GitGuardian Platform vs Klocwork comparison

GitGuardian and Perforce are both solutions in the Application Security Tools category. GitGuardian is ranked #7 with an average rating of 9.0, while Perforce is ranked #16 with an average rating of 8.4. GitGuardian holds a 0.6% mindshare in AS, compared to Perforce’s 1.5% mindshare. Additionally, 100% of GitGuardian users are willing to recommend the solution, compared to 92% of Perforce users who would recommend it.

GitGuardian Platform

Read 24 GitGuardian Platform reviews

2,303 Views
409 Comparison Views

100% willing to recommend

Klocwork

Read 23 Klocwork reviews

2,613 Views
1,557 Comparison Views

92% willing to recommend

GitGuardian Platform

Klocwork

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Klocwork and GitGuardian Platform are software solutions targeting developers seeking robust code security and analysis tools. GitGuardian Platform appears superior due to its comprehensive feature set.

Features: Klocwork offers static code analysis, integration with development ecosystems, and supportive customer service. GitGuardian Platform detects sensitive data exposure, integrates seamlessly with CI/CD systems, and provides innovative security alerts.

Room for Improvement: Klocwork users suggest better integration flexibility, faster analysis speed, and more comprehensive reports. GitGuardian users desire broader language support, improved detection algorithms, and more refined user interface design.

Ease of Deployment and Customer Service: Klocwork has a straightforward setup process and responsive support. GitGuardian needs more initial configuration but offers proactive client assistance, enabling adaptability in varied deployment scenarios.

Pricing and ROI: Klocwork's competitive pricing benefits smaller teams, while GitGuardian's higher cost is offset by advanced features and detection capabilities, resulting in greater ROI for large-scale deployments.

To learn more, read our detailed GitGuardian Platform vs. Klocwork Report (Updated: April 2025).

Buyer's Guide

GitGuardian Platform vs. Klocwork

April 2025

Download the complete report

Helped 847,625 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

GitGuardian Platform

Ranking in Application Security Tools

7th

Ranking in Static Application Security Testing (SAST)

5th

Average Rating

9.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Data Loss Prevention (DLP) (6th), Software Supply Chain Security (4th), DevSecOps (4th)

Klocwork

Ranking in Application Security Tools

16th

Ranking in Static Application Security Testing (SAST)

13th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Static Code Analysis (5th)

Mindshare comparison

As of April 2025, in the Application Security Tools category, the mindshare of GitGuardian Platform is 0.6%, up from 0.3% compared to the previous year. The mindshare of Klocwork is 1.5%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Joan Ging

Head of Development at Inhabit

It dramatically improved our ability to detect secrets, saved us time, and reduced our mean time to remediation

While they do offer some basic reporting, more comprehensive reporting would be beneficial in the long run. This would allow me to demonstrate the value of the product over time to continue to effectively budget for this subscription, especially as they add features that may come at an additional cost. I appreciate the improvements made to reporting over the past year, but continued development in this area will be appreciated. We have encountered occasional difficulties with the Single Sign-On process. There is room for improvement in its current implementation. It works, but was not quite as smooth as the rest of the GitGuardian experience.

Read full review

AnirbanSarkar

Head - Solution Management Group at Meteonic Innovation Pvt. Ltd.

Lets you find defects during the development phase, so you don't have to wait till the development is over to find and address flaws

What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity. What I'd like added in the next release of Klocwork is the peer code review Cahoots which used to be a part of Klocwork, and the architecture analysis and both have been taken out of Klocwork. I found the two critical for specific deployments, so if those can be brought back to Klocwork, that would be very good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The breadth of the solution detection capabilities is pretty good. They have good categories and a lot of different types of secrets... it gives us a great range when it comes to types of secrets, and that's good for us."

"I like that GitGuardian automatically notifies the developer who committed the change. The security team doesn't need to act as the intermediary and tell the developer there is an alert. The alert goes directly to the developer."

"There is quite a lot to like. Its user interface is fantastic, and being able to sort the incidents by whether they are valid or for a certain repository or a certain user has been very beneficial in helping investigate what has been found."

"The most valuable feature is its ability to automate both downloading the repository and generating a Software Bill of Materials directly from it."

"GitGuardian has many features that fit our use cases. We have our internal policies on secret exposure, and our code is hosted on GitLab, so we need to prevent secrets from reaching GitLab because our customers worry that GitLab is exposed. One of the great features is the pre-receive hook. It prevents commits from being pushed to the repository by activating the hook on the remotes, which stops the developers from pushing to the remote. The secrets don't reach GitLab, and it isn't exposed."

"GitGuardian Internal Monitoring has helped increase our secrets detection rate by several orders of magnitude. This is a hard metric to get. For example, if we knew what our secrets were and where they were, we wouldn't need GitGuardian or these types of solutions. There could be a million more secrets that GitGuardian doesn't detect, but it is basically impossible to find them by searching for them."

"When they give you a description of what happened, it's really easy to follow and to retest. And the ability to retest is something that you don't have in other solutions. If a secret was detected, you can retest if it is still there. It will show you if it is in the history."

"You can also assign tasks to specific teams or people to complete, such as assigning something to the "blue team" or saying that this person needs to do this, and that person needs to do that. That is a great feature because you can actually manage your team internally in GitGuardian."

More GitGuardian Platform pros

"Klocwork's most valuable feature is the static code analysis feature. It detects the potential problem earlier to allow the developer to receive feedback quickly and then address it before it becomes a problem."

"We like using the static analysis and code refactoring, which are very valuable because of our requirements to meet safety critical levels and reliability."

"It's integrated into our CI, continuous integration."

"The tool helps the team to think beforehand about corner cases or potential bugs that might arise in real-time."

"The best advantage of Klocwork is the reduced setup time."

"There is a central Klocwork server at our headquarter in France so we connect the client directly to the server on-premises remotely."

"Technical support is quite good."

"The customer support team is very responsive, proactive, and engages in conversations to ensure our needs are met."

More Klocwork pros

Cons

"It would be nice if they supported detecting PII or had some kind of data loss prevention feature."

"There is room for improvement in GitGuardian on Azure DevOps. The implementation is a bit hard there. This is one of the things we requested help with. I would not say their support is not good, but they need them to improve in helping customers on that side."

"There are some features that are lacking in GitGuardian. The more we grow and the more engineers we have, the more it will become difficult to assign an incident because the assignment is not automatic. I know they are working on that and we are waiting for it."

"One improvement that I'd like to see is a cleaner for Splunk logs. It would be nice to have a middle man for anything we send or receive from Splunk forwarders. I'd love to see it get cleaned by GitGuardian or caught to make sure we don't have any secrets getting committed to Splunk logs."

"I would like to see more fine-grained access controls when tickets are assigned for incidents. I would like the ability to provide more controls to the team leads or the product managers so that they can drive what we, the AppSec team, are doing."

"We have encountered occasional difficulties with the Single Sign-On process."

"It took us a while to get new patterns introduced into the pattern reporting process."

"Other solutions have a live chat feature that provides instant results. Waiting for an agent to reply to an email is less ideal than an instant conversation with a support employee. That's a complaint so minor I almost hesitate to mention it."

More GitGuardian Platform cons

"This solution could be improved if they offered support of more languages including Ada and Golang. They currently only support seven languages."

"I believe it should support more languages, such as Python and JavaScript."

"Klocwork sometimes provides too many additional warnings which require expertise to manage."

"I would like to see better codes between projects and a more user-friendly desktop in the next release."

"I hope that in each new release they add new features relating to the addition of checkers, improving their analysis engines etc."

"Klocwork does have a problem with true positives. It only found 30% of true positives in the Juliet test case."

"Now the only issue we have is that whenever we need to get the code we have to build it first. Then we can get the report."

"The main problem is that since it only parses the code, the warnings or the problems that are given as a result of the report can sometimes require a lot of effort to analyze."

More Klocwork cons

Pricing and Cost Advice

"It's a little bit expensive."

"With GitGuardian, we didn't need any middlemen."

"It could be cheaper. When GitHub secrets monitoring solution goes to general access and general availability, GitGuardian might be in a little bit of trouble from the competition, and maybe then they might lower their prices. The GitGuardian solution is great. I'm just concerned that they're not GitHub."

"You get what you pay for. It's one of the more expensive solutions, but it is very good, and the low false positive rate is a really appealing factor."

"It's not cheap, but it's not crazy expensive either."

"GitGuardian is on the pricier side."

"We don't have a huge number of users, but its yearly rate was quite reasonable when compared to other per-seat solutions that we looked at... Having a free plan for a small number of users was really great. If you're a small team, I don't see why you wouldn't want to get started with it."

"I am only aware of the base price. I do not know what happened with our purchasing team in discussions with GitGuardian. I was not privy to the overall contract, but in terms of the base MSRP price, I found it reasonable."

More GitGuardian Platform pricing and cost advice

"Klocwork should not to be quite so heavy handed on the licensing for very specific programs."

"The limitation that we have is that Klocwork is licensed to certain programs, and if you want to license them to other programs, you have to pay more money."

"When it comes to licensing, the solution has two packages, one for a fixed and the other for a floating server, with the former being more cost effective than the latter."

"Klocwork is still tight on their licensing. If Klocwork would loosen up on the licensing, and where the license could be used, and how many different programs could be run on it, then we have several development programs that I would love to be able to use it for going forward."

"There are other solutions on the market such as Microsoft Visual Studio. They have been adding more static code analysis features that come for free. It is getting better all the time. That is one of the possibilities is that we've been considering that we may stop using the Klocwork because it doesn't give us any added value."

"Licensing fees are paid annually, but they also have a perpetual license."

"The pricing for Klocwork is very competitive if you compare it from apple to apple. It has competitive pricing regarding the licensing model and the per-license cost. Klocwork isn't a high-end investment for anyone deploying it; even SMBs can afford it. The Klocwork cost per user would depend on the license type, so I'm unable to mention a ballpark figure because it would depend on the type of installation and how the deployment will be, and the nodes to give an accurate calculation or figure. The total price depends on the package, so my company could never publish pricing for Klocwork on the website. My team first collects information from potential clients on the deployment scenario, project environment, etc., before suggesting a package for Klocwork. My rating for Klocwork in terms of pricing is a five because of its flexible license models. There's a license model for every type of organization, whether small, midsize, or enterprise, so it's a five out of five for me."

"This solution offers competitive pricing."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

847,625 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

21%

Government

12%

Media Company

10%

Financial Services Firm

Educational Organization

36%

Manufacturing Company

20%

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about GitGuardian Internal Monitoring ?

It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...

See all answers

What is your experience regarding pricing and costs for GitGuardian Internal Monitoring ?

The pricing for GitGuardian is fair.

See all answers

What needs improvement with GitGuardian Internal Monitoring ?

We'd like to request a new GitGuardian feature that automates user onboarding and access control for code repositories. Ideally, when a user contributes to a repository, they would be automatically...

See all answers

What do you like most about Klocwork?

It's integrated into our CI, continuous integration.

See all answers

What is your experience regarding pricing and costs for Klocwork?

Klocwork is not expensive, but neither is it very cheap. It is less expensive than Coverity.

See all answers

What needs improvement with Klocwork?

Every product has room for improvement. Klocwork sometimes provides too many additional warnings which require expertise to manage. Follow-ups are often needed. The support for plugins also needs t...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs GitGuardian Platform

Compared 32% of the time

Snyk vs GitGuardian Platform

Compared 17% of the time

GitHub Advanced Security vs GitGuardian Platform

Compared 16% of the time

GitGuardian Public Monitoring vs GitGuardian Platform

Compared 15% of the time

Cycode vs GitGuardian Platform

Compared 9% of the time

More GitGuardian Platform Competitors

SonarQube Server (formerly SonarQube) vs Klocwork

Compared 36% of the time

Coverity vs Klocwork

Compared 29% of the time

Polyspace Code Prover vs Klocwork

Compared 13% of the time

Parasoft SOAtest vs Klocwork

Compared 3% of the time

Checkmarx One vs Klocwork

Compared 3% of the time

More Klocwork Competitors

Product Reports

Buyer's Guide

GitGuardian Platform

April 2025

Download GitGuardian Platform product report

Buyer's Guide

Klocwork

April 2025

Download Klocwork product report

Also Known As

GitGuardian Internal Monitoring

No data available

Overview

GitGuardian helps organizations detect and fix vulnerabilities in source code at every step of the software development lifecycle. With GitGuardian’s policy engine, security teams can monitor and enforce rules across their VCS, DevOps tools, and infrastructure-as-code configurations.

Widely adopted by developer communities, GitGuardian is used by more than 500,000 developers and is the #1 app in the security category on the GitHub Marketplace. GitGuardian is also trusted by leading companies, including Instacart, Genesys, Orange, Iress, Beyond Identity, NOW: Pensions, and Stedi.

GitGuardian Platform includes automated secrets detection and remediation. By reducing the risks of secrets exposure across the SDLC, GitGuardian helps software-driven organizations strengthen their security posture and comply with frameworks and standards.

Its detection engine is trained against more than a billion public GitHub commits every year, and it covers 350+ types of secrets such as API keys, database connection strings, private keys, certificates, and more.

GitGuardian brings security and development teams together with automated remediation playbooks and collaboration features to resolve incidents fast and in full. By pulling developers closer to the remediation process, organizations can achieve higher incident closing rates and shorter fix times.

The platform integrates across the DevOps toolchain, including native support for continuously scanning VCS platforms like GitHub, Gitlab, Azure DevOps and Bitbucket or CI/CD tools like Jenkins, CircleCI, Travis CI, GitLab pipelines, and many more. It also integrates with ticketing and messaging systems like Splunk, PagerDuty, Jira and Slack to support teams with their incident remediation workflows. GitGuardian is offered as a SaaS platform but can also be hosted on-premise for organizations operating in highly regulated industries or with strict data privacy requirements.

GitGuardian

Klocwork detects security, safety, and reliability issues in real-time by using this static code analysis toolkit that works alongside developers, finding issues as early as possible, and integrates with teams, supporting continuous integration and actionable reporting.

Perforce

Sample Customers

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake...

ACCESS Co Ltd, Risk-AI, Winbond Electronics, Bristol-Myers Squibb Pharmaceutical Research Institute, University of Southern California, Alebra Technologies, SIMULIA, Risk Management Solutions, Brigham Young University, SRD, HRL

Buyer's Guide

GitGuardian Platform vs. Klocwork

April 2025

Free Report: GitGuardian Platform vs. Klocwork

Find out what your peers are saying about GitGuardian Platform vs. Klocwork and other solutions. Updated: April 2025.

DOWNLOAD NOW

847,625 professionals have used our research since 2012.

See our GitGuardian Platform vs. Klocwork report.

See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.