Gigamon Deep Observability Pipeline and GitGuardian Platform compete in the tech security and monitoring space. GitGuardian seems to have an advantage due to its superior value in code security and secret management, though Gigamon offers robust network visibility.
Features: Gigamon offers network intelligence, traffic monitoring, and enhanced data analytics, providing deep network visibility. GitGuardian focuses on efficient sensitive data exposure scanning and compliance management, with strong capabilities in managing code-level security risks.
Room for Improvement: Gigamon could enhance its intelligence in traffic flow analysis and reduce setup complexity. It may also benefit from lower setup costs and better integration with modern development tools. GitGuardian could improve by reducing false positives further, offering more granular control over exclusions, and enhancing detection speed for large repositories.
Ease of Deployment and Customer Service: Gigamon provides integration with existing infrastructures, supported by strong customer service for network-focused enterprises. GitGuardian, using a SaaS model, integrates easily into CI/CD workflows, offering quick setup and efficient support, making it a preferred choice for development teams.
Pricing and ROI: Gigamon's initial hardware and infrastructure costs offer long-term ROI through improved network performance and security. GitGuardian's SaaS pricing results in lower initial costs, with immediate risk reduction and productivity benefits, appealing to agile environments through rapid ROI.
The majority of our incidents for critical detectors and important secret types are remediated automatically or proactively by developers through GitGuardian's notification system, without security team involvement.
I would rate their technical support a nine out of ten.
In terms of scalability, I would rate it around a ten out of ten, as it handles all the repositories and commit activity we have.
I would rate it a ten out of ten for scalability.
Currently, what GitGuardian Platform is doing works effectively.
We also run a self-hosted cluster which has not experienced these issues, though we've faced some challenges upgrading Kubernetes that required support assistance to prevent internal downtime.
We set up a lot of the repository, so GitGuardian is a required check.
The self-healing activity by developers isn't reflected in the analytics, requiring us to collect this data ourselves.
We are looking for better metrics and audit data, wanting more features such as knowing which users are creating the most secrets or committing the most secrets, what repository, what directory, and who is not checking in secrets.
It would be helpful to see which GitHub users have or do not have the pre-push hook capability turned on.
Overall, the secret detection sector is expensive, but we are happy with the value we get.
It's fairly priced, as it performs a lot of analysis and is a valuable tool.
GitGuardian Platform performs the capability to detect secrets in real time exceptionally, as it activates from the commit and can detect it immediately.
This results in issues being resolved within minutes, saving significant effort from the security team in tracking down or communicating with developers.
One of the best features of the solution is the ability to use pre-push hooks.
Gigamon Deep Observability Pipeline is a comprehensive network visibility solution that provides real-time insights into network traffic. It offers SSL inspection and mobile network monitoring for traffic monitoring purposes. The solution optimizes networks, aids in security inspection, and improves firewall performance. It is praised for its performance, power, straightforward integration, stability, and ease of initial setup.
With Gigamon, organizations can gain complete visibility into their network traffic, identify potential threats, and take proactive measures to prevent them. The solution is ideal for organizations of all sizes, including enterprises, service providers, and government agencies.
GitGuardian helps organizations detect and fix vulnerabilities in source code at every step of the software development lifecycle. With GitGuardian’s policy engine, security teams can monitor and enforce rules across their VCS, DevOps tools, and infrastructure-as-code configurations.
Widely adopted by developer communities, GitGuardian is used by more than 500,000 developers and is the #1 app in the security category on the GitHub Marketplace. GitGuardian is also trusted by leading companies, including Instacart, Genesys, Orange, Iress, Beyond Identity, NOW: Pensions, and Stedi.
GitGuardian Platform includes automated secrets detection and remediation. By reducing the risks of secrets exposure across the SDLC, GitGuardian helps software-driven organizations strengthen their security posture and comply with frameworks and standards.
Its detection engine is trained against more than a billion public GitHub commits every year, and it covers 350+ types of secrets such as API keys, database connection strings, private keys, certificates, and more.
GitGuardian brings security and development teams together with automated remediation playbooks and collaboration features to resolve incidents fast and in full. By pulling developers closer to the remediation process, organizations can achieve higher incident closing rates and shorter fix times.
The platform integrates across the DevOps toolchain, including native support for continuously scanning VCS platforms like GitHub, Gitlab, Azure DevOps and Bitbucket or CI/CD tools like Jenkins, CircleCI, Travis CI, GitLab pipelines, and many more. It also integrates with ticketing and messaging systems like Splunk, PagerDuty, Jira and Slack to support teams with their incident remediation workflows. GitGuardian is offered as a SaaS platform but can also be hosted on-premise for organizations operating in highly regulated industries or with strict data privacy requirements.
We monitor all Data Loss Prevention (DLP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
