Security
Catch leaked keys, vulnerable dependencies and attacks before users do.
GitHub Secret Scanning Push Protection
Blocks git pushes that contain recognized secrets (API keys, tokens, private keys) before they land in your repository.
Free: Push protection for users is on by default for every GitHub.com accountGitleaks
An open-source command-line tool that scans git repositories, files and history for hardcoded secrets. Can run locally, as a pre-commit hook or in CI.
Free: Open source and free to runSnyk
Scans your dependencies (SCA), source code (SAST), infrastructure-as-code and containers for known vulnerabilities, with IDE, CLI and Git integrations.
Free: Free plan for individual developers and small teamsCloudflare (Free plan)
Put Cloudflare's proxy and DNS in front of your domain for DDoS mitigation, a CDN and a free SSL certificate, whichever host you use.
Free: DDoS mitigation and global CDNFree tiers at a glance
| Tool | Free tier highlights | Paid from |
|---|---|---|
| GitHub Secret Scanning Push Protection | Push protection for users is on by default for every GitHub.com account; Stops you from pushing supported secrets to public repositories | See pricing page |
| Gitleaks | Open source and free to run | See pricing page |
| Snyk | Free plan for individual developers and small teams; Test limits: 200 Open Source, 100 Code, 300 IaC and 100 Container tests | Team: $25/month |
| Cloudflare (Free plan) | DDoS mitigation and global CDN; Free shared SSL certificate | See pricing page |