GitGuardian

What differentiates GitGuardian from other similar products?

As a rookie programmer, I frequently make silly git pushes revealing my API key. Sometimes, this small mistake can lead to loads of unwanted billing issues due to the revealed key, or it can get permanently deleted by the owner. GitGuardian comes in handy, as it always alerts me about these mistakes.Hence, I always use it, whenever I am working on any project. Another thing about GitGuardian is that it is very easy to use. Just integrate it with GitHub and it does it starts doing its job. The customer support is great as well.

What is your favorite aspect of this product?

The fact that I receive instant notifications of any API expose through my git commits, and also a severity rating of the expose (Critical, High, Low) is my favorite aspect of using GitGuardian. It allows me to prioritize my tasks and enhances my productivity of using GitGuardian.

What do you dislike most about this product?

Some times the alert emails can be too frequent. For non-critical API reveals , the alert emails' frequency can be reduced.

What recommendations would you give to someone considering this product?

I will definitely recommend GitGuardian to anyone dealing with API tokens/keys and working on public repositories. It can save you from undesirable billing issues stemmed from that innocent mistake of unknowingly making a git push while not hiding the API key. This will save both time and money.

What differentiates GitGuardian from other similar products?

Haven't tried others, I've been using this for 1.5years and am very proud.

What is your favorite aspect of this product?

The fact that I've made mistakes where I've exposed api keys a couple of times, and immidiately got an email by git guardian saying that I've exposed a secret. There is a great UI to work with, where you can say if it's a false positive, if it's resolved, if it's a secret but you want it public etc.

What do you dislike most about this product?

If I am not wrong, git guardian is fulfilling it's purpose. It's supposed to protect me and my secrets. I have no dislikes about it.

What recommendations would you give to someone considering this product?

#1 reason why you would try it, it's gonna happen sometime in the future when you're gonna leak some code and not see it. Then you would regret it. Better safe then sorry.

What differentiates GitGuardian from other similar products?

GitGuardian is a well-known platform in the AST industry with its great features, such as real-time monitoring, a large inventory of specific detectors, workflows for remediation, and false positive repression. It also comes with a secrets analyzer, provides support for scanning various sources, and much more.

What is your favorite aspect of this product?

The Remediation Guidance feature has helped in providing information about the secret, including its location and potential impact. Also, the real-time monitoring feature sends alerts whenever a secret is detected. For me, this is a useful tool that provides efficient services.

What do you dislike most about this product?

Sometimes, false alerts have been observed by the Secret Detection feature, leading to time wastage. These alerts are from environment variables or test credentials that ain't secrets after all.

What recommendations would you give to someone considering this product?

It is a powerful platform for sure, but you must double-check every secret detected to avoid any mishap. Also, maintain a list to avoid repeat alerts on known secrets.