🛡️ NGC CommitGuard - AI-Powered Secret Detection for VS Code

🛡️ Block API keys, passwords & secrets before they reach Git. Zero config, 27+ patterns including OpenAI, Anthropic, AWS, GitHub, Stripe and more.

⚡ Real-time scanning · 🔒 100% offline · 💰 One-time payment option · 🆓 Free tier available

NextGenCode - www.nextgencode.dev

⭐ New extension? Be the first to leave a 5-star review - takes 30 seconds!

🎯 What Is This?

NGC CommitGuard is a VS Code extension that blocks commits containing secrets like API keys, passwords, and tokens. Think of it as your vigilant security guard that never sleeps.

⚡ See It In Action

Watch how NGC blocks an AWS key before it reaches Git - Interactive menu gives you 5 options

📹 Full Demo GIF Coming Soon - Shows complete workflow from detection to blocking

🚀 Why NGC CommitGuard?

Better than manual checks. Smarter than regex. Easier than Husky.

✨ What Makes It Special

• 🔍 27+ Detection Patterns (PRO) - AWS, Google Cloud, GitHub tokens, Stripe keys, JWT, OpenAI, Anthropic, database URLs, and more
• ⚡ Real-Time Protection - Scans files as you save them
• 🎯 Zero Configuration - Works instantly after install
• 🔒 Git Hook Integration - Automatically blocks dangerous commits
• 💬 Interactive Menu - Choose how to handle each detection
• 🎨 Beautiful Dashboard - See stats and license details
• 💰 One-Time Payment - €79 lifetime, no subscriptions — or €49/year, €7/month
• 🔐 100% Offline - RSA licensing, zero telemetry, your code never leaves your machine

🚀 Get Started in 60 Seconds

▶️ Install NGC CommitGuard from Marketplace - FREE tier available

It works automatically! Just save a file with a test secret:

// test.js
const apiKey = "AKIAIOSFODNN7EXAMPLE"; // NGC will catch this!

Try to commit → NGC blocks it → Interactive menu appears → You're protected! ✅

👉 Saved your first leak? ⭐⭐⭐⭐⭐ Rate NGC on Marketplace - 30 seconds, huge help!

� Ready for PRO?

Full protection for individuals and teams:

👉 ⚡ 7-Day Trial - €0.99 — Try PRO risk-free!

👉 💸 Monthly - €7 · 📅 Annual - €49 · 📎 Lifetime - €79

📦 Installation

From VS Code Marketplace

1. Open VS Code Extensions (Ctrl+Shift+X)
2. Search for "NGC CommitGuard"
3. Click Install
4. Reload window if prompted

Or install directly:

• VS Code Marketplace
• Open VSX Registry

Manual Installation (Advanced)

�️ PRO

Start with a 7-Day Trial (€0.99) or choose the plan that fits your workflow.

🎯 PRO Patterns Include:

// test.js
const apiKey = "AKIAIOSFODNN7EXAMPLE";

💚 Enjoying NGC CommitGuard?

Your review helps 1000s of developers discover this tool!

⭐⭐⭐⭐⭐ Write a quick review on VS Code Marketplace - Takes 30 seconds

130+ developers already using NGC. Your honest feedback makes a difference!

🔒 Upgrade to PRO →

• AWS, Google Cloud, Azure credentials
• GitHub, GitLab, Bitbucket tokens
• Stripe, PayPal, Twilio API keys
• Database connection strings
• Private keys (RSA, SSH)
• JWT tokens
• Credit card numbers
• And much more!
• 🎨 Custom patterns - Add your own regex patterns
• 📊 Advanced statistics and security reports
• 💜 Support independent development

👉 Upgrade to PRO - from €0.99 trial

🎯 Quick Start

1. Automatic Protection

NGC CommitGuard works automatically! Just save your files, and it will scan them in real-time.

2. Manual Scan

• Press Ctrl+Shift+P / Cmd+Shift+P
• Type: NGC: Scan Workspace
• View results in the sidebar

3. Activate PRO (Optional)

• Press Ctrl+Shift+P / Cmd+Shift+P
• Type: NGC: Activate PRO License
• Enter your license key

⚙️ Configuration

The extension works out of the box, but you can customize it:

Settings (Ctrl+, → Search "NGC CommitGuard"):

{
  // Enable/disable extension
  "ngc-commitguard.enabled": true,
  
  // Exclude directories from scanning
  "ngc-commitguard.excludePatterns": [
    "**/node_modules/**",
    "**/dist/**",
    "**/.git/**"
  ],
  
  // PRO ONLY: Custom detection patterns
  "ngc-commitguard.customPatterns": [
    {
      "name": "Company API Key",
      "pattern": "MYAPP_[A-Z0-9]{32}",
      "severity": "high",
      "description": "Internal API key format"
    }
  ]
}

Per-Workspace Settings:

Create .vscode/settings.json in your project:

{
  "ngc-commitguard.excludePatterns": [
    "tests/fixtures/**"
  ]
}

See docs/USER_GUIDE.md for full configuration options.

📸 How It Works - Step by Step

Step 1: Automatic Real-Time Detection

NGC scans files as you save them. No manual action needed - completely automatic! ⚡

Step 2: Git Commit Blocked with Interactive Menu

Try to commit a secret? NGC blocks and shows interactive menu with 5 options.
You choose how to handle each detection - whitelist, fix, or abort.

Step 3: Command Palette Integration

Access all features via Command Palette (Ctrl+Shift+P).
Scan workspace, activate license, manage whitelist - all in one place.

Step 4: Easy Upgrade to PRO (Optional)

FREE scans .env only. PRO scans everything - 27+ advanced patterns for AWS, GitHub, Stripe, OpenAI, Anthropic, JWT, and more.
🚀 Start with a 7-Day Trial for €0.99 to try all PRO features!

� Documentation

• User Guide - Installation, activation, features, troubleshooting
• Development Guide - Build, test, contribute, architecture
• Changelog - Version history and updates

Helpful Links

• GitHub: Mattzey/ngc-commitguard
• Issues: Report a bug
• Support: nextgencode.dev/#contact
• Purchase PRO: nextgencode.dev/commitguard/pricing | Manually scan all files in workspace | | NGC: Scan Current File | Scan only the currently open file | | NGC: Activate PRO License | Enter your PRO license key | | NGC: View License Info | Show license details (PRO only) | | NGC: Upgrade to PRO | View pricing and purchase options | | NGC: Manage Whitelist | Add/remove whitelist entries | | NGC: Clear Whitelist | Remove all whitelist entries |

Tip: Type "NGC" in command palette to see all commands

📱 Other

• Credit Card Numbers
• Email + Password combinations
• IP Addresses
• Generic OAuth secrets

🚀 How It Works

Real-Time File Scanning

1. You save a file → Extension scans immediately
2. Secret detected → Notification appears
3. You decide → Fix it or whitelist it

Git Commit Protection

1. You run git commit → Pre-commit hook activates
2. Staged files scanned → All changes checked
3. Secret found → Interactive menu appears:

🛡️ NGC CommitGuard - Secrets Detected!

Found 2 secret(s) in 1 file(s)

What would you like to do?

[1] 🚫 Ignore Once - Commit anyway (DANGEROUS)
[2] ✅ Add to Whitelist - Always allow this
[3] 🔄 Edit Files - Fix the issue now
[4] 📋 View in VS Code - Open detections panel
[5] ❌ Abort Commit - Cancel and review (RECOMMENDED)

Your choice [1-5]:

4. You choose option 5 → Commit blocked, you're safe!

Whitelist Management

When to use whitelist:

• Test data that looks like secrets (but isn't)
• Example code in documentation
• Public demo credentials
• False positives

Whitelist file: .ngc-whitelist.json in your repo root

{
  "version": "1.0",
  "entries": [
    {
      "type": "file",
      "path": "examples/demo.js",
      "reason": "Fake secrets for documentation"
    }
  ]
}

Tip: Commit .ngc-whitelist.json to share with your team! { "type": "file", "file": "tests/fixtures/credentials.json", "reason": "Test fixture" } ] }

#### Whitelist Commands:
- `NGC: Manage Whitelist` - View, edit, import/export
- `NGC: Clear Whitelist` - Remove all entries (with confirmation)

See [docs/whitelist-example.json](https://github.com/Mattzey/ngc-commitguard/blob/HEAD/docs/whitelist-example.json) for a complete example.

---

## 🎯 Use Cases

### 1. **Individual Developers**
- Protect personal projects from accidental leaks
- Learn security best practices
- Affordable one-time payment

### 2. **Teams & Enterprises**
- Enforce security policies across the team
- Custom patterns for internal secrets
- Prevent costly data breaches

### 3. **Open Source Projects**
- Keep your public repos clean
- Protect contributor credentials
- Professional security validation

---

## 🤝 Why Choose NGC CommitGuard?

| What You Get | NGC CommitGuard | Husky + Scripts | GitGuardian |
|--------------|-----------------|-----------------|-------------|
| **VS Code Integration** | ✅ Native UI | ❌ Terminal only | ⚠️ CLI tool |
| **Real-time Scanning** | ✅ As you type | ❌ Commit-time only | ⚠️ CI/CD only |
| **Interactive Menu** | ✅ 5 options | ❌ Block or allow | ❌ Automated |
| **Setup Time** | ⚡ 60 seconds | ⏰ 30+ minutes | ⏰ Complex |
| **Custom Patterns** | ✅ PRO (easy GUI) | ⚠️ Manual regex | ✅ (enterprise) |
| **Works Offline** | ✅ 100% local | ✅ | ❌ Cloud required |
| **Pricing** | 💰 €79 lifetime | Free (DIY) | 💰💰 $15+/dev/month |

---

## � Why Not Just Use Husky?

| Feature | NGC CommitGuard | Husky + Manual Scripts |
|---------|-----------------|------------------------|
| **SePerfect For

### 🧑‍💻 Individual Developers
- Protect side projects and portfolios
- Learn security best practices
- One-time payment, use forever

### 👥 Teams & Enterprises
- Enforce security policies across team
- Add custom patterns for internal secrets
- Prevent costly data breaches
- Share whitelist with `.ngc-whitelist.json`

### 🌍 Open Source Maintainers
- Keep public repos clean
- Protect contributor credentials
- Professional commit validation
- Build trust with contributors

🔒 Why Trust NGC CommitGuard?

Security & Privacy First

✅ 100% Offline Scanning - Your code NEVER leaves your machine
✅ Zero Telemetry - We don't collect usage data or analytics
✅ Open Source - Review the code yourself on GitHub
✅ RSA-2048 Encryption - Bank-grade license validation
✅ GDPR Compliant - EU privacy standards
✅ MIT Licensed - Free to audit and verify

Built by Professionals

👨‍💻 NextGenCode - Cybersecurity & Full Stack Development

• 10+ years in software development
• Security-focused developer
• Maintains multiple open-source projects
• View Portfolio →

Money-Back Guarantee

💰 30-Day Full Refund - No questions asked
Not satisfied with PRO? Email us within 30 days for instant refund.

Active Development

📅 Last Updated: May 2026
🐛 Bug Reports: Responded within 24-48 hours
🚀 New Features: Regular updates
⭐ Roadmap: View upcoming features

What Users Say

"Saved me from leaking AWS keys 3 times already. Worth every penny!"
— Developer at Tech Startup

"Zero-config security. Finally something that just works!"
— Freelance Full Stack Developer

"Caught a Stripe key I forgot in a config file. Extension paid for itself immediately."
— SaaS Founder

Want to add your testimonial? Email us

❓ Frequently Asked Questions

Do I need PRO to block git commits?

No! FREE version blocks commits with secrets too. PRO adds 27+ advanced patterns (AWS, GitHub, Stripe, OpenAI, Anthropic, JWT, database URLs, etc.), scans ALL file types, and includes Detection Trends Chart for visual security analytics.

Will this slow down my commits?

No. Scanning takes <100ms even on large files. You won't notice any delay.

What if I already use Husky?

NGC CommitGuard works alongside Husky! Or replace Husky entirely - NGC hooks are easier to configure.

Can I customize detection patterns?

PRO only. Add your company's API key formats via settings (custom regex patterns).

Is my code sent to your servers?

NEVER. 100% offline scanning. Your code never leaves your machine. Zero telemetry. Only license validation (just the key, not your code).

Why not just pay €79 once?

Absolutely! The Lifetime plan is the best value — pay once, use forever with all updates included. But we also offer:

• €0.99 7-day trial to test everything risk-free
• €7/month for flexible billing
• €49/year for annual savings

Pick what fits your workflow. All plans include the same PRO features.

What's the cheapest way to try PRO?

Start with the 7-Day Trial for €0.99 — full PRO access for 7 days, no auto-renewal.

Annual/Monthly: Yes, managed by Stripe. Cancel anytime in Stripe portal (no penalties).
Lifetime: One-time payment, never expires, all future updates included forever.
7-Day Trial: One-time payment. After 7 days, choose to upgrade to a paid plan or stay on FREE.

Can I use PRO on multiple machines?

Yes! One license works on unlimited devices. Just enter the same license key on each machine.

What if I'm not satisfied?

30-day money-back guarantee. Email mattemzet@gmail.com for instant refund, no questions asked.

How do I get support?

• FREE users: GitHub Issues (community support)
• PRO users: Email mattemzet@gmail.com (24-48h response guaranteed)

Is this better than GitGuardian?

GitGuardian is enterprise-focused ($15+/dev/month, cloud-based). NGC CommitGuard is developer-focused (€79 lifetime, 100% offline). We're perfect for individuals and small teams who want powerful protection without monthly costs.

More questions? See Full FAQ

🌟 Support & Feedback

• 🐛 Bug Reports: GitHub Issues
• 💡 Feature Requests: GitHub Discussions
• 📧 Email: mattemzet@gmail.com
• 🌐 Website: www.nextgencode.dev

💜 Support This Project

NGC CommitGuard is built and maintained by NextGenCode (solo developer). If it saved you from a credential leak:

1. ⭐⭐⭐⭐⭐ Leave a 5-star review ← 30 seconds, massive impact!
2. 🛡️ Upgrade to PRO - €0.99 trial or €79 lifetime
3. ⭐ Star this repo on GitHub - Show your support
4. 📣 Share with your team - Help others avoid $10k AWS bills
5. 🐛 Report bugs - Make it better for everyone

Why reviews matter: 0 reviews = people think "is this safe?" Your honest feedback helps others discover NGC!

Every PRO license funds:

• 🚀 New detection patterns & features
• 🎨 UI/UX improvements
• 🐛 Bug fixes and stability
• 📖 Better documentation
• 💡 Community feature requests

📝 License

MIT License - See LICENSE file for details �️ For Developers

� Support & Feedback

Need Help?

• 📖 User Guide: docs/USER_GUIDE.md
• 🐛 Bug Reports: GitHub Issues
• 💡 Feature Requests: GitHub Discussions
• 📧 Email Support: nextgencode.dev/#contact
• 🌐 Website: nextgencode.dev

👨‍💻 About NextGenCode

Full Stack Developer & Security Enthusiast

• 🌐 Website: nextgencode.dev
• 🐙 GitHub: @Mattzey
• 💼 LinkedIn: Matteo NextGenCode
• 📧 Email: mattemzet@gmail.com

Expertise

• 🔒 Cybersecurity - Secure code analysis, vulnerability detection

• 🌐 Full Stack - React, Node.js, Python, TypeScript

• ⛓️ Blockchain - Smart contracts and Web3 development

• 🔧 DevOps - CI/CD, automation, security tooling

• NextGenCoin (NGC) - Revolutionary cryptocurrency

• ChainSec Auditing - Smart contract audits

• More projects