Snapshot 6192
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Trust at GitGuardian security@gitguardian.com Privacy PolicyOpens in new tab GitGuardian protects secrets and non-human identities (NHIs) across the software delivery lifecycle. Non-human identities (NHIs) include service accounts, tokens, keys and machine principals used by software and automation. GitGuardian helps you take control of your NHI security by discovering all your secrets, prioritizing and remediating leaks at scale, ultimately protecting your non-human identities, and reducing breach exposure. SaaS or self-hosted options available for regulated environments. Trusted by 600k+ developers and enterprises such as Snowflake, Orange, Iress, Mirantis, Maven Wave, ING, BASF, and Bouygues Telecom. Our trust programme includes annual SOC 2 Type II audits by Prescient Assurance, strong encryption in transit and at rest, independent penetration tests, and a 48-hour incident notification commitment. Compliance: SOC 2 Type II (maintained since 2022). Auditor: Prescient Assurance. Hosting: Production runs on AWS; physical security handled by AWS. Encryption: TLS 1.2+ in transit; AES-256-CBC (or stronger) at rest. Backups: Daily; retained 14 days; encrypted; DR restores tested annually. Logs: Retained 365 days. Testing: Annual independent pen test; monthly internal & external vulnerability scans; private bug bounty on YesWeHack; public VDP. Status: Real-time and historical uptime at status.gitguardian.com. Compliance SOC 2 Type II GDPR Resources View all General Compliance Reports Penetration Test Summary 2025 GitGuardian SAS 2026 SOC 2 Report (pdf) Policies Data Management Policy Risk Management Policy Operations Security Policy Asset Management Policy View 6 more Architecture GitGuardian Platform Architecture Diagram Other resources Human Resource Security Policy Business Continuity and Disaster Recovery Plan Cryptography Policy Information Security Policy (AUP) View 2 more Controls View all Infrastructure security Unique production database authentication enforced Unique account authentication enforced Production application access restricted View 15 more Infrastructure security controls Organizational security Asset disposal procedures utilized Employee background checks performed Code of Conduct acknowledged by contractors View 5 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 26 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established FAQ View all