AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 1574 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
GitLab, founded in 2015, is a large (2,000+ employee) DevOps platform delivered as a single application spanning development, security, and operations.
Known CVEs (1574)42 newAbout this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can t…
GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticat…
What it does
GitLab is an orchestration platform for the entire software lifecycle, combining planning, source control, and CI/CD in one place. It runs security scanning, policies, and approvals inside the pipeline so findings appear in merge requests and audit evidence is generated as changes move. The platform applies the same gates to human and AI agent changes, with every agent action recorded in the audit trail.
Strengths
Planning, source control, and CI/CD in one platform
Security scanning, policies, and approvals run inside the pipeline
Findings land in the merge request
Audit evidence writes itself as the change moves
Policies, approvals, and scanning apply to human and agent changes alike
Every agent action shows up in the audit trail
Pricing & packaging
GitLab Flex allows one annual commitment across seat-based licenses and usage-based credits without re-procurement. A free trial is available.
News about GitLab (6)Where this comes fromItems from GitLab's own public feeds — changelog, blog, GitHub releases or status page — that name GitLab in the headline or summary. News from GitLab that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthen…
