Snapshot 258297
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Trust at GitGuardian security@gitguardian.com Privacy PolicyOpens in new tab GitGuardian protects secrets and non-human identities (NHIs) across the software delivery lifecycle. Non-human identities (NHIs) include service accounts, tokens, keys and machine principals used by software and automation. GitGuardian helps you take control of your NHI security by discovering all your secrets, prioritizing and remediating leaks at scale, ultimately protecting your non-human identities, and reducing breach exposure. SaaS or self-hosted options available for regulated environments. Trusted by 600k+ developers and enterprises such as Snowflake, Orange, Iress, Mirantis, Maven Wave, ING, BASF, and Bouygues Telecom. Our trust programme includes annual SOC 2 Type II audits by Prescient Assurance, strong encryption in transit and at rest, independent penetration tests, and a 48-hour incident notification commitment. Compliance: SOC 2 Type II (maintained since 2022). Auditor: Prescient Assurance. Hosting: Production runs on AWS; physical security handled by AWS. Encryption: TLS 1.2+ in transit; AES-256-CBC (or stronger) at rest. Backups: Daily; retained 14 days; encrypted; DR restores tested annually. Logs: Retained 365 days. Testing: Annual independent pen test; monthly internal & external vulnerability scans; private bug bounty on YesWeHack; public VDP. Status: Real-time and historical uptime at status.gitguardian.com. Compliance SOC 2 Type II GDPR Resources View all General Compliance Reports Penetration Test Summary 2026 GitGuardian SAS 2026 SOC 2 Report (pdf) Policies Data Management Policy Risk Management Policy Operations Security Policy Asset Management Policy View 6 more Architecture GitGuardian Platform Architecture Diagram Other resources Human Resource Security Policy Business Continuity and Disaster Recovery Plan Cryptography Policy Information Security Policy (AUP) View 3 more Controls View all Infrastructure security Unique production database authentication enforced Unique account authentication enforced Production application access restricted View 13 more Infrastructure security controls Organizational security Employee background checks performed Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 1 more Organizational security control Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Cybersecurity insurance maintained Configuration management system established Change management procedures enforced View 20 more Internal security procedures controls Data and privacy Customer data deleted upon leaving FAQ View all