Go Back

GitHub Advanced Security

github.com

GitHub Advanced Security provides tools for developers to secure their code, protect against secret exposures, and manage software supply chain risks directly within the GitHub platform. It offers features like static analysis, secret scanning, and dependency monitoring to help teams identify and remediate vulnerabilities early in the development lifecycle.

Features
0/31
See all

No common features found

Pricing
Tiered
See all

Free

$0.00 per user
  • Unlimited public/private repositories
  • Dependabot security and version updates
  • 2,000 CI/CD minutes/month (Free for public repositories)
  • 500MB of Packages storage (Free for public repositories)
  • Issues & Projects
  • Community support

Team

$4.00 per user
Popular
  • Everything included in Free, plus...
  • Access to GitHub Codespaces
  • Repository rules
  • Multiple reviewers in pull requests
  • Draft pull requests
  • Code owners
  • Required reviewers
  • Pages and Wikis
  • Environment deployment branches and secrets
  • 3,000 CI/CD minutes/month (Free for public repositories)
  • 2GB of Packages storage (Free for public repositories)
  • Web-based support

Enterprise

$21.00 per user
  • Everything included in Team, plus...
  • Data residency
  • Enterprise Managed Users
  • User provisioning through SCIM
  • Enterprise Account to centrally manage multiple organizations
  • Environment protection rules
  • Repository rules
  • Audit Log API
  • SOC1, SOC2, type 2 reports annually
  • FedRAMP Tailored Authority to Operate (ATO)
  • SAML single sign-on
  • Advanced auditing
  • GitHub Connect
  • 50,000 CI/CD minutes/month (Free for public repositories)
  • 50GB of Packages storage (Free for public repositories)
Rationale

GitHub Advanced Security is a security solution for code repositories, focusing on vulnerability detection, secret scanning, and dependency management. It does not offer AI-powered file organization, conversational AI for file management, or features related to general file editing, renaming, or content-based queries for documents. Its scope is entirely within software development and code security, which is distinct from the file organization and management described for Dynbox.

already.dev