# Companies using GitHub Advanced Security

We found 1,454 companies that use GitHub Advanced Security. 925 of them name it in their own job posts, and the rest through employees' public profiles. Hiring for it is growing, with 933 job posts naming it from October 2025 to August 2026. Security Engineer roles mention it most.

Data as of November 9, 2026. Source: Sumble.

## Which companies name GitHub Advanced Security in the most job posts?

The companies with the most job posts naming GitHub Advanced Security are Blue Yonder (70), Microsoft (57) and GitHub (54). Of the five companies in the table, GitHub has the most employees who list it on their profiles: 32.

| Company | Job posts | People | Recent job post |
|---|---:|---:|---|
| [Blue Yonder](https://sumble.com/orgs/blue-yonder) | 70 | 0 | "…React.js, Jenkins, GitHub Actions, SonarQube, Codacy, Checkmarx, GitHub Advance Security, Black Duck Hub, BlazeMeter, Artifactory, Ansible, Docker, etc." (Sr Software Engineer, Oct 22, 2026) |
| [Microsoft](https://sumble.com/orgs/microsoft) | 57 | 31 | "…teams to lead customer conversations spanning GitHub Copilot, GitHub Enterprise, GitHub Advanced Security, modern application development, DevOps, and AI-powered developer productivity." (Developer & GitHub Sales, Technical Enablement and Community Lead, Oct 22, 2026) |
| [GitHub](https://sumble.com/orgs/github) | 54 | 32 | "Develop expertise in GitHub Advanced Security, understanding its capabilities and articulating GitHub's approach to application security to customers…" (Senior Solutions Engineer, Nov 7, 2026) |
| [Wells Fargo](https://sumble.com/orgs/wells-fargo) | 51 | 1 | "Proven experience with GitHub Advanced Security (GHAS), including secret scanning capabilities" (Senior Information Security Engineer, Oct 28, 2026) |
| [Harmonie Mutuelle](https://sumble.com/orgs/harmonie-mutuelle) | 28 | 0 | "DevSecOps : Jfrog Xray, Github Dependabot" (IT developer m/f, May 5, 2026) |

## Is hiring for GitHub Advanced Security growing?

A larger share of job posts mentioned GitHub Advanced Security from June to August 2026 than from March to May: 0.65 in every 10,000 job posts, up from 0.49. August 2026 was its highest month since October 2025, at 0.70.

| Month | Job posts naming it | All job posts | Per 10,000 job posts |
|---|---:|---:|---:|
| Oct 2025 | 53 | 1,413,673 | 0.37 |
| Nov 2025 | 71 | 1,822,119 | 0.39 |
| Dec 2025 | 40 | 1,236,103 | 0.32 |
| Jan 2026 | 77 | 1,828,002 | 0.42 |
| Feb 2026 | 62 | 1,856,647 | 0.33 |
| Mar 2026 | 90 | 1,850,711 | 0.49 |
| Apr 2026 | 71 | 1,728,886 | 0.41 |
| May 2026 | 106 | 1,821,509 | 0.58 |
| Jun 2026 | 112 | 1,909,496 | 0.59 |
| Jul 2026 | 123 | 1,815,180 | 0.68 |
| Aug 2026 | 128 | 1,835,698 | 0.70 |

## How many companies named GitHub Advanced Security in a job post for the first time in recent months?

136 companies named GitHub Advanced Security in a job post for the first time from June to August 2026, against 90 from March to May. That brings the companies naming it for the first time since October 2025 to 344, through August 2026.

| Period | Companies naming it in a job post for the first time |
|---|---:|
| March to May 2026 | 90 |
| June to August 2026 | 136 |
| October 2025 to August 2026 | 344 |

Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.

## How do we know which companies use GitHub Advanced Security?

Job posts carry most of the evidence for GitHub Advanced Security: 64% of these companies name it in posts they wrote. 529 come from employees' profiles alone.

| How we know | Companies | Share |
|---|---:|---:|
| Job posts name GitHub Advanced Security | 925 | 64% |
| Employees' profiles list GitHub Advanced Security | 529 | 36% |

## What size are the companies that use GitHub Advanced Security?

Companies with 50 to 999 employees are the largest group of GitHub Advanced Security users, at 36%. 219 of its companies have fewer than 50 employees.

| Size | Share | Typical tech page |
|---|---:|---:|
| Under 50 employees | 15% | 22% |
| 50 to 999 | 36% | 38% |
| 1,000 to 5,000 | 20% | 17% |
| Over 5,000 | 29% | 23% |

## Where are GitHub Advanced Security companies based?

52% of GitHub Advanced Security companies are based in the United States. Its companies are based in 71 countries and territories.

| Country | Companies | Share | Typical tech page |
|---|---:|---:|---:|
| United States | 721 | 52% | 43% |
| India | 93 | 6.7% | 6.9% |
| United Kingdom | 65 | 4.7% | 6.4% |
| Canada | 50 | 3.6% | 3.6% |
| France | 49 | 3.5% | 4.6% |
| Australia | 47 | 3.4% | 2.2% |

## Which teams work with GitHub Advanced Security?

GitHub Advanced Security work is spread across teams. Security leads, at 25 companies. Information security and product security teams come next, at 19 and 14 companies.

| Team | Companies |
|---|---:|
| Security | 25 |
| Information security | 19 |
| Product security | 14 |
| DevOps | 12 |
| Application security | 11 |
| Cybersecurity | 11 |

## Which roles mention GitHub Advanced Security most?

GitHub Advanced Security is showing up in more Application Security Engineer job posts: 31 from June to August 2026, up from 16 from March to May. Security Engineer posts naming it numbered 37 from March to May 2026 and 57 from June to August.

| Role | Share | Oct 2025 to Aug 2026 | Mar to May 2026 | Jun to Aug 2026 |
|---|---:|---:|---:|---:|
| Security Engineer | 14% | 132 | 37 | 57 |
| Software Engineer | 9.3% | 87 | 24 | 31 |
| Application Security Engineer | 9.1% | 85 | 16 | 31 |
| DevSecOps Engineer | 9% | 84 | 23 | 34 |
| DevOps Engineer | 8.3% | 77 | 19 | 32 |
| Product Security | 4.3% | 40 | 12 | 15 |

## Which companies started naming GitHub Advanced Security in job posts recently?

From April to August 2026, 174 companies with 50 or more employees posted their first job naming GitHub Advanced Security: 77 commercial, 47 mid-market and 50 enterprise. Among the new mid-market companies, 3Pillar posted the most jobs naming it: 8.

| Group | Company | Job posts, April to August 2026 |
|---|---|---:|
| Commercial | [METRICA Perú](https://sumble.com/orgs/metrica-andina) | 8 |
| Commercial | [Gruve](https://sumble.com/orgs/gruveai) | 3 |
| Commercial | [New Charter](https://sumble.com/orgs/new-charter-technologies) | 3 |
| Commercial | [Citizant](https://sumble.com/orgs/citizant) | 3 |
| Commercial | [KPMG Ignition Tokyo](https://sumble.com/orgs/kpmg-ignition-tokyo) | 3 |
| Mid-market | [3Pillar](https://sumble.com/orgs/3pillar-global) | 8 |
| Mid-market | [VERISIGN](https://sumble.com/orgs/verisign) | 5 |
| Mid-market | [Axpo Group](https://sumble.com/orgs/axpo-holding) | 4 |
| Mid-market | [Iris Software Inc.](https://sumble.com/orgs/iris-software) | 3 |
| Mid-market | [Zeta Global](https://sumble.com/orgs/zeta-global) | 3 |
| Enterprise | [Wipro](https://sumble.com/orgs/wipro) | 5 |
| Enterprise | [Vanguard](https://sumble.com/orgs/vanguard) | 4 |
| Enterprise | [Celestica](https://sumble.com/orgs/celestica) | 3 |
| Enterprise | [Waters Corporation](https://sumble.com/orgs/waters) | 3 |
| Enterprise | [Pfizer](https://sumble.com/orgs/pfizer) | 2 |

Companies that named GitHub Advanced Security in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.

## What else do GitHub Advanced Security companies use?

Compared with companies of the same size, GitHub Advanced Security companies stand out for using Dependabot and Semgrep. Among the tools listed here, Snyk is the most widely used, at 36% of GitHub Advanced Security companies.

| Tool | Companies | Also name it | Typical | Times as common |
|---|---:|---:|---:|---:|
| Dependabot | 51 | 10% | 0.14% | 70 times |
| Semgrep | 46 | 9% | 0.24% | 37 times |
| Snyk | 185 | 36% | 1.4% | 25 times |
| Vanta | 50 | 9.8% | 0.43% | 23 times |
| Drata | 37 | 7.2% | 0.33% | 22 times |
| Wiz | 106 | 21% | 1.1% | 19 times |
| Trivy | 57 | 11% | 0.59% | 19 times |
| SonarCloud | 36 | 7% | 0.4% | 18 times |

Shares are out of the 512 companies whose job posts name GitHub Advanced Security, not counting firms whose job posts name almost every technology.

## Which project themes come up in GitHub Advanced Security job posts?

50 job posts naming GitHub Advanced Security describe Cloud Cost Optimization work, the most common theme after broad digital transformation. After that comes Cloud Migration, with 50.

| Project theme | Job posts |
|---|---:|
| Digital Transformation | 328 |
| Cloud Cost Optimization | 50 |
| Cloud Migration | 50 |
| Security Infrastructure Modernization | 32 |

- "Consolidate security tools using GitHub Advanced Security, Microsoft Defender for Cloud, and Azure Key Vault" (Kaufman Rossin, Senior Software Engineer, Oct 16, 2026)

## About this data

Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.

Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.

Sumble has a free plan, and the same data is available through its API and MCP server.

A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.

Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.