GitHub Secret Scanning
5.9#14 in static application security testing sastFrom $19 a monthWebAPISelf-hosted
VisitGitHub Secret Scanning vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | GitHub Secret Scanning | Semgrep Code |
|---|---|---|
| Founded | 2008 | 2017 |
| Headquarters | San Francisco, California, United States | San Francisco, California, United States |
| Purpose | Secret scanning automatically detects exposed credentials so they can be secured before they are exploited. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
GitHub Secret Scanning plans
- GitHub Secret Protection$19 a month
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick GitHub Secret Scanning if…
It suits teams that need to find exposed credentials in GitHub repositories and related content. Public-repository scanning is available free, while organization-owned private and internal repositories require GitHub Secret Protection on a supported plan.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.