GitHub Advanced Security

What the company sells

GitHub Advanced Security is a set of application security add-ons for the GitHub platform, combining GitHub Secret Protection and GitHub Code Security to help developers find and fix vulnerabilities, detect leaked secrets, and monitor dependencies directly within their existing GitHub workflows. It provides static application security testing, software composition analysis, and secret scanning capabilities, and is also available as an add-on for Microsoft Azure DevOps.^[1][2]

Categories

• Static application security testing (primary category)
• Secrets detection
• Software supply chain security

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

github.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• GitHub Code Security

  Static application security testing and dependency scanning integrated into GitHub repositories to find and fix vulnerabilities in code.

• GitHub Secret Protection

  Scanning that detects and blocks leaked credentials and secrets in code and pushes.

• Dependabot^[2]

  Tooling that flags vulnerable dependencies and supplies supported fixes for breaking changes.

• Copilot Autofix^[2]

  AI-generated remediation suggestions for vulnerabilities found by code scanning.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of GitHub Advanced Security's categories, then alphabetical. A list from the record, never a ranking.

• On static application security testing, GitHub Advanced Security competes with Semgrep, Veracode, AISLE, Checkmarx, Kiuwan, OpenText, Snyk, Cycode, Phoenix Security, Trail of Bits and 5 more.

• On secrets detection, GitHub Advanced Security competes with GitGuardian, Truffle Security, Snyk, Legit Security, Semgrep and HashiCorp.

• On software supply chain security, GitHub Advanced Security competes with Anchore, Archipelo, Chainguard, RapidFort, Red Hat, Snyk, Cycode, Legit Security, Phoenix Security, Trail of Bits and 5 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Advanced securityGitHub · github.com · undated page, accessed October 16, 2026 · Tier A: the company, a regulator or a filing
2. [2]github.comGitHub · github.com · undated page, accessed October 16, 2026 · Tier A: the company, a regulator or a filing

Last verified October 16, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded October 16, 2026 from the references above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.

Work for GitHub Advanced Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.