No more typing reviews! Try our Samantha, our new voice AI agent.

GitHub vs Onapsis comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitHub
Ranking in Application Security Tools
4th
Average Rating
8.8
Reviews Sentiment
6.5
Number of Reviews
102
Ranking in other categories
Version Control (2nd), Agile and DevOps Services (2nd)
Onapsis
Ranking in Application Security Tools
39th
Average Rating
8.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of GitHub is 2.7%, up from 0.9% compared to the previous year. The mindshare of Onapsis is 0.9%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
GitHub2.7%
Onapsis0.9%
Other96.4%
Application Security Tools
 

Featured Reviews

Abdulmunafz Mct - PeerSpot reviewer
Full Stack Developer at Sri Krishna Arts and Science
Daily workflows have become streamlined as I manage projects, learn from clones, and host sites
The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing. The setup is frustrating because GitHub could add a repository with pre-installed packages or something since I need to install packages in VS Code before pushing and maintain it in the codebase. Git packages need to be installed manually, and if that was already in a GitHub repository, that would be much better. GitHub packages can be installed previously for the project upon the project requirement, and that is the thing I wanted to add here. That would be good. According to governance and security, I recently heard about some security issues in GitHub. I think that could be centralized and should consider those security issues and clear them. The AI capabilities there include Copilot or something else. I recently heard about security issues, but I do not know about it clearly. However, if security has been more tightened, it will be better.
it_user19113 - PeerSpot reviewer
SAP Security Consulting Engineer at a computer software company with 10,001+ employees
It checks for and reports vulnerabilities on all SAP systems at the OS, DB and SAP levels.
I really love how Onapsis X1 is able to check SAP for threats; the reporting was something I felt could be improved. It could be a little easier to use and to publish for consumption with a larger audience. Currently, it takes some background jobs and additional work to get them published. It was difficult to get interactive reports to the different levels of the business. I would have to download them and send them out, or save them on my SharePoint site and send out a weekly link. In the version of the product I was usingת I had to log into the X1 system directly to get to the reports. Reporting would be used by several different areas of the organizationת many of whom would be at the director and executive levels. It would not make sense to have them log directly into the tool to look at these reports. Add to this that there was only one ID that could be used to log in and view the reports. To solve this problemת I had to run all of the different reports; executive summary down to detailed analysis and then export them out to my security team SharePoint site. To automate this processת a batch script was created to run after the X1 analyzed the systems. The script would pull the reports and place them in the SharePoint site automatically, but it was a bit of a hassle to get set up.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best feature is the ability to track the history of all code changes, and it's easy to use. Additionally, as it's open source, anyone can use that feature resulting in distributed development. This opens the door to collaboration with different code and developer, feature, and master branches of development."
"The tool is valuable because it helps us work in a distributed environment with multiple people across different locations and time zones. We have a common repository that everyone works on, which would be tough to manage manually. GitHub helps us maintain this single source of truth. Everyone can check out their own branches, which is important for our branching strategies. We can fork, check out feature branches, work on our code, and merge back into parent branches for deployment. This is crucial when multiple people are working on the same codebase."
"GitHub provides the SFH key to protect our passwords and our connection, it secures our repositories so any attempt to access from outside the company is blocked, and we also have control of our product versions in GitHub, which is very useful."
"GitHub is the best tool for source repositories."
"We can make a private repository."
"The collaboration is really great, it has really worked and has really helped me a lot, and I find that it is a very important feature."
"The product helps our team collaborate across different locations."
"GitHub is specifically designed for repositories and it works perfectly for storing code; we use it for our source code repository."
"It has hardened our SAP system by providing details of vulnerabilities in our SAP landscape."
 

Cons

"GitHub should work on enhancing its search capability. The tool should add some more features and functionalities."
"I would want to see some form of code security scanning implemented."
"The project management sector really needs some improvement for GitHub. I don't know if GitHub made sense for me as a project manager."
"The solution can improve by adding video guides, official guides, or short courses that cater to beginners who are new to the system. These resources could offer step-by-step guidance on how to use GitHub, including common procedures such as pulling and committing. Currently, many of us have to resort to searching for information on how to do these tasks via Google. An official guide provided by GitHub itself would be a valuable asset to newcomers and would save them time and effort."
"GitHub's issue management could be improved a little from an organization standpoint. It would be helpful to have the ability to organize a work board or a backlog more comprehensively. For organizations migrating to GitHub from arbitrary systems, it's a little bit of a headache to move on to that system."
"Many times we have to do some cherry-pick changes manually, which is not ideal."
"The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing."
"I cannot recall coming across any shortcomings of the product."
"Reporting was something I felt could be improved. It could be a little easier to use and to publish for consumption with a larger audience."
 

Pricing and Cost Advice

"I am using the free version of the solution. However, there are some costs my organization pays."
"The licensing model for GitHub is user-based. Whenever the new developer joins we have to get a new license and register their ID. The overall price of the solution is reasonable."
"We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."
"I use the free version of the tool."
"The licensing model from GitHub is very clear."
"The basic licensing model is free, and if you need to have technical support and such things, then it does cost something. You only need to pay extra if you need technical support."
"Regarding pricing, I'd rate it eight out of ten. It's decent and not too expensive, and small businesses can also afford it. With AWS taking CodeCommit out of the market, I don't see many competitors for small companies in terms of GitHub."
"The price of this solution is reasonable."
Information not available
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Outsourcing Company
9%
Marketing Services Firm
8%
Manufacturing Company
7%
Energy/Utilities Company
18%
Construction Company
13%
University
13%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business43
Midsize Enterprise14
Large Enterprise55
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for GitHub?
I have been using GitHub for free, and recently I got a free education offer, such as educational resources. I believe it is GitHub Pro or something similar. I have been using the educational offer...
What needs improvement with GitHub?
The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing. The setup is frustrating because GitHub could add a repository with...
What is your primary use case for GitHub?
I use GitHub for maintaining repositories, as it is easy to maintain freelance projects and to store college projects. I will be using it for hosting by providing a GitHub link. For one of my freel...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
Sony, US Army, Westinghouse, AXA. Galicia, Daimler, Roche, Levi's, Siemens, ABB, KPMG, Mercardo Libre, Verizon, Bacardi, Adgas, Sicpa, Whirlpool, Leaseplan
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: July 2026.
908,800 professionals have used our research since 2012.