# GitHub Advanced Security

## Security that moves at the speed of development

### Stop leaks before they start

[Explore Secret Protection](https://github.com/security/advanced-security/secret-protection?locale=en-US)

### Fix vulnerabilities in your code

[Explore Code Security](https://github.com/security/advanced-security/code-security?locale=en-US)

## Key Features

GitHub Advanced Security includes:

1. **Secret Protection** - Stop secret leaks as they happen.
2. **Code Security** - Identify and fix code vulnerabilities before they reach production.

### Write secure code at scale with AI-driven insights and automated fixes from GitHub Copilot Autofix.

### Find and fix vulnerabilities in real-time by integrating application security right into GitHub.

> *GitHub Advanced Security has solved the risk of leaked credentials. Now, developers are alerted to the problem before they push the code live.*  
> Florian Koch, Lead Developer at Deutsche Vermögensberatung

## Pricing

### GitHub Secret Protection
For teams serious about stopping secret leaks.
- **$19 USD** per active committer/month  
[Request a demo](http://github.com/security/advanced-security/demo?ref_cta=Request+demo&ref_loc=body_sp&ref_page=%2Fadvanced_security_lp&utm_campaign=Demo_utmroutercampaign&locale=en-US)

### GitHub Code Security
For teams committed to fixing vulnerabilities before production.
- **$30 USD** per active committer/month  
[Request a demo](https://github.com/security/advanced-security/demo?ref_cta=Request+demo&ref_loc=body_cs&ref_page=%2Fadvanced_security_lp&utm_campaign=Demo_utmroutercampaign&locale=en-US)

## Frequently Asked Questions

### What is GitHub Advanced Security?
GitHub Advanced Security (GHAS) encompasses GitHub’s application security products comprising GitHub Secret Protection and GitHub Code Security. GHAS adds cutting-edge tools for static analysis, software composition analysis, and secret scanning to the GitHub platform that developers already know and love.

### Why choose GitHub Advanced Security instead of a third-party AppSec product?
GitHub Advanced Security operates entirely within the native GitHub workflows that developers are accustomed to, allowing for easy remediation of vulnerabilities.

### What is DevSecOps?
DevSecOps refers to the integration of development, security, and operations tools necessary for developing software applications.

### What is AppSec?
Application security (AppSec) is the process of finding, fixing, and preventing security vulnerabilities in applications. GitHub Advanced Security provides AppSec tools for static application security testing (SAST).

### Can I use GitHub Advanced Security with Microsoft Azure DevOps?
Yes, GitHub Advanced Security is available as an [add-on](https://azure.microsoft.com/en-us/products/devops/github-advanced-security) for Azure DevOps.

### Where can I find case studies and reference customers?
Read our [customer stories](https://github.com/customer-stories?locale=en-US) to learn how customers like [Telus](https://github.com/customer-stories/telus?locale=en-US) and [KPMG](https://github.com/customer-stories/kpmg?locale=en-US) use GitHub Advanced Security to secure applications.