No more typing reviews! Try our Samantha, our new voice AI agent.

GitHub vs GitHub Advanced Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitHub
Ranking in Application Security Tools
4th
Average Rating
8.8
Reviews Sentiment
6.5
Number of Reviews
102
Ranking in other categories
Version Control (2nd), Agile and DevOps Services (2nd)
GitHub Advanced Security
Ranking in Application Security Tools
14th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Application Security Tools category, the mindshare of GitHub is 2.7%, up from 0.9% compared to the previous year. The mindshare of GitHub Advanced Security is 2.3%, down from 7.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
GitHub2.7%
GitHub Advanced Security2.3%
Other95.0%
Application Security Tools
 

Featured Reviews

Abdulmunafz Mct - PeerSpot reviewer
Full Stack Developer at Sri Krishna Arts and Science
Daily workflows have become streamlined as I manage projects, learn from clones, and host sites
The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing. The setup is frustrating because GitHub could add a repository with pre-installed packages or something since I need to install packages in VS Code before pushing and maintain it in the codebase. Git packages need to be installed manually, and if that was already in a GitHub repository, that would be much better. GitHub packages can be installed previously for the project upon the project requirement, and that is the thing I wanted to add here. That would be good. According to governance and security, I recently heard about some security issues in GitHub. I think that could be centralized and should consider those security issues and clear them. The AI capabilities there include Copilot or something else. I recently heard about security issues, but I do not know about it clearly. However, if security has been more tightened, it will be better.
Devendiran Kandan - PeerSpot reviewer
DevOps Engineer at a tech vendor with 1,001-5,000 employees
Security scanning has protected our pipelines but currently needs clearer dashboards and controls
We used additional third-party solutions, but we replaced them with GitHub Advanced Security, even though I do not have a very good opinion about GitHub Advanced Security. Even though it is an inline product, I'm not seeing user-friendly things in GitHub Advanced Security. Dependent bots and the secret detection are good compared to others. However, code scanning is not finding very good results based on pipeline where it will scan and do code scanning. While build, before building and deploying the code, we want to block or do an advanced model, but it is not supporting. During deployment, code scanning is not good. It is a little complicated. It is not a straightforward method we can complete. We need expertise to get the full benefit, and troubleshooting sometimes requires going through that. The security overview dashboard is not really clear. It's not showing centralized information; each repo is showing, but if you compare it with competitors, it is not that great. Mainly in the centralized dashboard, enterprise level needs to improve. A centralized way where we can get that overall view is needed, and we want that code scanning and blocking deployments based on security. There are AI improvements, but however, it is not so easy to configure. It is multiple windows we need to go through and make changes or configure that. A few things we need to enable going into settings, and a few things we can find out in security. One product where security means the security dashboard should cover everything, but it is going here and there in many places.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I actually appreciate that I can create a developer profile that is outside of work, and that is also technical, not necessarily related to LinkedIn."
"Our code is secure."
"GitHub is good for collaboration because everyone can access it or we can restrict access to a few users. If I upload a file and share the URL, it's not restricted to a set number of users. Everyone with the link can download the files."
"We have been quite satisfied with its capabilities."
"GitHub is good for small companies and for personal use."
"The deployment is fast since we just have to run the script, and once it's done, it takes a few minutes."
"I find the most valuable collaboration between our peers to be a seamless collaboration between our peers. We can connect and change our code, allowing us to be agile in our projects. Since we're talking about DevOps, we're using Jenkins in our pipeline. It helps speed up the process by automating the DevOps workflow."
"The most valuable features are GitHub are the standard features, they are very useful."
"The product's most valuable features are security scan, dependency scan, and cost-effectiveness."
"The best features of GitHub Advanced Security are its flexibility and the multiple options it has compared to other tools."
"It ensures user passwords or sensitive information are not accidentally exposed in code or reports."
"I have not experienced any performance or stability issues with GitHub Advanced Security."
"Dependency scanning is a valuable feature."
"GitHub Advanced Security is ten out of ten scalable."
"GitHub Advanced Security uses artificial intelligence in the backend, specifically CodeQL, to analyze code and provide fewer but more reliable findings, so there are less false positives."
"GitHub Advanced Security's secret scanning is good."
 

Cons

"The support is average; they can be inconsistent and it would be good if they were more responsive."
"As of now, if I would like to learn about GitHub or its features, I would have to look on YouTube. It would be nice if they were able to send out a newsletter with explanations of new features that they are offering and what features are available."
"The merging features can be improved."
"GitHub storage is one of the main requirements and it could improve."
"GitHub could improve by being more user-friendly."
"If something has to be moved into approvals, and if they don't approve it in a few hours, then they should move the approval request to some other user, or they should have a way to escalate it."
"The solution can improve by adding video guides, official guides, or short courses that cater to beginners who are new to the system. These resources could offer step-by-step guidance on how to use GitHub, including common procedures such as pulling and committing. Currently, many of us have to resort to searching for information on how to do these tasks via Google. An official guide provided by GitHub itself would be a valuable asset to newcomers and would save them time and effort."
"I think one area where GitHub could improve is its search and navigation functionality within repositories. For example, we use IDEs like IntelliJ or Visual Studio Code when developing code. These IDEs allow us to easily navigate from one piece of code to another file where a method is being called. It would be really helpful if the solution could add this navigation feature."
"GitHub Advanced Security should look into API security issues, which they currently do not. Additionally, open-source security vulnerabilities are not getting updated in a timely manner."
"We used additional third-party solutions, but we replaced them with GitHub Advanced Security, even though I do not have a very good opinion about GitHub Advanced Security."
"There could be a centralized dashboard to view reports of all the projects on one platform."
"The report limitations are the main issue."
"Maybe make it compatible with more programming languages. Have a customized ruleset where the end-user can create their own rules for scanning."
"A more refined approach, categorizing and emphasizing specific vulnerabilities, would be beneficial."
"For GitHub Advanced Security, I would like to see more support for various programming languages."
"An area of GitHub Advanced Security that has room for improvement is customization."
 

Pricing and Cost Advice

"We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."
"The tool offers a free program. As you go, you can upgrade from the community version to the professional one. I believe it costs about ten dollars per person, per month."
"It is open-source. There is no license for GitHub."
"The product is reasonably priced."
"I use the free version of the tool."
"GitHub is a cost-effective solution."
"The private repositories are free, which is very good."
"We are currently paying nothing for GitHub."
"The current licensing model, which relies on active commitments, poses challenges, particularly in predicting and managing growth."
"The solution is expensive."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
913,683 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Outsourcing Company
11%
Marketing Services Firm
8%
Manufacturing Company
7%
Financial Services Firm
15%
Computer Software Company
9%
Comms Service Provider
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business43
Midsize Enterprise14
Large Enterprise55
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise4
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for GitHub?
I have been using GitHub for free, and recently I got a free education offer, such as educational resources. I believe it is GitHub Pro or something similar. I have been using the educational offer...
What needs improvement with GitHub?
When we were using GitHub, sometimes within a month or two, GitHub is down for some time. Also, it is using SAML authentication, so when we restart our system, if there is an update on our laptop t...
What is your primary use case for GitHub?
My main use case for GitHub is as a source repository where I'm pushing our code there. Whatever the microservices or the services code we have, we are pushing there. We are running our build and s...
What needs improvement with GitHub Advanced Security?
We used additional third-party solutions, but we replaced them with GitHub Advanced Security, even though I do not have a very good opinion about GitHub Advanced Security. Even though it is an inli...
What is your primary use case for GitHub Advanced Security?
I'm working with software development nowadays. As a process, we are using the dependent bot alerts and the code scanning for Java, and some of the code scanning is happening. Security secrets in c...
What advice do you have for others considering GitHub Advanced Security?
Dependent bots and the secret detection are good compared to others. However, code scanning is not finding very good results based on pipeline where it will scan and do code scanning. While build, ...
 

Overview

 

Sample Customers

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
Information Not Available
Find out what your peers are saying about GitHub vs. GitHub Advanced Security and other solutions. Updated: September 2026.
913,683 professionals have used our research since 2012.