Enabling public monitoring for your enterprise

Start detecting secrets your enterprise members leak in public repositories outside your enterprise's boundaries.

Who can use this feature?

Enterprise owners and enterprise security managers can enable public monitoring for their enterprise.

In this article

Prerequisites

Before enabling public monitoring, ensure your enterprise has:

  • GitHub Advanced Security or GitHub Secret Protection enabled
  • For GitHub Enterprise Cloud with data residency enterprises, we strongly recommend at least one verified domain configured, since it's the only method available to receive attributed alerts. See Verifying or approving a domain for your enterprise.

Note

A verified domain isn't required to enable public monitoring. For enterprises not using GitHub Enterprise Cloud with data residency, configuring one is optional, but it provides full attribution coverage. See Public monitoring for secret scanning.

Enabling public monitoring

  1. Navigate to your enterprise. For example, from the Enterprises page on GitHub.com.
  2. At the top of the page, click Settings.
  3. In the left sidebar, click Advanced Security.
  4. Under "Additional Settings," toggle Public monitoring.