GitSnitch App installs statistics

GitSnitch is a real-time security monitoring GitHub App that protects your organization

from credential leaks, unauthorized access changes, and suspicious activity — catching

threats before small issues become serious incidents.

💪🏼 Capabilities

Here are a few of our capabilities.

• Secret scanning — detects exposed API keys, tokens, private keys, and credentials

on every push, covering AWS, GitHub, Stripe, Twilio, and dozens more

• Security event monitoring — alerts on branch protection changes, force pushes,

new admin grants, dormant admin activity, and after-hours commits

• Live alert dashboard — real-time feed of security events across all connected

repositories, classified by severity

• Alert management — triage, acknowledge, and resolve findings with a full audit trail

🌟Benefits

• Prevent incidents — catch exposed credentials on every push, before automated

scanners harvest them

• Instant visibility — know immediately when branch protection is disabled, a new

admin is added, or a dormant account suddenly becomes active

• Zero configuration — install the App and monitoring starts automatically, with no

rules to write

🔍 How it works

1️⃣ Install the GitHub App on your organization and choose the repositories to monitor.

2️⃣ GitSnitch receives GitHub webhook events in real time and scores each one by severity.

3️⃣ Review, acknowledge, resolve, or dismiss alerts from a live dashboard, and export them to CSV.

GitSnitch does not keep your source code. For secret scanning, it makes a temporary shallow clone of the pushed commits, scans them, and deletes the clone right away. Detected secrets are stored redacted.

The Free plan covers one organization, up to 10 repositories, and 7 days of alert history.

Description from the GitHub Marketplace listing.