What is GitGuardian?
GitGuardian is a platform that scans code repositories, CI/CD and other sources for exposed secrets such as API keys and credentials, and helps teams remediate them. The docs list a SaaS service (US or EU region) and self-hosting, plus a CLI (ggshield), IDE plugins, an API, a Python SDK and an MCP server.
Who it's for
Development and security teams that want to find leaked secrets in repositories and related tools, from small teams on the free plan to larger organizations on sales-led tiers. The pricing page sells Endpoint Protection and non-human identity (NHI) governance as separate or higher-tier items for security teams.
Pros & cons
Strengths
- The pricing page lists a free Starter plan ($0, no credit card) with unlimited real-time scanning for up to 25 developers.
- The pricing page lists Git repository sources on Starter (GitHub, GitLab, Bitbucket, Azure DevOps); Growth adds CI/CD, container registries and AI agent configs, and Enterprise adds collaboration tools such as ticketing, messaging and documentation.
- Growth is listed with remediation notifiers (Slack, Teams, email, Jira, ServiceNow), SSO (SAML 2.0), SCIM and a choice of US or EU data hosting.
- The docs list AI features: a machine-learning false-positive remover, a 0-100 incident risk score with an explanation, secret enrichment of generic detections, AI-agent analysis of public incidents (beta) and grouping of similar issues. The docs say the list is not exhaustive.
- The AI Management Policy says customer data is not used to train models, secret values are redacted before data goes to an LLM, and requests are processed in the instance's region (EU or US). It also says external LLM calls can be disabled in AI settings or routed through the customer's own cloud.
- Enterprise is listed with self-hosted deployment, unlimited teams, custom RBAC and custom detectors, 12-month audit log retention and 60 GB repo scanning.
Limitations
- Starter is limited to 500 historical scan detections, 10K API calls a month, 1 GB repo scanning, internal secrets monitoring and a 'Limited' ggshield CLI and pre-commit hooks (the page does not say what the limit is); AI risk scoring and false-positive filtering are listed under Growth.
- Teams (Business), Growth and Enterprise prices are not published ('Let's Talk', 'Contact sales', 'Custom'); the page does not say whether billing is annual or monthly, does not state the trial length and does not address refunds or cancellation.
- Seats are counted per developer: internal monitoring and NHI Governance count active contributors with a commit in the last 90 days, and public monitoring counts publicly active developers. Endpoint Protection is a separate add-on priced per endpoint per year with no amount listed; collaboration-tool scanning and Premium Care are Enterprise add-ons.
- The pricing page is inconsistent: the mid tier is called Teams (Business) in the cards and Growth in the detailed section; Teams lists up to 20 teams but Growth up to 10; Enterprise lists unlimited API calls while the FAQ cites a 1M a month default for the business plan; Growth lists limited public monitoring and Enterprise unlimited.
- The AI Management Policy is inconsistent: it names AWS Bedrock, Google Cloud Vertex AI and OpenAI in one place and AWS Bedrock, Gemini and OpenAI in another, and states zero data retention only for AWS Bedrock and OpenAI. It also says anonymized performance data (excluding repository content, source code, company names and PII) may be used to train GitGuardian's own models. The data-retention docs say patches containing detected secrets are stored for display and remediation but do not state a retention period.
Plans and pricing
- Starter: $0. Free, no credit card. Up to 25 developers, unlimited real-time scanning, 500 historical detections, 10K API calls a month, 1 GB repo scanning, internal monitoring of Git repositories, limited CLI and pre-commit hooks.
- Teams (Business): Contact sales. Listed as 'Let's Talk'. Everything in Starter plus up to 20 teams, remediation playbooks and 12 GB repo scanning; Endpoint Protection is an add-on. A 'Start Trial' button is shown; length not stated.
- Growth: Contact sales. Everything in Starter plus internal monitoring across code, CI/CD, containers and custom sources, limited public monitoring, AI risk scoring and false-positive filtering, Slack/Jira/ServiceNow integrations, SSO and SCIM, up to 10 teams, US or EU hosting. May be the same tier as Teams (Business); the page does not explain.
- Enterprise: Custom. Everything in Growth plus unlimited public monitoring, NHI Governance, self-hosted deployment, unlimited teams and API calls, custom RBAC and detectors, 60 GB repo scanning, 12-month audit log, AI remediation copilot and a dedicated support channel.
- Endpoint Protection (add-on): Contact sales. Priced per endpoint per year in two tiers (developer and standard endpoints); no amounts listed. Available as an add-on on Teams, Growth and Enterprise per the pricing page, not on Starter.
Read from the official pricing page this session; only Starter has a published price ($0) and no paid price, currency or billing basis is shown. Trial length, refund and cancellation terms are not stated, and the Teams (Business) and Growth tiers overlap on the page. Confirm on the live pricing page.
Details checked October 2026 against the vendor's own pages. Prices and limits change, so confirm before you buy. Official pricing page ↗
Sources
This profile was compiled from these public pages. We have not run hands-on tests.
GitGuardian — at a glance
GitGuardian is a platform that scans code repositories, CI/CD and other sources for exposed secrets such as API keys and credentials, and helps teams remediate them. The docs list a SaaS service (US or EU region) and self-hosting, plus a CLI (ggshield), IDE plugins, an API, a Python SDK and an MCP server.
Try GitGuardian →