Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
GitGuardian Review
What do you like best about the product?
The dashboard, detailed incident information, detector quality, and availability of integrations.
What do you dislike about the product?
Nothing to report for now, but I need more time...
What problems is the product solving and how is that benefiting you?
Mostly incidents with secrets due to the development of products using git.
- Leave a Comment |
- Mark review as helpful
It does exactly what its name suggests
What do you like best about the product?
It shows the vulnerabilities and exposed secrets in your repositories which is really critical as git is one the most overlooked, yet common sources of security breaches.
What do you dislike about the product?
So far, not much. Hopefully as I used it more, it stays the same.
What problems is the product solving and how is that benefiting you?
It reveals the security issues that I had failed to notice, specially dealing with so many branches and commit histories. I also really like the feature showing which developers most likely know about the exposed secrets.
Junior Dev discovers incident exposure
What do you like best about the product?
The augmented pull requests for GitHub save loads of time and energy. The addition of Personal Access Tokens for ggshield cli use is also extremely exciting!
What do you dislike about the product?
In my view, there's nothing to complain about given that access is free.
What problems is the product solving and how is that benefiting you?
As a budding developer breaking into the industry, GG has enabled me to clean up my portfolio.
Recommendations to others considering the product:
You'd be disadvantaging yourself by delaying inquisition into GitGuardian.
GitGuardian: Code Scanner for CICD microservices
What do you like best about the product?
GitGuardian is an excellent tool to scan the code after every commit. It makes sure that developers didn't commit any secret value in the code by mistake. We have integrated it with the CI pipelines, and I must say that interation is very easy. We can monitor all the repo and reports from a single dashboard. ONe of the think which I like is, GitGuardian provides integration with almost all the CI tools and microservices tools.
What do you dislike about the product?
Currently, the features are limited to secrets scan, It's not something to dislike, but I would like to see the features like Docker image scan and IaC scans in the future.
What problems is the product solving and how is that benefiting you?
We generally encountered issues like pushing the tokens and secrets to the git repos. GitGuardian is helping by scanning the repos after every commit. This tool is beneficial for beginner developers and DevOps teams.
Prevent developers from committing secrets
What do you like best about the product?
Ease of use and integration with Github.
Instant alert whenever you mistakenly check a secret into your commits.
You can easily manage (resolve, ignore, etc) all incidents from the GitGuardian dashboard.
Instant alert whenever you mistakenly check a secret into your commits.
You can easily manage (resolve, ignore, etc) all incidents from the GitGuardian dashboard.
What do you dislike about the product?
Since the time I've started using GitGuardian, I can't think of anything feature I dislike.
But I hope GitGuardian adds more features like local integration with IDE/code editors.
But I hope GitGuardian adds more features like local integration with IDE/code editors.
What problems is the product solving and how is that benefiting you?
Improve the development of secure applications with the confidence that GitGuardian will alert you should you mistakenly commit your secret configuration file, secret keys.
Validated secret searching for version control
What do you like best about the product?
GitGuardian is a great service that both finds candidates for secrets in version control and validates them. By validating them, there is a significantly lower risk of false positives, increasing efficiency.
What do you dislike about the product?
For secret validation, the service needs to have an automated method to determine if a secret is usable. Otherwise, the service just relies on pattern matching, which leads to a high false positive rate.
What problems is the product solving and how is that benefiting you?
GitGuardian has allowed us to keep secrets out of version control and have a very low false positive rate when investigating secret-related incidents. This has led to less security secret based incidents.
Recommendations to others considering the product:
Look at other competing services, such as github's offerings
Great Tool for Source Code Scanning
What do you like best about the product?
1. Easy integration with CI tools, VCS, Docker, and monitoring tools
2. Dashboard with almost all the necessary information
3. Free tier options available
2. Dashboard with almost all the necessary information
3. Free tier options available
What do you dislike about the product?
1. Very limited features in the free plan
2. Docker repo scan not available
2. Docker repo scan not available
What problems is the product solving and how is that benefiting you?
I was looking for a source code scanning tool that I can integrate with my Jenkins Pipeline. GitGuardian was perfect for my requirement.
The best ways to maintain security on your repos
What do you like best about the product?
Extremely easy to set up and use, it's like plug and play and helps you safeguard your repo secrets and immediately triggers a notification if it finds any juicy stuff.
What do you dislike about the product?
The dashboard could be a little more better with less of cluttered information, other than that no cons as of yet.
What problems is the product solving and how is that benefiting you?
Maintaining repository secrets can be difficult at times, with GitGuardian its as easy as scanning the repo with the click of a button and all your secrets are revealed
A great tool for monitoring Git repositories for accidental leaks
What do you like best about the product?
The best feature is automatic scanning and alerts right into your mail.
What do you dislike about the product?
Not really much to dislike in this product as it does what its supposed to do very well, the only issue I faced are false positives.
What problems is the product solving and how is that benefiting you?
GitGuardian has been a great tool in identifying leaked secret keys and passwords which were changed or disabled to prevent any further damages.
excellent platform, easy user journey, effective results
What do you like best about the product?
Great user journey from the initiation of an incident to remediation.
Wide range of secret scanning.
Great integration.
Wide range of secret scanning.
Great integration.
What do you dislike about the product?
I didn't dislike anything. Everything was great
What problems is the product solving and how is that benefiting you?
Secrets were committed historically and never knew about
showing 191 - 200