← Back to Discover

GitGuardian

Credential security platform that scans code, CI/CD, chat tools and public GitHub for leaked secrets, helps route and close incidents, and offers a CLI for pre-commit checks.

Code & secrets security
Visit website ↗

What it does

GitGuardian is a platform for finding and handling leaked credentials such as API keys, tokens and machine-identity secrets. It monitors internal sources including code repositories, CI/CD, container registries, Jira and Slack, and it also watches public GitHub. Each detection is enriched with context such as permissions, scope, validity and ownership, then scored by what the site calls agentic prioritization and routed to a developer so incidents can be closed rather than only flagged. A governance area covers non-human identities such as service accounts, API keys, OAuth tokens and AI agents, flagging orphaned, over-privileged and rotation-overdue credentials. For developers, the ggshield command-line tool checks for secrets before commit and push, in the IDE, and around AI coding tools and sessions, with more than 550 secret types supported. Visitors can book a demo, start for free or take an interactive tour.

Capabilities

  • Secrets monitoring across repositories, CI/CD, container registries, Jira, Slack and public GitHub
  • ggshield CLI for pre-commit and pre-push checks, IDE use and AI coding tool sessions
  • Agentic prioritization of incidents with automatic routing to an owner
  • Governance of non-human identities, including orphaned and over-privileged accounts
  • More than 550 secret types detected

When to use it

  • Catching API keys and tokens before they are committed or pushed
  • Working through a backlog of historical leaks across many repositories
  • Tracking service accounts and other machine-identity credentials
  • Watching public GitHub for exposed company secrets