

GitGuardian Platform and Qualys CyberSecurity Asset Management compete in the cybersecurity monitoring and asset management category. GitGuardian has the upper hand due to its high detection accuracy and low false-positive rate, which are essential for immediate remediation of security threats.
Features: GitGuardian Platform provides effective internal monitoring, focusing on identifying credentials in source control and sending timely developer alerts. It integrates seamlessly with various tools, offering high detection accuracy. Qualys CyberSecurity Asset Management offers dynamic IT asset management, with extensive insight through inventory management and risk assessment via effective reporting tools.
Room for Improvement: GitGuardian could improve support for custom identifiers tailored to industry needs, enhance integration options, and streamline notifications across platforms. Qualys CyberSecurity Asset Management can improve its user interface for better experience, strengthen role-based access control, and enhance integration capabilities for smaller businesses or environments like CI/CD pipelines.
Ease of Deployment and Customer Service: GitGuardian Platform is noted for its user-friendly interface and efficient support, often resolving queries quickly. Its deployment is straightforward with robust technical support. Qualys CyberSecurity Asset Management's deployment process is more complex, especially concerning external system integration, though users like the autonomy in setup processes without constant technical support dependency.
Pricing and ROI: GitGuardian's pricing is perceived as reasonable, with a generous free tier for smaller teams and clear ROI due to time and resource savings in securing sensitive data. Qualys CyberSecurity Asset Management is seen as expensive, particularly for smaller organizations, though its comprehensive asset management value is recognized, showcasing clear ROI in continuous security vigilance across large distributions.
I can certainly say that we have saved significant time and resources in terms of people and automation.
The majority of our incidents for critical detectors and important secret types are remediated automatically or proactively by developers through GitGuardian's notification system, without security team involvement.
Improvements to our security infrastructure contributed to overall business growth of approximately 150 percent over the past year.
By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.
It has reduced the number of development and scripting hours along with maintenance hours.
It effectively helps us with credentials security and has been performing satisfactorily.
I would rate their technical support a nine out of ten.
I would rate the technical support as excellent.
The support team was knowledgeable and offered a variety of quick resolution options.
Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.
I would rate their customer support a ten out of ten.
In terms of scalability, I would rate it around a ten out of ten, as it handles all the repositories and commit activity we have.
I would rate it a ten out of ten for scalability.
Currently, what GitGuardian Platform is doing works effectively.
We have about 300,000 assets installed with agents worldwide.
The scalability is excellent as we manage more than one hundred thousand assets, including over one hundred thousand endpoints, approximately 2,600 servers, and more than 1,200 network devices.
Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.
We set up a lot of the repository, so GitGuardian is a required check.
The SaaS platform has experienced two significant moments of downtime or instability in the last six months, requiring notices and retrospectives.
I would rate the stability of the GitGuardian Platform as excellent with no downtimes.
I would rate the stability of Qualys CSAM a ten out of ten.
The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance.
They are constantly adding capabilities.
Another thing that would be good to see is some more metrics on the usage of the GitGuardian pre-push hooks.
The self-healing activity by developers isn't reflected in the analytics, requiring us to collect this data ourselves.
We are looking for better metrics and audit data, wanting more features such as knowing which users are creating the most secrets or committing the most secrets, what repository, what directory, and who is not checking in secrets.
Qualys is currently not able to identify assets lacking DNS information.
Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.
If there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present.
Overall, the secret detection sector is expensive, but we are happy with the value we get.
It's fairly priced, as it performs a lot of analysis and is a valuable tool.
A cost-effective solution.
I believe that the stability and reliability of Qualys offer great value for the money.
A monthly subscription starting at approximately $72 per month, depending on the specific package and features included.
One of the best features of the solution is the ability to use pre-push hooks.
A high number of our exposures are remediated by developers before security needs to step in, as the self-healing playbook process engages them automatically.
GitGuardian Platform performs the capability to detect secrets in real time exceptionally, as it activates from the commit and can detect it immediately.
By correlating this with QDS scores, we can accurately assess the risk level of high or low QDS scores associated with each asset and monitor them accordingly.
The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments.
It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.
| Product | Market Share (%) |
|---|---|
| Qualys CyberSecurity Asset Management | 2.4% |
| GitGuardian Platform | 2.9% |
| Other | 94.7% |

| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 9 |
| Large Enterprise | 13 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 2 |
| Large Enterprise | 23 |
GitGuardian is a comprehensive platform focused on enhancing Non-Human Identity security by integrating Secrets Security and Secrets Observability to detect and manage secrets across development environments.
As cybersecurity threats increasingly target NHIs like service accounts and applications, GitGuardian offers a robust solution by supporting over 450 types of secrets and deploying honeytokens for additional defense. Trusted by leading organizations and developers, its monitoring and quick alert system enable effective detection and management of sensitive data, strengthening operational security across platforms.
What are the key features of GitGuardian?In the tech industry, GitGuardian is employed to safeguard APIs and sensitive credentials across code repositories like GitHub. Companies benefit from instant alerts and integrations with tools like Slack, effectively managing risks and enhancing security policies. While popular in sectors dependent on development agility, there is room for further improvement in customization and integration to meet specific industry needs.
Qualys CyberSecurity Asset Management provides key features including asset inventory management, end-of-life tracking, dynamic tagging, and integration with CMDB, offering extensive visibility and support for proactive threat response.
Qualys offers comprehensive visibility across hardware and software assets, aiding in tracking unauthorized applications and facilitating automated vulnerability remediation. Its user-friendly interface and dynamic risk scoring enhance security posture management. Users leverage it for vulnerability management and compliance, benefiting from real-time risk identification and efficient operations in cloud and on-premises environments.
What are the key features of Qualys CyberSecurity Asset Management?Cybersecurity teams in various industries, such as financial services, healthcare, and manufacturing, utilize Qualys to manage technical debt through end-of-life tracking and facilitate robust patch management. It supports compliance and visibility initiatives, essential for maintaining data integrity and operational security in dynamic environments.
We monitor all Software Supply Chain Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.