ggshield
ggshield: A broad, developer-focused scanner with a free workspace plan and extensive CI coverage. Ranked #4 of 24 in Secrets Scanning Software by our editors (9.0/10); pricing: Free plan · 30-day trial; best for free multi-platform scanning and developer hooks.
At a glance
- Editor score9.0 / 10
- PricingFree plan · 30-day trial
- Best forFree multi-platform scanning and developer hooks
- Free planYes
- CI/CD scanningYes
- Founded2017 · Paris, France
- Facts checked22 Sep 2026
Where it wins
- Scans more than 600 secret types across code, Docker, and CI/CD
- Supports pre-commit, pre-push, and pre-receive Git hooks
- Works with major CI platforms and Windows, macOS, Linux, and APIs
Where it doesn't
- Teams pricing requires contacting sales
- Starter includes 10,000 API calls per month
- Does not include AI features
Our verdict on ggshield
ggshield is GitGuardian’s open-source command-line application for finding and preventing hardcoded secrets in developer workflows. It scans local files, repositories, commits, CI/CD content, Docker image layers, build arguments, and Dockerfiles. Developers can run it on Windows, macOS, or Linux, while security teams can connect it to APIs, self-hosted deployments, and supported development workflows. It is a strong fit for teams that want developer-facing secrets scanning with Git hooks and CI coverage rather than a standalone web console.
Its main strength is breadth at the scanning layer. ggshield detects more than 600 types of secrets and supports pre-commit, pre-push, and pre-receive hooks, plus pull request scanning and push protection. JSON output, secret ignoring, and detector or path exclusions support automated workflows. Integration coverage includes GitHub Actions, GitLab pipelines, Azure Pipelines, Bitbucket Pipelines, CircleCI, Drone CI, Jenkins CI, and Travis CI. Hooks are also available for Cursor, Claude Code, and Visual Studio Code with GitHub Copilot, extending checks into developer and AI coding-tool workflows.
The Starter plan is always free at $0 per workspace with annual billing, supports up to 25 developers, includes 10,000 API calls per month, and provides unlimited real-time scanning. A 30-day trial is available for the Business plan. Teams pricing requires contacting sales, while Enterprise offers custom pricing, self-hosted deployment, and custom detectors. Starter is well suited to small or growing teams establishing scanning across repositories and pipelines. Teams needing self-hosting or custom detection should consider Enterprise, while organizations specifically seeking AI features should choose a product that provides them.
Your product? Our editors can test ggshield in depth and publish a review, labelled as paid · from $149/mo →
ggshield pricing
All 3 ggshield plans and prices →
ggshield fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Supported VCS | GitHub, GitLab, Bitbucket, Azure DevOps |
| CI/CD scanning | Yes |
| Pre-commit scanning | Yes |
| Pull-request scanning | Yes |
| Push protection | Yes |
| Custom detection rules | Yes |
| Repository limit | Not verified |
| Free trial | 30 days |
| Deployment | Cloud |
| Platforms | Windows, macOS, Linux |
| Compliance & security | SSO/SAML |
| Support | Docs, Community |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 8 integrations: Azure Pipelines, Bitbucket Pipelines, CircleCI, Drone CI, GitHub Actions, GitLab Pipelines … See all → |
| Pricing | Free plan · 30-day trial (source) |
| Website | gitguardian.com |
| Facts checked | 22 Sep 2026 |
ggshield integrations
ggshield lists 8 integrations on its own site.
- Azure Pipelines
- Bitbucket Pipelines
- CircleCI
- Drone CI
- GitHub Actions
- GitLab Pipelines
- Jenkins CI
- Travis CI
See all ggshield integrations →
Alternatives to ggshield
- GitGuardianBroad secrets scanning with developer workflow controls, remediation, and enterprise deployment options.9.3
- TruffleHogDeep secret detection and credential verification for development and security teams.9.2
- KingfisherA broad, free scanner for exposed credentials across code, cloud, containers, and developer platforms.9.1
See all ggshield alternatives →
ggshield vs the competition
- ggshield vs GitGuardian
- ggshield vs TruffleHog
- ggshield vs Kingfisher
- ggshield vs Datadog Secret Scanning
- ggshield vs Vooda AI
- ggshield vs Arnica Secrets Security
Compare ggshield with any tool side by side →
Used ggshield? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used ggshield for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
ggshield is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/ggshield/"><img src="https://www.itechguides.com/best/badge/ggshield.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update