This is needed because developers, perennially facing deadline pressures, have been known to take shortcuts while managing secrets - leading to sensitive data being accidentally committed as part of a code revision. The company’s app scans selected code repositories for sensitive data such as API keys or passwords, and then sends an alert if one of these secrets is discovered.

GitGuardian has made its name operating in just one vertical of the code security market: secrets detection. In response, many companies are now in the process of moving toward DevSecOps - an approach that aligns development, security, and operations with the goal of securing applications from the get-go during development. A recent survey by Invicti Security found that 70% of development teams always or frequently skip security steps due to time pressures when completing projects. Meanwhile, concerns about software supply chain insecurity are widespread in the wake of attacks such as the SolarWinds breach.Īnd yet, increasing pressures on developers appear to be worsening the issues.

Focus on developer securityĪccording to a recent report from Venafi, nearly all senior IT executives - 97% - agree that software build processes are not secure enough. GitGuardian is “now in pole position to compete against other leaders in other code security verticals, and build a holistic platform to enforce code security at scale,” he said in an email.

Overwatch code