We use GitHub Advanced Security to secure data for multiple applications. It ensures user passwords or sensitive information are not accidentally exposed in code or reports. It scans the project's dependencies and checks if they are up-to-date and free from known security vulnerabilities.
Integration and Solution Architect at a government with 501-1,000 employees
Provides essential data security features but its dashboard needs improvement
Pros and Cons
- "It ensures user passwords or sensitive information are not accidentally exposed in code or reports."
- "There could be a centralized dashboard to view reports of all the projects on one platform."
What is our primary use case?
What is most valuable?
GitHub Advanced Security is part of the Azure DevOps ecosystem. So, all the dashboards and information stay in our environment. We are not required to integrate it with any external security solution.
What needs improvement?
There could be a centralized dashboard to view reports of all the projects on one platform.
What other advice do I have?
I rate GitHub Advanced Security a seven out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Co-Founder at Cloud NC
Initial setup was very easy, scalable product and stable product
Pros and Cons
- "GitHub provides advanced security, which is why the customers choose this tool; it allows them to rely solely on GitHub as one platform for everything they need."
- "The report limitations are the main issue."
What is our primary use case?
We keep our firewall security in place. Customers use GitHub because they don't want to coordinate with many tools.
GitHub provides advanced security, which is why the customers choose this tool; it allows them to rely solely on GitHub as one platform for everything they need.
What is most valuable?
For customers, GitHub Advanced Security is valuable for several reasons. It offers server security and the key features.
What needs improvement?
The report limitations are the main issue. We can only see a limited number of reports from Advanced Security. Many enterprise customers would prefer PDF reports.
For how long have I used the solution?
I've had experience with this solution for about a year.
What do I think about the stability of the solution?
It's a stable product. I would rate the stability a nine out of ten.
What do I think about the scalability of the solution?
It is highly scalable. Our clients are enterprise businesses.
How are customer service and support?
The customer service and support is fine.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was very easy; it wasn't difficult.
What about the implementation team?
GitHub allows for quick deployment depending on the customer's specific needs.
What other advice do I have?
Overall, I would rate the solution a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Implementer

Buyer's Guide
Download our free GitHub Advanced Security Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Product Categories
Application Security ToolsPopular Comparisons
SonarQube Server (formerly SonarQube)
Checkmarx One
Fortify on Demand
Sonatype Lifecycle
HCL AppScan
PortSwigger Burp Suite Professional
Qualys Web Application Scanning
GitGuardian Platform
Fortify Application Defender
Contrast Security Assess
Buyer's Guide
Download our free GitHub Advanced Security Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- If you had to both encrypt and compress data during transmission, which would you do first and why?
- When evaluating Application Security, what aspect do you think is the most important to look for?
- What are the Top 5 cybersecurity trends in 2022?
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- We're evaluating Tripwire, what else should we consider?
- Which application security solutions include both vulnerability scans and quality checks?
- Is SonarQube the best tool for static analysis?
- Why Do I Need Application Security Software?
- Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?
- SAST vs. DAST: Which is better for application security testing?