GitGuardian is a secrets detection platform that scans source code repositories, CI/CD pipelines, Slack workspaces, and Jira for leaked credentials, API keys, and sensitive data across 450+ secret types. The Secret Enricher ML model reduces false positives by validating that detected patterns match the expected format and entropy of real credentials. Secrets Analyzer assesses the actual permission scope of confirmed leaks.
The ggshield pre-commit hook integrates into developer workflows — including Cursor and Claude Code — to catch credentials before they reach the remote repository. Detection is the primary capability; rotation requires a separate tool such as Vault or AWS Secrets Manager.
Free tier: 1 developer, 25 incidents/month. Business and Enterprise tiers add SSO, SAML, SCIM, and audit logs. Compliance: SOC 2 Type II.
