GitSnitch is officially listed on the GitHub Marketplace. You can now find it in the Security category, sitting alongside the other tools teams use to keep their GitHub organizations safe, and install it straight from GitHub in a couple of clicks.

GitSnitch listed in the Security category of the GitHub Marketplace

Why this matters

Until now, the only way to find GitSnitch was to already know about it. You had to land on gitsnitch.app, sign in, and then go install the GitHub App. That works, but it’s not where people go when they’re looking for something to watch their org.

The Marketplace is. If you run a GitHub organization and you’re browsing for security tooling, that’s where you look, and now GitSnitch is there.

It also means GitSnitch went through GitHub’s review process. Getting listed involved verifying the app, publishing a privacy policy and terms of service, and filling out GitHub’s transparency disclosures, which you can read on the listing itself. None of that changes how the product works, but it’s one more reason you can trust what you’re installing.

What you get

The GitSnitch App listing on the GitHub Marketplace

GitSnitch installs as a GitHub App and watches your organization in real time. Once it’s connected, it alerts you when something worth knowing about happens:

  • Exposed secrets. API keys, tokens, private keys, and other credentials caught on every push, so you can rotate them before someone else finds them.
  • Access changes. New admins on a repo or the org, flagged the moment they’re granted.
  • Branch protection changes. Rules that get weakened or removed, with who did it and what changed.
  • Force pushes. History rewritten on a branch, surfaced right away instead of weeks later.
  • Suspicious activity. Dormant admin accounts that suddenly wake up, and after-hours commits on sensitive repos.

Everything lands on a live dashboard, classified by severity, where you can triage, acknowledge, and resolve findings with a full audit trail.

Access is read-only. GitSnitch never writes to your repos or changes your settings, and it doesn’t store your source code.

Free to start

The Marketplace listing is the free plan. It covers one organization, up to 10 repositories, and 7 days of alert history, which is plenty to see what’s actually happening in your org. If you need more repos, longer history, or multiple orgs, GitSnitch Pro is available at gitsnitch.app.

Try it

Head to the GitSnitch listing on the GitHub Marketplace, click Add, and pick the organization you want to monitor. It takes about a minute, and you’ll start seeing events on your dashboard as soon as they happen.

If you try it, I’d genuinely like to hear what you think, what’s useful, and what’s missing. Feedback from early users is shaping what gets built next.