Keep in mind that if the OP works in a corporate environment or work on any kind of "sensitive" work they'll mist likely never be allowed to host their code anywhere that is not inside their network.
I am not convinced that "on-site" is always more secure (in terms of http://en.wikipedia.org/wiki/Information_security). OP does not sound like they have a lot of infrastructure, then outsourcing your source control may be safer, in terms of the combination of ensuring both non-disclosure and availability.