GitHub Advanced Security Reviews

Name: GitHub Advanced Security
Brand: GitHub
Rating: 4.3 (9 reviews)

4.3 out of 5

9 reviews
100% willing to recommend

What is GitHub Advanced Security?

GitHub Advanced Security secures data by scanning for vulnerabilities in dependencies, secret scanning, and protecting sensitive information. It integrates seamlessly, reducing reliance on multiple tools and optimizing vulnerability detection.

Get the GitHub Advanced Security Buyer's Guide and find out what your peers are saying about GitHub Advanced Security, SonarQube Server (formerly SonarQube), GitLab and more!

GitHub Advanced Security is the #11 ranked solution in application security solutions. PeerSpot users give GitHub Advanced Security an average rating of 8.6 out of 10. GitHub Advanced Security is most commonly compared to SonarQube Server (formerly SonarQube): GitHub Advanced Security vs SonarQube Server (formerly SonarQube). GitHub Advanced Security is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 14% of all views.

Buyer's Guide

GitHub Advanced Security

April 2025

Get the report

Helped 849,686 peers since 2012

Featured GitHub Advanced Security reviews

Sabna Sainudeen

Director, Application Security at Carlsberg

GitHub Advanced Security should look into API security issues, which they currently do not. Additionally, open-source security vulnerabilities are not getting updated in a timely manner. There are features in GitHub Advanced Security that cannot be used within Microsoft, which is strange since they are the same company. It should also focus on developing a software bill of materials (SBOM) to see all open software used in one place.

Read full review

Sirinat-Paphatsirinatthi

Co-Founder at Cloud NC

We keep our firewall security in place. Customers use GitHub because they don't want to coordinate with many tools. GitHub provides advanced security, which is why the customers choose this tool; it allows them to rely solely on GitHub as one platform for everything they need For customers,…

Read full review

reviewer2395785

Senior Solution Architect at a manufacturing company with 10,001+ employees

It finds hardcoded secrets directly in the code and points them out immediately. Then, I can go back to the developers and let them know. I can even block the commit in the repository so they cannot commit until they fix the issue. AI in the backend: CodeQL uses AI algorithms, so it reduces false positives. For example, in a SQL injection, it finds the user input flow of the code instead of looking for hardcoded SQL statements. It looks at where parameters can be created and filled with data. If it ends on a path where it comes from a user, then you really get an SQL injection. If it's just a parameter populated through something else, there is no danger. This is one difference between SonarQube and GitHub Advanced Security. It gives you fewer false positives, so you don't waste time figuring out if it's a real security issue or a false alarm.

Read full review

GitHub Advanced Security mindshare

As of May 2025, the mindshare of GitHub Advanced Security in the Application Security Tools category stands at 8.8%, up from 3.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

PeerResearch reports based on GitHub Advanced Security reviews

Type	Title	Date
Category	Application Security Tools	May 1, 2025	Download
Product	Reviews, tips, and advice from real users	May 1, 2025	Download
Comparison	GitHub Advanced Security vs SonarQube Server (formerly SonarQube)	May 1, 2025	Download
Comparison	GitHub Advanced Security vs Veracode	May 1, 2025	Download
Comparison	GitHub Advanced Security vs Checkmarx One	May 1, 2025	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	24.5%	81%	114 interviews Add to research
GitLab	4.3	2.9%	97%	82 interviews Add to research

Valuable Features

GitHub Advanced Security offers developer experience, extensibility with CodeQL, security and dependency scans, secret scanning, and push protection. It integrates seamlessly into Azure DevOps, providing APIs for external integration. Its ability to customize queries enhances security and scalability. Cost-effectiveness is emphasized through included features without needing separate security solutions. Users appreciate the workflow integration and benefit significantly from features like copilot auto-fix, enhancing vulnerability detection and threat management.

"The initial setup was straightforward and completed in a matter of minutes."
"I have not experienced any performance or stability issues with GitHub Advanced Security."
"GitHub Advanced Security is a very developer-friendly solution that is integrated within my development environment."

Room for Improvement

GitHub Advanced Security needs improvement in its reporting capabilities to offer a centralized dashboard and better integration with existing security tools. Users find the customization challenging, suggesting more streamlined query writing and increased support for various programming languages. The implementation process requires simplification, and there's a demand for timely updates to open-source vulnerabilities. Enterprises desire PDF report options and enhanced control at the organizational level rather than individual repository management. Users also call for support for containers and API security.

"For GitHub Advanced Security, I would like to see more support for various programming languages."
"GitHub Advanced Security should look into API security issues, which they currently do not. Additionally, open-source security vulnerabilities are not getting updated in a timely manner."
"Open-source security vulnerabilities are not getting updated in a timely manner."

Pricing

"The solution is expensive."
"The current licensing model, which relies on active commitments, poses challenges, particularly in predicting and managing growth."

Popular Use Cases

Organizations utilize GitHub Advanced Security primarily for securing data across applications by preventing accidental exposure of sensitive information. They focus on code security, vulnerability checks, dependency updates, and use features like SCSS dependencies scan and secret scan. It provides a streamlined platform for security, minimizing false positives and enhancing the developer experience. Utilizing artificial intelligence and CodeQL, it ensures accurate security findings. Many integrate it with development environments for comprehensive code analysis.

Service and Support

GitHub Advanced Security's customer service and support team is responsive and accommodating, with professional services and technical assistance rated between eight and nine out of ten. While the support primarily involves email, geographical distance may impact accessibility for India-based companies. Feature requests and queries are addressed thoroughly. Some users recommend quicker response times due to high demand. Microsoft documentation is also referenced for technical issues.

Deployment

Enterprise admins found GitHub Advanced Security's setup straightforward. Repo admins enable it on repositories. Recent enhancements include automatic generation of analysis files, simplifying the process. Users appreciated its one-click integration, reducing setup costs and requiring minimal maintenance by Microsoft. Companies completed setup in hours or a week, yet some needed more engineers for full implementation. Teams managed setup without issues, finding it easy and quick, even integrating with Azure DevOps in a few hours.

Scalability

Users find GitHub Advanced Security generally scalable, suitable for both small and enterprise businesses, managing a large user base effectively. Though it accommodates new applications and smooth onboarding, some limitations exist. Users report that while it allows expanding user numbers, its analysis could benefit from enhanced efficiency. Its scalability is praised, but there’s room for improvement in its reporting capabilities compared to Check Point.

Stability

Users describe GitHub Advanced Security as stable, with no downtime issues encountered. Developers note some challenges in understanding workflow analysis results. Its integration with Azure DevOps is praised for stability due to Microsoft’s serverless architecture, reducing scaling and administrative concerns. Many rate the stability highly and report no performance issues. Some have not faced technical problems and regard it as consistently stable.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our GitHub Advanced Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

Government

Insurance Company

Retailer

Comms Service Provider

Healthcare Company

University

Energy/Utilities Company

Media Company

Educational Organization

Construction Company

Non Profit

Real Estate/Law Firm

Transportation Company

Legal Firm

Hospitality Company

Wholesaler/Distributor

Pharma/Biotech Company

Outsourcing Company

Recreational Facilities/Services Company

Consumer Goods Company

Performing Arts

Logistics Company

Mining And Metals Company

Compare GitHub Advanced Security with alternative products

Learn more about GitHub Advanced Security

GitHub Advanced Security is designed to enhance security awareness by offering comprehensive tools for secret scanning, code analysis, and SCSS dependency checks. AI-driven features deliver accurate security insights while minimizing false positives. It provides valuable integration with Azure DevOps, maintaining control within dashboards and enabling external systems' support through APIs. With CodeQL, users can perform custom queries across projects. Propelled by Microsoft, the platform enhances operational frameworks with essential security features, although improvements are needed in dashboard consolidation, reporting, and integration mechanisms. Users seek better customizability, language support, and training resources to ensure smoother implementation.

What are the key features of GitHub Advanced Security?

Security and Dependency Scanning: Identifies vulnerabilities in code and dependencies.
Secret Scanning: Detects sensitive information exposure.
Cost-effectiveness: Reduces the need for multiple security tools.
Developer Experience: Integrates seamlessly with development environments.
Extensibility: Custom queries via CodeQL and integration support.

What benefits and ROI can users expect?

Improved Security Posture: Enhanced visibility reduces risk.
Operational Efficiency: Streamlines processes with fewer tools.
Actionable Insights: AI-driven analysis provides clear guidance.
Enhanced Collaboration: Facilitates team integration through shared dashboards.

Industries implement GitHub Advanced Security to maintain robust security standards. It is favored by technology sectors seeking seamless integration with Azure DevOps and looking for customizable security tools tailored to project needs. Financial institutions value its accurate threat detection and compliance support, while enterprises focus on its comprehensive dependency scanning and code analysis capabilities to safeguard critical assets. The adaptability of GitHub Advanced Security across different operational environments illustrates its practical benefits.