Tech riderRev. 29 Sept 2026

ggshield

Ch 027.7of 23 Secrets Scanning Software

1Runs onAPI, Linux, Mac, self-hosted, Windows
2CostsFree plan · free trial
3Supported VCSGitHub, GitLab, Bitbucket, Azure DevOps
4CI/CD scanningYes
5Pre-commit scanningYes
6Pull-request scanningYes
7Push protectionYes
8Custom detection rulesYes

8 lines stated Written from the maker's own pages: gitguardian.com

Visit site Alternatives

Overview

ggshield is ranked #2 of 23 in secrets scanning software on Specifiction. It runs on API, Linux, macOS, Self-hosted, Windows. There is a free plan. A free trial is offered.

ggshield plans and pricing

All plans

Starter Free Always Up to 25 devs · 10K API calls/month · Up to 500 historical scan detections · Unlimited real-time scanning gitguardian.com · 29 Sept 2026

Enterprise Not published Let’s Talk Custom pricing · Unlimited teams, API calls, and custom detectors · Dedicated support channel gitguardian.com · 29 Sept 2026

Business Not published Let’s Talk Pricing not shown · ggshield page says a 30-day free trial is available gitguardian.com · 29 Sept 2026

Compared on secrets scanning software

Free plan: Yesgitguardian.com
Supported VCS: GitHub, GitLab, Bitbucket, Azure DevOpsgitguardian.com
CI/CD scanning: Yesgitguardian.com
Pre-commit scanning: Yesgitguardian.com
Pull-request scanning: Yesgitguardian.com
Push protection: Yesgitguardian.com
Custom detection rules: Yesgitguardian.com

Facts

Purpose: ggshield is GitGuardian’s command-line application for detecting and preventing hardcoded secrets before code is pushed.gitguardian.com · 29 Sept 2026
Detection: The documentation says ggshield detects more than 600 types of secrets.docs.gitguardian.com · 29 Sept 2026
Scanning: ggshield can scan local files and repositories, run as a pre-commit hook, run in CI, and run in a pre-receive hook for self-managed version control instances.docs.gitguardian.com · 29 Sept 2026
Docker: ggshield can scan Docker image layers, build arguments, and Dockerfiles for hardcoded secrets.gitguardian.com · 29 Sept 2026
Open source: The ggshield CLI is open source, while the secrets detection library behind GitGuardian’s public API is closed source.gitguardian.com · 29 Sept 2026
Scan data: For ggshield scans, GitGuardian says it stores metadata such as call time, request size, and scan mode, while scan incidents and secrets are not stored in its backend.gitguardian.com · 29 Sept 2026
Authentication: ggshield requires an API key to authenticate with a GitGuardian workspace, and its login command can provision and store a personal access token.docs.gitguardian.com · 29 Sept 2026
CI integrations: The product page describes CI/CD pipeline use and displays Travis CI and Jenkins logos.gitguardian.com · 29 Sept 2026
Operating systems: ggshield works on macOS, Linux, and Windows; the standard installation requires a supported, non-end-of-life Python version and Git, except when using standalone packages.docs.gitguardian.com · 29 Sept 2026
Scanning limit: Files larger than 1 MB are ignored, and the API accepts at most 20 documents per call, bundling larger scans into multiple calls.docs.gitguardian.com · 29 Sept 2026
Support: GitGuardian directs users to the official GitHub repository to report bugs or request features.gitguardian.com · 29 Sept 2026
Security compliance: GitGuardian says it has maintained SOC 2 Type II compliance since 2022 and undergoes annual audits.gitguardian.com · 29 Sept 2026
Company: GitGuardian says it was founded in Paris in November 2017.gitguardian.com · 29 Sept 2026