GitGuardian
Secrets detection and non-human identity security
Overview
GitGuardian scans git repositories on GitHub, GitLab, Bitbucket and Azure DevOps, plus CI/CD, containers and collaboration tools, for leaked API keys, tokens and credentials (550+ secret types). It adds AI false-positive filtering, NHI governance and developer-endpoint scanning. Starter is free for up to 25 developers; Growth and Enterprise are quoted.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 12 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- Up to 25 developers
- Unlimited real-time scanning; up to 500 historical detections
- 10K API calls a month; 1 GB repo scanning capacity
- 12 GB repo scanning capacity
- SSO (SAML 2.0) and SCIM, up to 10 teams
- AI risk scoring and false-positive filtering
- US and EU data hosting regions
- 60 GB repo scanning capacity
- Self-hosted deployment and GitGuardian Bridge
- Unlimited teams, custom RBAC, 12-month audit log retention
Use cases
What you can produce with GitGuardian
- Every commit and pull request on GitHub, GitLab, Bitbucket or Azure DevOps scanned in real time for leaked API keys, tokens and credentials
- A repository's full git history audited for secrets committed years ago that are still valid
- Incidents triaged in a central dashboard, assigned to the developer who committed the leak and tracked to closure
- Secrets blocked before they reach a remote, with ggshield pre-commit and pre-push hooks and CI checks
- Public GitHub monitored for your organisation's credentials posted from personal or contractor accounts
- Non-human identities such as service accounts, bot tokens and AI-agent credentials inventoried, with stale or over-privileged secrets flagged
- Reports on secret incidents and mean time to remediation for security audits
GitGuardian is one of the established secrets-detection platforms. It scans repositories, CI and collaboration tools for leaked credentials and has expanded into non-human identity governance and developer-endpoint scanning. Its detection breadth, mature integrations and MIT-licensed ggshield CLI make it a strong default for teams serious about credential hygiene.
Caveats: beyond the free Starter tier, both paid tiers are quote-only. Growth hosting is limited to the US or EU, so ASEAN buyers who need data kept in-country must look at self-hosted Enterprise. It is one part of an AppSec stack, not the whole stack.
What we found
GitGuardian, the Paris-based secrets-security company behind the ggshield command-line tool, raised a $50 million Series C in February 2026 led by Insight Partners, alongside Quadrille Capital and existing backers including Balderton, BPI, Eurazeo and Sapphire Ventures. The company puts its total funding at $106 million. It closed 2025 claiming more than 115,000 developers protected across enterprise customers and 610,000 repositories monitored, with over 80% of new annual recurring revenue coming from North America, where its US affiliate is based in the Boston area.
The core product does one job very well. It scans every push and the full git history across GitHub, GitLab, Bitbucket and Azure DevOps for leaked API keys, tokens and passwords, recognising more than 550 secret types, and checks whether a secret it finds is still valid. ggshield, which is MIT-licensed, blocks secrets at pre-commit and in CI, and now hooks into AI coding tools such as Cursor, Claude Code and Codex. Public Secrets Monitoring watches public GitHub, including employees' personal repositories, for your organisation's credentials.
The platform has widened. NHI Governance, launched in 2025, inventories service accounts, API keys and AI-agent credentials, maps their owners and flags reused or over-privileged secrets. Developer Endpoint Protection, launched in 2026, extends scanning to developer laptops. The Series C money is aimed at AI-agent credentials and at opening new regions, APAC among them.
Starter is free for up to 25 developers, with unlimited real-time scanning, 500 historical detections, 1 GB of repository capacity and 10,000 API calls a month. Growth and Enterprise are both quoted. Growth adds SSO, remediation playbooks and AI false-positive filtering, hosted in the US or EU; Enterprise adds NHI governance and self-hosting. With no Asian hosting region, ASEAN buyers who need data kept in-country are looking at self-hosted Enterprise. GitGuardian fits engineering organisations of any size that want a low-friction guardrail against credential leaks.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
About this listing
This entry was compiled from publicly available data including GitGuardian's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with GitGuardian unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to GitGuardian directly →
Spotted something out of date? Suggest an update →
Related reading
Alternatives to GitGuardian
More in Security & Safety
