GitGuardian

GitGuardian is a cybersecurity company specializing in code security, focusing on automated secrets detection and non-human identity (NHI) security. Founded in Paris in November 2017 by Jérémy Thomas and Eric Fourrier, the company originated as a side project while the founders were working as software engineers and data scientists. They discovered a massive scale of secrets sprawl—such as API keys and credentials—by collecting and reviewing public GitHub commits in real-time.

Eric Fourrier, the CEO, holds Master's degrees in Machine Learning and Applied Mathematics and previously worked as a data scientist in the US financial sector before his entrepreneurial ventures. This background in data science and machine learning was foundational to developing GitGuardian's detection engine. The company officially launched in 2018 and has since established offices in Paris, Boston, and New York. GitGuardian has raised a total of $106 million through several funding rounds, including a $12M Series A in 2019, a $44M Series B in 2021, and a $50M Series C in February 2026. Investors include Insight Partners, Balderton Capital, and the co-founders of GitHub and Docker.

The company's platform addresses the risks associated with hardcoded secrets throughout the software development lifecycle (SDLC). Its business model is based on a per-developer seat subscription with tiered plans (Free, Business, and Enterprise) available in both SaaS and self-hosted models for larger clients. GitGuardian serves a wide range of clients, from individual developers to Fortune 500 companies in sectors like technology, finance, and healthcare, with a significant customer base in North America. Notable clients include Snowflake, Orange, ING, and BASF.

GitGuardian's product suite includes: * **Internal Secrets Monitoring:** Scans private code repositories, infrastructure-as-code configurations, and developer collaboration tools like Jira and Slack to find, fix, and prevent hardcoded secrets. * **Public Secrets Monitoring:** Continuously scans public GitHub repositories in real-time to detect corporate secrets leaked in developers' personal or public organizational repositories. This service includes a "Good Samaritan" program that notifies developers of leaks, a key driver of user acquisition. * **ggshield:** A command-line interface (CLI) tool for developers to scan for secrets in their local environment or within CI/CD pipelines, promoting a \"shift left\" security approach. * **Non-Human Identity (NHI) Governance:** A newer offering that provides visibility and control over the lifecycle of non-human identities, such as service accounts and AI agents, by managing the secrets they use for authentication.

The platform supports over 450 types of secrets and integrates with major version control systems like GitHub, GitLab, and Azure DevOps. By unifying incident management and providing automated remediation playbooks, GitGuardian enables security and development teams to collaborate effectively to reduce risk. The company has become the #1 security app on the GitHub Marketplace, protecting over 600,000 developers.

Keywords: code security, secrets detection, DevSecOps, non-human identity security, automated remediation, application security, GitHub security, secrets management, credential scanning, API key security, software supply chain security, infrastructure-as-code security, CI/CD security, policy enforcement, vulnerability detection, cybersecurity platform, developer security tools, secrets sprawl, public repository monitoring, security policy engine