a bit difficult to have a similar setup for all development member.

Summary: Good experience with these guys so far, with the upcoming ADO integration, GitGuardian will become our number one secret scanning tool. Detection engine and ease of integration puts you at the top of the pile.

Positive: Quick and easy integration into code repository (GitHub) and into CI/CD pipelines using GG-Shield.

UI fresh and easy to navigate.

Negative: Historic scans are great, but it would be good to tag which historic scans have pulled back scans within git history as opposed to an actual branch.

Summary: It makes monitoring of repos and source code easier and effortless. You are prompted by email on steps on how to resolve issues.

Positive: It prompts me quickly of all the leaks in the repos and gives me best practice steps on how to remediate vulnerabilities.

Negative: I have seen anything wrong and i am enjoying the product.

Summary: It's awesome.

Positive: -> Whenever you make a push request it will scan your complete repo if they find any type of password or key they are going to mail you or inform you.

-> From their platform only you can able to assign this issue to any one of your team members its amazing.

Negative: -> I don't think there will any problem I face with this. Everything is perfect.

Summary: I like how simple it is to use GitGuardian, and it's so simple that anyone can take a look at it and understand what is going on. Overall, I believe that GitGuardian has helped protect my code and catches almost everything that could have been an issue.

Positive: Something I really like about GitGuardian is how it automatically sends an email as soon as a leak has been detected and I can check it out immediately. I also like how I can add a severity level to it and add notes to the issue.

Negative: There is nothing I dislike about GitGuardian at the moment.