GitGuardian
Secrets and non-human identity security platform; #1 app on GitHub Marketplace with a $50M Series C in 2026.
About
GitGuardian is a secrets detection and non-human identity (NHI) security platform, and the #1 app on the GitHub Marketplace. Its ggshield CLI (MIT licensed) and SaaS platform scan code for leaked API keys, credentials, and secrets with live validity checking, blocking leaks at push time and across history. The free tier covers teams up to 25 developers.
In February 2026 it raised a $50M Series C led by Insight Partners (with Quadrille Capital and existing investors Balderton, Eurazeo, Fly Ventures, and Sapphire Ventures) to expand from secrets detection into full NHI lifecycle governance, explicitly targeting the security gap around AI agents, each of which requires secure credentials. The company's pitch: organizations that once managed hundreds of service accounts will soon manage thousands of autonomous AI agents, and human-identity tooling doesn't cover them. Coverage for private repos requires sending code to GitGuardian's API, which some SOC 2 vendor reviews flag.
What it can do
- Secrets detection with live validity checking across history
- ggshield CLI for pre-commit and CI scanning (MIT licensed)
- Push protection blocking leaks before they land
- Non-human identity lifecycle governance for AI agents
- Dashboards, Slack alerts, and audit trails for security teams
Setup
Install ggshield via pip and run ggshield auth login, or install the GitGuardian GitHub app for push protection and CI scanning.
Prerequisites
Git repositories; GitHub Marketplace access for the hosted app.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 75; Trending score 84/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.