GitGuardian Platform vs Klocwork comparison

GitGuardian and Perforce are both solutions in the Application Security Tools category. GitGuardian is ranked #7 with an average rating of 9.0, while Perforce is ranked #16 with an average rating of 8.4. GitGuardian holds a 0.6% mindshare in AS, compared to Perforce’s 1.4% mindshare. Additionally, 100% of GitGuardian users are willing to recommend the solution, compared to 92% of Perforce users who would recommend it.

GitGuardian Platform

Read 24 GitGuardian Platform reviews

2,303 Views
409 Comparison Views

100% willing to recommend

Klocwork

Read 23 Klocwork reviews

2,613 Views
1,557 Comparison Views

92% willing to recommend

GitGuardian Platform

Klocwork

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Klocwork and GitGuardian Platform are software solutions targeting developers seeking robust code security and analysis tools. GitGuardian Platform appears superior due to its comprehensive feature set.

Features: Klocwork offers static code analysis, integration with development ecosystems, and supportive customer service. GitGuardian Platform detects sensitive data exposure, integrates seamlessly with CI/CD systems, and provides innovative security alerts.

Room for Improvement: Klocwork users suggest better integration flexibility, faster analysis speed, and more comprehensive reports. GitGuardian users desire broader language support, improved detection algorithms, and more refined user interface design.

Ease of Deployment and Customer Service: Klocwork has a straightforward setup process and responsive support. GitGuardian needs more initial configuration but offers proactive client assistance, enabling adaptability in varied deployment scenarios.

Pricing and ROI: Klocwork's competitive pricing benefits smaller teams, while GitGuardian's higher cost is offset by advanced features and detection capabilities, resulting in greater ROI for large-scale deployments.

To learn more, read our detailed GitGuardian Platform vs. Klocwork Report (Updated: April 2025).

Buyer's Guide

GitGuardian Platform vs. Klocwork

April 2025

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

GitGuardian Platform

Ranking in Application Security Tools

7th

Ranking in Static Application Security Testing (SAST)

5th

Average Rating

9.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Data Loss Prevention (DLP) (6th), Software Supply Chain Security (4th), DevSecOps (4th)

Klocwork

Ranking in Application Security Tools

16th

Ranking in Static Application Security Testing (SAST)

13th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Static Code Analysis (5th)

Mindshare comparison

As of May 2025, in the Application Security Tools category, the mindshare of GitGuardian Platform is 0.6%, up from 0.3% compared to the previous year. The mindshare of Klocwork is 1.4%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Joan Ging

Head of Development at Inhabit

It dramatically improved our ability to detect secrets, saved us time, and reduced our mean time to remediation

While they do offer some basic reporting, more comprehensive reporting would be beneficial in the long run. This would allow me to demonstrate the value of the product over time to continue to effectively budget for this subscription, especially as they add features that may come at an additional cost. I appreciate the improvements made to reporting over the past year, but continued development in this area will be appreciated. We have encountered occasional difficulties with the Single Sign-On process. There is room for improvement in its current implementation. It works, but was not quite as smooth as the rest of the GitGuardian experience.

Read full review

AnirbanSarkar

Head - Solution Management Group at Meteonic Innovation Pvt. Ltd.

Lets you find defects during the development phase, so you don't have to wait till the development is over to find and address flaws

What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity. What I'd like added in the next release of Klocwork is the peer code review Cahoots which used to be a part of Klocwork, and the architecture analysis and both have been taken out of Klocwork. I found the two critical for specific deployments, so if those can be brought back to Klocwork, that would be very good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"GitGuardian has also helped us develop a security-minded culture. We're serious about shift left and getting better about code security. I think a lot of people are getting more mindful about what a secret is."

"The most valuable feature is its ability to automate both downloading the repository and generating a Software Bill of Materials directly from it."

"The most valuable feature is the alerts when secrets are leaked and we can look at particular repositories to see if there are any outstanding problems. In addition, the solution's detection capabilities seem very broad. We have no concerns there."

"The entire GitGuardian solution is valuable. The product is doing its job and showing us many things. We get many false positives, but the ability to automatically display potential leaks when developers commit is valuable. The dashboards show you recent and historical commits, and we have a full scan that shows historical leaked secrets."

"GitGuardian has pretty broad detection capabilities. It covers all of the types of secrets that we've been interested in... [Yet] The "detector" concept, which identifies particular categories or types of secrets, allows an organization to tweak and tailor the configuration for things that are specific to its environment. This is highly useful if you're particularly worried about a certain type of secret and it can help focus attention, as part of early remediation efforts."

"The secrets detection and alerting is the most important feature. We get alerted almost immediately after someone commits a secret. It has been very accurate, allowing us to jump on it right away, then figure out if we have something substantial that has been leaked or whether it is something that we don't have to worry about. This general main feature of the app is great."

"The breadth of the solution detection capabilities is pretty good. They have good categories and a lot of different types of secrets... it gives us a great range when it comes to types of secrets, and that's good for us."

"There is quite a lot to like. Its user interface is fantastic, and being able to sort the incidents by whether they are valid or for a certain repository or a certain user has been very beneficial in helping investigate what has been found."

More GitGuardian Platform pros

"I like not having to dig through false positives. Chasing down a false positive can take anywhere from five minutes for a small easy one, then something that is complicated and goes through a whole bunch of different class cases, and it can take up to 45 minutes to an hour to find out if it is a false positive or not."

"It's integrated into our CI, continuous integration."

"The ability to create custom checkers is a plus."

"We like using the static analysis and code refactoring, which are very valuable because of our requirements to meet safety critical levels and reliability."

"The most valuable feature is the Incremental analysis."

"One can increase the number of vendors, so the solution is scalable."

"The best advantage of Klocwork is the reduced setup time."

More Klocwork pros

Cons

"It would be nice if they supported detecting PII or had some kind of data loss prevention feature."

"Other solutions have a live chat feature that provides instant results. Waiting for an agent to reply to an email is less ideal than an instant conversation with a support employee. That's a complaint so minor I almost hesitate to mention it."

"There are some features that are lacking in GitGuardian. The more we grow and the more engineers we have, the more it will become difficult to assign an incident because the assignment is not automatic. I know they are working on that and we are waiting for it."

"GitGuardian could have more detailed information on what software engineers can do. It only provides some highly generic feedback when a secret is detected. They should have outside documentation. We send this to our software engineers, who are still doing the commits. It's the wrong way to work, but they are accustomed to doing it this way. When they go into that ticket, they see a few instructions that might be confusing. If I see a leaked secret committed two years ago, it's not enough to undo that commit. I need to go in there, change all my code to utilize GitHub secrets, and go on AWS to validate my key."

"There is room for improvement in its integration for bug-tracking. It should be more direct. They have invested a lot in user management, but they need to invest in integrations. That is a real lack."

"The main thing for me is the customization for some of the healthcare-specific identifiers that we want to validate. There should be some ability, which is coming in the near future, to have custom identifiers. Being in healthcare, we have pretty specific patterns that we need to match for PHI or PII. Having that would add a little bit extra to it."

"We have encountered occasional difficulties with the Single Sign-On process."

"For some repositories, there are a lot of incidents. For example, one repository says 255 occurrences, so I assume these are 255 alerts and nobody is doing anything about them. These could be false positives. However, I cannot assess it correctly, because I haven't been closing these false positives myself. From the dashboard, I can see that for some of the repositories, there have been a lot of closing of these occurrences, so I would assume there are a lot of false positives. A ballpark estimate would be 60% being false positives. One of the arguments from the developers against this tool is the number of false positives."

More GitGuardian Platform cons

"Every update that we receive requires of us a lengthy and involved process."

"The way to define the rules is too complex. The definition/rules for static analysis could be automated according to various SILs, so as to avoid confusion."

"What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity."

"We'd like to see integration with Agile DevOps and Agile methodologies."

"There are too many warnings, and it requires expertise to determine the correct category for them."

"Modern languages, such as Angular and .NET, should be included as a part of Klocwork. They have recently added Kotlin as a part of their project, but we would like to see more languages in Klocwork. That's the reason we are using Coverity as a backup for some of the other languages."

"We bought Klocwork, but it was limited to one little program, but the program is now sort of failing. So, we have a license for usage on a program that is sort of failing, and we really can't use the license on anything else."

"Klocwork does have a problem with true positives. It only found 30% of true positives in the Juliet test case."

More Klocwork cons

Pricing and Cost Advice

"It's not cheap, but it's not crazy expensive either."

"The pricing for GitGuardian is fair."

"We don't have a huge number of users, but its yearly rate was quite reasonable when compared to other per-seat solutions that we looked at... Having a free plan for a small number of users was really great. If you're a small team, I don't see why you wouldn't want to get started with it."

"We have seen a return on investment. The amount of time that we would have spent manually doing this definitely outpaces the cost of GitGuardian. It is saving us about $35,000 a year, so I would say the ROI is about $20,000 a year."

"The pricing is reasonable. GitGuardian is one of the most recent security tools we've adopted. When it came time to renew it, there was no doubt about it. It is licensed per developer, so it scales nicely with the number of repos that we have. We can create new repositories and break up work. It isn't scaling based on the amount of data it's consuming."

"I am only aware of the base price. I do not know what happened with our purchasing team in discussions with GitGuardian. I was not privy to the overall contract, but in terms of the base MSRP price, I found it reasonable."

"The pricing and licensing are fair. It isn't very expensive and it's good value."

"I compared the solution to a couple of other solutions, and I think it is very competitively priced."

More GitGuardian Platform pricing and cost advice

"Klocwork should not to be quite so heavy handed on the licensing for very specific programs."

"Klocwork is still tight on their licensing. If Klocwork would loosen up on the licensing, and where the license could be used, and how many different programs could be run on it, then we have several development programs that I would love to be able to use it for going forward."

"Licensing fees are paid annually, but they also have a perpetual license."

"There are other solutions on the market such as Microsoft Visual Studio. They have been adding more static code analysis features that come for free. It is getting better all the time. That is one of the possibilities is that we've been considering that we may stop using the Klocwork because it doesn't give us any added value."

"The limitation that we have is that Klocwork is licensed to certain programs, and if you want to license them to other programs, you have to pay more money."

"When it comes to licensing, the solution has two packages, one for a fixed and the other for a floating server, with the former being more cost effective than the latter."

"This solution offers competitive pricing."

"The pricing for Klocwork is very competitive if you compare it from apple to apple. It has competitive pricing regarding the licensing model and the per-license cost. Klocwork isn't a high-end investment for anyone deploying it; even SMBs can afford it. The Klocwork cost per user would depend on the license type, so I'm unable to mention a ballpark figure because it would depend on the type of installation and how the deployment will be, and the nodes to give an accurate calculation or figure. The total price depends on the package, so my company could never publish pricing for Klocwork on the website. My team first collects information from potential clients on the deployment scenario, project environment, etc., before suggesting a package for Klocwork. My rating for Klocwork in terms of pricing is a five because of its flexible license models. There's a license model for every type of organization, whether small, midsize, or enterprise, so it's a five out of five for me."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

22%

Government

13%

Media Company

Financial Services Firm

Educational Organization

32%

Manufacturing Company

21%

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about GitGuardian Internal Monitoring ?

It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...

See all answers

What is your experience regarding pricing and costs for GitGuardian Internal Monitoring ?

The pricing for GitGuardian is fair.

See all answers

What needs improvement with GitGuardian Internal Monitoring ?

We'd like to request a new GitGuardian feature that automates user onboarding and access control for code repositories. Ideally, when a user contributes to a repository, they would be automatically...

See all answers

What do you like most about Klocwork?

It's integrated into our CI, continuous integration.

See all answers

What is your experience regarding pricing and costs for Klocwork?

Klocwork was competitively priced, making it a cost-effective solution for us.

See all answers

What needs improvement with Klocwork?

We would like Klocwork to connect to Git and notify developers of issues tied to specific commits. Currently, this feature is absent, but we have suggested it to the team.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs GitGuardian Platform

Compared 28% of the time

Snyk vs GitGuardian Platform

Compared 17% of the time

GitGuardian Public Monitoring vs GitGuardian Platform

Compared 16% of the time

GitHub Advanced Security vs GitGuardian Platform

Compared 15% of the time

Cycode vs GitGuardian Platform

Compared 9% of the time

More GitGuardian Platform Competitors

SonarQube Server (formerly SonarQube) vs Klocwork

Compared 36% of the time

Coverity vs Klocwork

Compared 30% of the time

Polyspace Code Prover vs Klocwork

Compared 13% of the time

Parasoft SOAtest vs Klocwork

Compared 3% of the time

Fortify Static Code Analyzer vs Klocwork

Compared 3% of the time

More Klocwork Competitors

Product Reports

Buyer's Guide

GitGuardian Platform

April 2025

Download GitGuardian Platform product report

Buyer's Guide

Klocwork

April 2025

Download Klocwork product report

Also Known As

GitGuardian Internal Monitoring

No data available

Overview

GitGuardian helps organizations detect and fix vulnerabilities in source code at every step of the software development lifecycle. With GitGuardian’s policy engine, security teams can monitor and enforce rules across their VCS, DevOps tools, and infrastructure-as-code configurations.

Widely adopted by developer communities, GitGuardian is used by more than 500,000 developers and is the #1 app in the security category on the GitHub Marketplace. GitGuardian is also trusted by leading companies, including Instacart, Genesys, Orange, Iress, Beyond Identity, NOW: Pensions, and Stedi.

GitGuardian Platform includes automated secrets detection and remediation. By reducing the risks of secrets exposure across the SDLC, GitGuardian helps software-driven organizations strengthen their security posture and comply with frameworks and standards.

Its detection engine is trained against more than a billion public GitHub commits every year, and it covers 350+ types of secrets such as API keys, database connection strings, private keys, certificates, and more.

GitGuardian brings security and development teams together with automated remediation playbooks and collaboration features to resolve incidents fast and in full. By pulling developers closer to the remediation process, organizations can achieve higher incident closing rates and shorter fix times.

The platform integrates across the DevOps toolchain, including native support for continuously scanning VCS platforms like GitHub, Gitlab, Azure DevOps and Bitbucket or CI/CD tools like Jenkins, CircleCI, Travis CI, GitLab pipelines, and many more. It also integrates with ticketing and messaging systems like Splunk, PagerDuty, Jira and Slack to support teams with their incident remediation workflows. GitGuardian is offered as a SaaS platform but can also be hosted on-premise for organizations operating in highly regulated industries or with strict data privacy requirements.

GitGuardian

Klocwork detects security, safety, and reliability issues in real-time by using this static code analysis toolkit that works alongside developers, finding issues as early as possible, and integrates with teams, supporting continuous integration and actionable reporting.

Perforce

Sample Customers

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake...

ACCESS Co Ltd, Risk-AI, Winbond Electronics, Bristol-Myers Squibb Pharmaceutical Research Institute, University of Southern California, Alebra Technologies, SIMULIA, Risk Management Solutions, Brigham Young University, SRD, HRL

Buyer's Guide

GitGuardian Platform vs. Klocwork

April 2025

Free Report: GitGuardian Platform vs. Klocwork

Find out what your peers are saying about GitGuardian Platform vs. Klocwork and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,028 professionals have used our research since 2012.

See our GitGuardian Platform vs. Klocwork report.

See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.