GitHub to Launch 'Secret Protection' and 'Code Security' Products Soon

GitHub’s GHAS, a developer-first application testing solution built to improve code security in public and private repositories on GitHub, will now be available as two security products. 

Starting April 1, the company plans to make GitHub Advanced Security (GHAS) more accessible to developers and teams of all sizes. GHAS will be unbundled as two standalone security products, ‘Secret Protection’ and ‘Code Security’. The products can be purchased by GitHub Teams’ customers without an enterprise license. 

GitHub Secret Protection detects and prevents ‘secret leaks’ before they occur, using push protection, secret scaling, and AI-powered detection. On the other hand, GitHub Code Security helps identify and reverse vulnerabilities with code scaling, Copilot Autofix, security campaigns, and other such actions. 

GitHub said that development teams can adopt these two products independently, without committing to a bundled solution like GHAS. Secret Protection starts at $19 and Code Security at $30 per month per active committer. 

“Historically, GitHub has taken an integrated approach to application security, embedding security features such as code scanning, Copilot Autofix, secret scanning, and dependency management within GitHub Advanced Security,” said Katie Norton, research manager of DevSecOps and software supply chain security at IDC.

GitHub is also launching a free secret risk assessment for organisations starting April 1. 

This helps understand ‘secret leak exposure’ across GitHub, giving administrators and developers the ability to check the exposure of sensitive data across their organisation, as well as steps to secure their environments. This feature will be available without additional costs for organisations with a GitHub Team or an Enterprise plan. 

Recently, the company introduced Agent Mode for GitHub Copilot, giving its AI-powered coding assistant the ability to iterate on its own code, recognise errors, and fix them automatically. 

“Today, we are infusing the power of agentic AI into the GitHub Copilot experience, elevating Copilot from pair to peer programme,” wrote GitHub CEO Thomas Dohmke on X while announcing the launch.