[{"data":1,"prerenderedAt":1153},["ShallowReactive",2],{"/blog/3rd-annual-bug-bounty-contest":3,"navigation-en-us":370,"banner-en-us":796,"footer-en-us":806,"blog-post-authors-en-us-Heather Simpson":1050,"blog-related-posts-en-us-3rd-annual-bug-bounty-contest":1065,"blog-promotions-en-us":1090,"next-steps-en-us":1143},{"id":4,"title":5,"authors":6,"body":8,"category":350,"date":351,"description":352,"extension":353,"externalUrl":354,"faq":354,"featured":355,"heroImage":356,"meta":357,"navigation":358,"path":359,"seo":360,"slug":364,"stem":365,"tags":366,"template":368,"updatedDate":354,"__hash__":369},"blogPosts/en-us/blog/3rd-annual-bug-bounty-contest.md","Our 3rd annual bug bounty contest: the swagtastic sequel to the sequel",[7],"Heather Simpson",{"type":9,"value":10,"toc":338},"minimark",[11,20,23,33,38,49,98,103,112,120,124,135,141,150,156,162,168,184,188,200,209,216,220,233,239,248,260,278,284,298,304,319,335],[12,13,14,15,19],"p",{},"Our favorite time of the year is here! That time of year when we ",[16,17,18],"em",{},"try"," to pause 😅 , reflect, and look back at the year’s accomplishments 🙌 .",[12,21,22],{},"For our Application\nSecurity\ngroup here at GitLab, this means we’re looking back on the efforts we’ve made to secure the GitLab application. A big part of securing our product comes from the contributions of extremely talented bug bounty hunters across the globe who work year round to seek and identify bugs in our platform. So far this year we had 670 submissions from 359 different reporters.",[12,24,25,26,32],{},"Thank you to everyone who has contributed this year via our ",[27,28,31],"a",{"href":29,"rel":30},"https://hackerone.com/gitlab",[],"HackerOne program",".",[34,35,37],"h2",{"id":36},"increased-bounties-across-all-bounty-ranges","🎉 Increased bounties across all bounty ranges 🎉",[12,39,40,44,45,48],{},[41,42,43],"strong",{},"New!"," ",[16,46,47],{},"Updated November 22, 2021"," We value the innovative and hugely impactful contributions made by security researchers through our bug bounty program and want to ensure we’re competitively rewarding and recognizing those contributions. Because of this, we’re raising our bounties for new reports submitted after 16:00 UTC November 22, 2021.",[50,51,52,80],"table",{},[53,54,55],"thead",{},[56,57,58,65,70,75],"tr",{},[59,60,62],"th",{"align":61},"center",[41,63,64],{},"Critical",[59,66,67],{"align":61},[41,68,69],{},"High",[59,71,72],{"align":61},[41,73,74],{},"Medium",[59,76,77],{"align":61},[41,78,79],{},"Low",[81,82,83],"tbody",{},[56,84,85,89,92,95],{},[86,87,88],"td",{"align":61},"$20,000 - $35,000",[86,90,91],{"align":61},"$5,000 - $15,000",[86,93,94],{"align":61},"$1,000 - $2500",[86,96,97],{"align":61},"$100 - $750",[99,100,102],"h3",{"id":101},"standardizing-bounty-calculations","Standardizing bounty calculations",[12,104,105,106,111],{},"Also of note, we’re working to further standardize the way we calculate both severities and bounties with our new ",[27,107,110],{"href":108,"rel":109},"https://gitlab-com.gitlab.io/gl-security/appsec/cvss-calculator/",[],"CVSS calculator","\ndeveloped by Application Security team member, Michael\nHenriksen. This calculator allows us to be more transparent and consistent in our award process. We plan to dive deeper into our HackerOne process\nand CVSS-based scoring method\nin a blog next quarter.",[12,113,114,115,119],{},"And, to celebrate our bug bounty hunting community and our ",[27,116,118],{"href":117},"/blog/gitlab-hackerone-bug-bounty-program-is-public-today/","third year as a public bug bounty program",", we’re holding a Bug Bounty contest starting November 1 until December 3, 2021!",[34,121,123],{"id":122},"three-year-anniversary-hacking-contest","Three-year anniversary hacking contest",[12,125,126,134],{},[41,127,128,129,133],{},"Our community hacking contest kicks off November 1 at 4 am UTC and closes on December 3, 2021 at 4 pm UTC. Just find and report a bug to our ",[27,130,132],{"href":29,"rel":131},[],"HackerOne bug bounty program"," and you're entered to win.","  The top contributor in the following categories will receive a sweet piece of custom GitLab swag:",[12,136,137,140],{},[41,138,139],{},"Most reputation points from submissions to our program."," Collect the most reputation points from submissions to our program and win!",[12,142,143,149],{},[41,144,145,146],{},"Most reputation points ",[16,147,148],{},"collected by a reporter new to our program",". Getting started with a new bug bounty program is difficult. This one goes out to all the new reporters out there.",[12,151,152,155],{},[41,153,154],{},"Best written report."," See above.\nA well-written report goes a long way to demonstrate impact and to help us reproduce the problem efficiently and accurately.",[12,157,158,161],{},[41,159,160],{},"Most innovative report.","\nSometimes reporters demonstrate true out-of-the-box thinking in their approach to finding bugs. We appreciate this creativity.",[12,163,164,167],{},[41,165,166],{},"Most impactful finding."," At the end of the day, these high-risk, high-reward vulnerabilities are what we’re all looking for.",[12,169,170,183],{},[41,171,172,173,177,178,32],{},"The winners will be announced on Dec. 14, 2021 via a ",[27,174,176],{"href":175},"/blog/","GitLab blog","\npost and on ",[27,179,182],{"href":180,"rel":181},"https://twitter.com/gitlab",[],"Twitter"," A contributor can win at most one category. Of course, regular bounties still apply to any of your findings.",[34,185,187],{"id":186},"need-some-inspiration","Need some inspiration?",[12,189,190,191,195,196,199],{},"We release new features on the 22nd of every month. Might we suggest ",[27,192,194],{"href":193},"/whats-new/","learning more about our release process"," and checking out the latest ",[27,197,198],{"href":193},"monthly release blog post"," for some inspiration? 😉",[12,201,202,203,205,206,208],{},"We release new features on the 22nd of every month. Might we suggest\n",[27,204,194],{"href":193}," and checking out the\nlatest ",[27,207,198],{"href":193}," for some\ninspiration? 😉",[12,210,211,212,32],{},"You can get tips on what our team looks for in bug bounty reports, by\nreading ",[27,213,215],{"href":214},"/blog/top-tips-for-better-bug-bounty-reports-and-a-hacker-contest/","“Our top tips for better bug bounty\nreports“",[99,217,219],{"id":218},"learn-from-some-of-the-best","Learn from some of the best",[12,221,222,223,228,229,32],{},"👉  In our blog, Riccardo Padovani, ",[27,224,227],{"href":225,"rel":226},"https://hackerone.com/rpadovani?type=user",[],"@rpadovani on\nHackerOne",", shared ",[27,230,232],{"href":231},"/blog/rpadovani-ask-a-hacker/#what-advice-would-you-give-someone-looking-to-start-participating-as-a-researcher-in-a-bug-bounty-program","advice they’d give someone looking to start participating as a researcher in a bug bounty program",[234,235,236],"blockquote",{},[12,237,238],{},"Take note of features that are interesting to you. Keep notes where you\ncan review what you have already done, and what you have already found. This will be useful if you step away and come back to a target. It takes time and it takes luck. Do not leave your day job until you are well on your way, and remember to set aside some money to pay your taxes when they are due!",[12,240,241,242,247],{},"🔎  In this clip from his ",[27,243,246],{"href":244,"rel":245},"https://youtu.be/SK_vuZCafZ4",[],"GitLab AMA",",\nRiccardo talks about how he approaches bug hunting on GitLab.",[249,250,253,254],"figure",{"className":251},[252],"video_container","\n  ",[255,256,44],"iframe",{"src":257,"frameBorder":258,"allowFullScreen":259},"https://www.youtube.com/embed/XRBeYXb9IlA","0","true",[12,261,262,263,267,268,273,274,32],{},"⏱  In this clip from his ",[27,264,246],{"href":265,"rel":266},"https://youtu.be/Km6toD6CAAw",[],", Alex\nChapman, ",[27,269,272],{"href":270,"rel":271},"https://hackerone.com/ajxchapman?type=user",[],"@ajxchapman on\nHackerOne",", talks about how he efficiently and effectively fits bug bounty hunting in with all of life’s other priorities. You can learn more about his approach in our blog post, ",[27,275,277],{"href":276},"/blog/how-i-use-gitlab-to-help-my-hack/","“How do bug bounty hunters use GitLab to help their hack?“",[249,279,253,281],{"className":280},[252],[255,282,44],{"src":283,"frameBorder":258,"allowFullScreen":259},"https://www.youtube.com/embed/hECvkY6LnUU",[12,285,286,287,292,293,32],{},"👀  See how William Bowling, ",[27,288,291],{"href":289,"rel":290},"https://hackerone.com/vakzz",[],"@vakzz on\nHackerOne",", responded to a question around how he chooses which programs and features he’ll focus his bug bounty hunting efforts on in a ",[27,294,297],{"href":295,"rel":296},"https://youtu.be/kw168DGAILk",[],"recent GitLab AMA",[249,299,253,301],{"className":300},[252],[255,302,44],{"src":303,"frameBorder":258,"allowFullScreen":259},"https://www.youtube.com/embed/eDwnTmuWFsE",[12,305,306,307,312,313,318],{},"🕵️  And, check out this video to see what top bug bounty hunter, contributor, and GitLab alumni, Ron Chan, (",[27,308,311],{"href":309,"rel":310},"https://hackerone.com/ngalog?type=user",[],"@ngalog"," on HackerOne) shares as his ",[27,314,317],{"href":315,"rel":316},"https://www.youtube.com/watch?v=5ORBcUo1jqY",[],"“Secret to finding critical security issues on\nGitLab”","?",[12,320,321,334],{},[16,322,323,324,328,329,333],{},"If you’re wondering what the custom GitLab swag might be you can check out ",[27,325,327],{"href":326},"/blog/twenty-twenty-through-a-bug-bounty-lens/","2020’s giveaway (and the winners)"," and peep ",[27,330,332],{"href":331},"/blog/bugs-bounties-and-cherry-browns/","what we gave away in 2019, and who won",". Know that we want you to contribute in style."," 😎",[12,336,337],{},"Happy hacking!",{"title":339,"searchDepth":340,"depth":340,"links":341},"",2,[342,346,347],{"id":36,"depth":340,"text":37,"children":343},[344],{"id":101,"depth":345,"text":102},3,{"id":122,"depth":340,"text":123},{"id":186,"depth":340,"text":187,"children":348},[349],{"id":218,"depth":345,"text":219},"security","2021-11-01","We’re running a bug bounty contest November 1 thru December 3. Find a bug and be entered to win some sweet custom swag. What’s better than a contest? Increased bounty ranges!","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749670997/Blog/Hero%20Images/BB-3rd-Anniversary-blog-header.png",{},true,"/en-us/blog/3rd-annual-bug-bounty-contest",{"ogTitle":5,"ogImage":356,"ogDescription":352,"ogSiteName":361,"noIndex":355,"ogType":362,"ogUrl":363,"title":5,"canonicalUrls":363,"description":352},"https://about.gitlab.com","article","https://about.gitlab.com/blog/3rd-annual-bug-bounty-contest","3rd-annual-bug-bounty-contest","en-us/blog/3rd-annual-bug-bounty-contest",[350,367],"bug bounty","BlogPost","P3FfVwuRhIurSAiFDC-SapxcUayryWNTvW3gZzzNIyE",{"logo":371,"freeTrial":376,"sales":381,"login":386,"items":391,"search":716,"minimal":747,"duo":766,"switchNav":775,"pricingDeployment":786},{"config":372},{"href":373,"dataGaName":374,"dataGaLocation":375},"/","gitlab logo","header",{"text":377,"config":378},"Get free trial",{"href":379,"dataGaName":380,"dataGaLocation":375},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":382,"config":383},"Request a demo",{"href":384,"dataGaName":385,"dataGaLocation":375},"/sales/?contact-topic=request-demo","sales",{"text":387,"config":388},"Sign in",{"href":389,"dataGaName":390,"dataGaLocation":375},"https://gitlab.com/users/sign_in/","sign in",[392,421,521,526,638,694],{"text":393,"config":394,"menu":396},"Platform",{"dataNavLevelOne":395},"platform",{"type":397,"columns":398},"cards",[399,405,413],{"title":393,"description":400,"link":401},"The intelligent orchestration platform for DevSecOps",{"text":402,"config":403},"Explore our Platform",{"href":404,"dataGaName":395,"dataGaLocation":375},"/platform/",{"title":406,"description":407,"link":408},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":409,"config":410},"Meet GitLab Duo",{"href":411,"dataGaName":412,"dataGaLocation":375},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":414,"description":415,"link":416},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":417,"config":418},"Learn more",{"href":419,"dataGaName":420,"dataGaLocation":375},"/why-gitlab/","why gitlab",{"text":422,"left":358,"config":423,"menu":425},"Product",{"dataNavLevelOne":424},"solutions",{"type":426,"link":427,"columns":431,"feature":500},"lists",{"text":428,"config":429},"View all Solutions",{"href":430,"dataGaName":424,"dataGaLocation":375},"/solutions/",[432,456,479],{"title":433,"description":434,"link":435,"items":440},"Automation","CI/CD and automation to accelerate deployment",{"config":436},{"icon":437,"href":438,"dataGaName":439,"dataGaLocation":375},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[441,445,448,452],{"text":442,"config":443},"CI/CD",{"href":444,"dataGaLocation":375,"dataGaName":442},"/solutions/continuous-integration/",{"text":406,"config":446},{"href":411,"dataGaLocation":375,"dataGaName":447},"gitlab duo agent platform - product menu",{"text":449,"config":450},"Source Code Management",{"href":451,"dataGaLocation":375,"dataGaName":449},"/solutions/source-code-management/",{"text":453,"config":454},"Automated Software Delivery",{"href":438,"dataGaLocation":375,"dataGaName":455},"Automated software delivery",{"title":457,"description":458,"link":459,"items":464},"Security","Deliver code faster without compromising security",{"config":460},{"href":461,"dataGaName":462,"dataGaLocation":375,"icon":463},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[465,469,474],{"text":466,"config":467},"Application Security Testing",{"href":461,"dataGaName":468,"dataGaLocation":375},"Application security testing",{"text":470,"config":471},"Software Supply Chain Security",{"href":472,"dataGaLocation":375,"dataGaName":473},"/solutions/supply-chain/","Software supply chain security",{"text":475,"config":476},"Software Compliance",{"href":477,"dataGaName":478,"dataGaLocation":375},"/solutions/software-compliance/","software compliance",{"title":480,"link":481,"items":486},"Measurement",{"config":482},{"icon":483,"href":484,"dataGaName":485,"dataGaLocation":375},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[487,491,495],{"text":488,"config":489},"Visibility & Measurement",{"href":484,"dataGaLocation":375,"dataGaName":490},"Visibility and Measurement",{"text":492,"config":493},"Value Stream Management",{"href":494,"dataGaLocation":375,"dataGaName":492},"/solutions/value-stream-management/",{"text":496,"config":497},"Analytics & Insights",{"href":498,"dataGaLocation":375,"dataGaName":499},"/solutions/analytics-and-insights/","Analytics and insights",{"title":501,"type":426,"items":502},"GitLab for",[503,509,515],{"text":504,"config":505},"Enterprise",{"icon":506,"href":507,"dataGaLocation":375,"dataGaName":508},"Building","/enterprise/","enterprise",{"text":510,"config":511},"Small Business",{"icon":512,"href":513,"dataGaLocation":375,"dataGaName":514},"Work","/small-business/","small business",{"text":516,"config":517},"Public Sector",{"icon":518,"href":519,"dataGaLocation":375,"dataGaName":520},"Organization","/solutions/public-sector/","public sector",{"text":522,"config":523},"Pricing",{"href":524,"dataGaName":525,"dataGaLocation":375,"dataNavLevelOne":525},"/pricing/","pricing",{"text":527,"config":528,"menu":530},"Resources",{"dataNavLevelOne":529},"resources",{"type":426,"link":531,"columns":535,"feature":628},{"text":532,"config":533},"View all resources",{"href":534,"dataGaName":529,"dataGaLocation":375},"/resources/",[536,569,595],{"title":537,"items":538},"Getting started",[539,544,549,554,559,564],{"text":540,"config":541},"Install",{"href":542,"dataGaName":543,"dataGaLocation":375},"/install/","install",{"text":545,"config":546},"Quick start guides",{"href":547,"dataGaName":548,"dataGaLocation":375},"/get-started/","quick setup checklists",{"text":550,"config":551},"Learn",{"href":552,"dataGaLocation":375,"dataGaName":553},"https://university.gitlab.com/","learn",{"text":555,"config":556},"Product documentation",{"href":557,"dataGaName":558,"dataGaLocation":375},"https://docs.gitlab.com/","product documentation",{"text":560,"config":561},"Best practice videos",{"href":562,"dataGaName":563,"dataGaLocation":375},"/getting-started-videos/","best practice videos",{"text":565,"config":566},"Integrations",{"href":567,"dataGaName":568,"dataGaLocation":375},"/integrations/","integrations",{"title":570,"items":571},"Discover",[572,577,581,586,590],{"text":573,"config":574},"Customer success stories",{"href":575,"dataGaName":576,"dataGaLocation":375},"/customers/","customer success stories",{"text":578,"config":579},"Blog",{"href":175,"dataGaName":580,"dataGaLocation":375},"blog",{"text":582,"config":583},"Demo Hub",{"href":584,"dataGaName":585,"dataGaLocation":375},"/demo-hub/","demo hub",{"text":587,"config":588},"The Source",{"href":589,"dataGaName":580,"dataGaLocation":375},"/the-source/",{"text":591,"config":592},"Remote",{"href":593,"dataGaName":594,"dataGaLocation":375},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":596,"items":597},"Connect",[598,603,608,613,618,623],{"text":599,"config":600},"GitLab Services",{"href":601,"dataGaName":602,"dataGaLocation":375},"/services/","services",{"text":604,"config":605},"Contribute",{"href":606,"dataGaName":607,"dataGaLocation":375},"https://contributors.gitlab.com","contribute",{"text":609,"config":610},"Community",{"href":611,"dataGaName":612,"dataGaLocation":375},"/community/","community",{"text":614,"config":615},"Forum",{"href":616,"dataGaName":617,"dataGaLocation":375},"https://forum.gitlab.com/","forum",{"text":619,"config":620},"Events",{"href":621,"dataGaName":622,"dataGaLocation":375},"/events/","events",{"text":624,"config":625},"Partners",{"href":626,"dataGaName":627,"dataGaLocation":375},"/partners/","partners",{"config":629,"title":632,"text":633,"link":634},{"background":630,"textColor":631},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":635,"config":636},"Read the latest",{"href":193,"dataGaName":637,"dataGaLocation":375},"whats new",{"text":639,"config":640,"menu":642},"Company",{"dataNavLevelOne":641},"company",{"type":426,"columns":643},[644],{"items":645},[646,651,657,659,664,669,674,679,684,689],{"text":647,"config":648},"About",{"href":649,"dataGaName":650,"dataGaLocation":375},"/company/","about",{"text":652,"config":653,"footerGa":656},"Jobs",{"href":654,"dataGaName":655,"dataGaLocation":375},"/jobs/","jobs",{"dataGaName":655},{"text":619,"config":658},{"href":621,"dataGaName":622,"dataGaLocation":375},{"text":660,"config":661},"Leadership",{"href":662,"dataGaName":663,"dataGaLocation":375},"/company/team/e-group/","leadership",{"text":665,"config":666},"Handbook",{"href":667,"dataGaName":668,"dataGaLocation":375},"https://handbook.gitlab.com/","handbook",{"text":670,"config":671},"Investor relations",{"href":672,"dataGaName":673,"dataGaLocation":375},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":675,"config":676},"Trust Center",{"href":677,"dataGaName":678,"dataGaLocation":375},"/security/","trust center",{"text":680,"config":681},"AI Transparency Center",{"href":682,"dataGaName":683,"dataGaLocation":375},"/ai-transparency-center/","ai transparency center",{"text":685,"config":686},"Newsletter",{"href":687,"dataGaName":688,"dataGaLocation":375},"/company/contact/#contact-forms","newsletter",{"text":690,"config":691},"Press",{"href":692,"dataGaName":693,"dataGaLocation":375},"/press/","press",{"text":695,"config":696,"menu":697},"Contact us",{"dataNavLevelOne":641},{"type":426,"columns":698},[699],{"items":700},[701,706,711],{"text":702,"config":703},"Talk to sales",{"href":704,"dataGaName":705,"dataGaLocation":375},"/sales/","talk to sales",{"text":707,"config":708},"Support portal",{"href":709,"dataGaName":710,"dataGaLocation":375},"https://support.gitlab.com/hc/en-us","support portal",{"text":712,"config":713},"Customer portal",{"href":714,"dataGaName":715,"dataGaLocation":375},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":717,"login":718,"suggestions":725},"Close",{"text":719,"link":720},"To search repositories and projects, login to",{"text":721,"config":722},"gitlab.com",{"href":389,"dataGaName":723,"dataGaLocation":724},"search login","search",{"text":726,"default":727},"Suggestions",[728,730,734,736,740,744],{"text":406,"config":729},{"href":411,"dataGaName":406,"dataGaLocation":724},{"text":731,"config":732},"Code Suggestions (AI)",{"href":733,"dataGaName":731,"dataGaLocation":724},"/solutions/code-suggestions/",{"text":442,"config":735},{"href":444,"dataGaName":442,"dataGaLocation":724},{"text":737,"config":738},"GitLab on AWS",{"href":739,"dataGaName":737,"dataGaLocation":724},"/partners/technology-partners/aws/",{"text":741,"config":742},"GitLab on Google Cloud",{"href":743,"dataGaName":741,"dataGaLocation":724},"/partners/technology-partners/google-cloud-platform/",{"text":745,"config":746},"Why GitLab?",{"href":419,"dataGaName":745,"dataGaLocation":724},{"freeTrial":748,"mobileIcon":753,"desktopIcon":758,"secondaryButton":761},{"text":749,"config":750},"Start free trial",{"href":751,"dataGaName":380,"dataGaLocation":752},"https://gitlab.com/-/trials/new/","nav",{"altText":754,"config":755},"Gitlab Icon",{"src":756,"dataGaName":757,"dataGaLocation":752},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":754,"config":759},{"src":760,"dataGaName":757,"dataGaLocation":752},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":762,"config":763},"Get Started",{"href":764,"dataGaName":765,"dataGaLocation":752},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":767,"mobileIcon":771,"desktopIcon":773},{"text":768,"config":769},"Learn more about GitLab Duo",{"href":411,"dataGaName":770,"dataGaLocation":752},"gitlab duo",{"altText":754,"config":772},{"src":756,"dataGaName":757,"dataGaLocation":752},{"altText":754,"config":774},{"src":760,"dataGaName":757,"dataGaLocation":752},{"button":776,"mobileIcon":781,"desktopIcon":783},{"text":777,"config":778},"/switch",{"href":779,"dataGaName":780,"dataGaLocation":752},"#contact","switch",{"altText":754,"config":782},{"src":756,"dataGaName":757,"dataGaLocation":752},{"altText":754,"config":784},{"src":785,"dataGaName":757,"dataGaLocation":752},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":787,"mobileIcon":792,"desktopIcon":794},{"text":788,"config":789},"Back to pricing",{"href":524,"dataGaName":790,"dataGaLocation":752,"icon":791},"back to pricing","GoBack",{"altText":754,"config":793},{"src":756,"dataGaName":757,"dataGaLocation":752},{"altText":754,"config":795},{"src":760,"dataGaName":757,"dataGaLocation":752},{"title":797,"titleMobile":798,"button":799,"config":804},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":417,"config":800},{"href":801,"dataGaName":802,"dataGaLocation":803},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":805,"disabled":355},"release",{"data":807},{"text":808,"source":809,"edit":815,"contribute":820,"config":825,"items":829,"minimal":1039},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":810,"config":811},"View page source",{"href":812,"dataGaName":813,"dataGaLocation":814},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":816,"config":817},"Edit this page",{"href":818,"dataGaName":819,"dataGaLocation":814},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":821,"config":822},"Please contribute",{"href":823,"dataGaName":824,"dataGaLocation":814},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":180,"facebook":826,"youtube":827,"linkedin":828},"https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[830,877,931,975,1007],{"title":522,"links":831,"subMenu":846},[832,836,841],{"text":833,"config":834},"View plans",{"href":524,"dataGaName":835,"dataGaLocation":814},"view plans",{"text":837,"config":838},"Why Premium?",{"href":839,"dataGaName":840,"dataGaLocation":814},"/pricing/premium/","why premium",{"text":842,"config":843},"Why Ultimate?",{"href":844,"dataGaName":845,"dataGaLocation":814},"/pricing/ultimate/","why ultimate",[847],{"title":848,"links":849},"Contact Us",[850,853,855,857,862,867,872],{"text":851,"config":852},"Contact sales",{"href":704,"dataGaName":385,"dataGaLocation":814},{"text":707,"config":854},{"href":709,"dataGaName":710,"dataGaLocation":814},{"text":712,"config":856},{"href":714,"dataGaName":715,"dataGaLocation":814},{"text":858,"config":859},"Status",{"href":860,"dataGaName":861,"dataGaLocation":814},"https://status.gitlab.com/","status",{"text":863,"config":864},"Terms of use",{"href":865,"dataGaName":866,"dataGaLocation":814},"/terms/","terms of use",{"text":868,"config":869},"Privacy statement",{"href":870,"dataGaName":871,"dataGaLocation":814},"/privacy/","privacy statement",{"text":873,"config":874},"Cookie preferences",{"dataGaName":875,"dataGaLocation":814,"id":876,"isOneTrustButton":358},"cookie preferences","ot-sdk-btn",{"title":422,"links":878,"subMenu":887},[879,883],{"text":880,"config":881},"DevSecOps platform",{"href":404,"dataGaName":882,"dataGaLocation":814},"devsecops platform",{"text":884,"config":885},"AI-Assisted Development",{"href":411,"dataGaName":886,"dataGaLocation":814},"ai-assisted development",[888],{"title":889,"links":890},"Topics",[891,896,901,906,911,916,921,926],{"text":892,"config":893},"CICD",{"href":894,"dataGaName":895,"dataGaLocation":814},"/topics/ci-cd/","cicd",{"text":897,"config":898},"GitOps",{"href":899,"dataGaName":900,"dataGaLocation":814},"/topics/gitops/","gitops",{"text":902,"config":903},"DevOps",{"href":904,"dataGaName":905,"dataGaLocation":814},"/topics/devops/","devops",{"text":907,"config":908},"Version Control",{"href":909,"dataGaName":910,"dataGaLocation":814},"/topics/version-control/","version control",{"text":912,"config":913},"DevSecOps",{"href":914,"dataGaName":915,"dataGaLocation":814},"/topics/devsecops/","devsecops",{"text":917,"config":918},"Cloud Native",{"href":919,"dataGaName":920,"dataGaLocation":814},"/topics/cloud-native/","cloud native",{"text":922,"config":923},"AI for Coding",{"href":924,"dataGaName":925,"dataGaLocation":814},"/topics/devops/ai-for-coding/","ai for coding",{"text":927,"config":928},"Agentic AI",{"href":929,"dataGaName":930,"dataGaLocation":814},"/topics/agentic-ai/","agentic ai",{"title":932,"links":933},"Solutions",[934,936,938,943,947,950,954,957,959,962,965,970],{"text":466,"config":935},{"href":461,"dataGaName":466,"dataGaLocation":814},{"text":455,"config":937},{"href":438,"dataGaName":439,"dataGaLocation":814},{"text":939,"config":940},"Agile development",{"href":941,"dataGaName":942,"dataGaLocation":814},"/solutions/agile-delivery/","agile delivery",{"text":944,"config":945},"SCM",{"href":451,"dataGaName":946,"dataGaLocation":814},"source code management",{"text":892,"config":948},{"href":444,"dataGaName":949,"dataGaLocation":814},"continuous integration & delivery",{"text":951,"config":952},"Value stream management",{"href":494,"dataGaName":953,"dataGaLocation":814},"value stream management",{"text":897,"config":955},{"href":956,"dataGaName":900,"dataGaLocation":814},"/solutions/gitops/",{"text":504,"config":958},{"href":507,"dataGaName":508,"dataGaLocation":814},{"text":960,"config":961},"Small business",{"href":513,"dataGaName":514,"dataGaLocation":814},{"text":963,"config":964},"Public sector",{"href":519,"dataGaName":520,"dataGaLocation":814},{"text":966,"config":967},"Education",{"href":968,"dataGaName":969,"dataGaLocation":814},"/solutions/education/","education",{"text":971,"config":972},"Financial services",{"href":973,"dataGaName":974,"dataGaLocation":814},"/solutions/finance/","financial services",{"title":527,"links":976},[977,979,981,983,986,988,991,993,995,997,999,1001,1003,1005],{"text":540,"config":978},{"href":542,"dataGaName":543,"dataGaLocation":814},{"text":545,"config":980},{"href":547,"dataGaName":548,"dataGaLocation":814},{"text":550,"config":982},{"href":552,"dataGaName":553,"dataGaLocation":814},{"text":555,"config":984},{"href":557,"dataGaName":985,"dataGaLocation":814},"docs",{"text":578,"config":987},{"href":175,"dataGaName":580,"dataGaLocation":814},{"text":989,"config":990},"What's new",{"href":193,"dataGaName":637,"dataGaLocation":814},{"text":573,"config":992},{"href":575,"dataGaName":576,"dataGaLocation":814},{"text":591,"config":994},{"href":593,"dataGaName":594,"dataGaLocation":814},{"text":599,"config":996},{"href":601,"dataGaName":602,"dataGaLocation":814},{"text":604,"config":998},{"href":606,"dataGaName":607,"dataGaLocation":814},{"text":609,"config":1000},{"href":611,"dataGaName":612,"dataGaLocation":814},{"text":614,"config":1002},{"href":616,"dataGaName":617,"dataGaLocation":814},{"text":619,"config":1004},{"href":621,"dataGaName":622,"dataGaLocation":814},{"text":624,"config":1006},{"href":626,"dataGaName":627,"dataGaLocation":814},{"title":639,"links":1008},[1009,1011,1013,1015,1017,1019,1023,1028,1030,1032,1034],{"text":647,"config":1010},{"href":649,"dataGaName":641,"dataGaLocation":814},{"text":652,"config":1012},{"href":654,"dataGaName":655,"dataGaLocation":814},{"text":660,"config":1014},{"href":662,"dataGaName":663,"dataGaLocation":814},{"text":665,"config":1016},{"href":667,"dataGaName":668,"dataGaLocation":814},{"text":670,"config":1018},{"href":672,"dataGaName":673,"dataGaLocation":814},{"text":1020,"config":1021},"Sustainability",{"href":1022,"dataGaName":1020,"dataGaLocation":814},"/sustainability/",{"text":1024,"config":1025},"Diversity, inclusion and belonging (DIB)",{"href":1026,"dataGaName":1027,"dataGaLocation":814},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":675,"config":1029},{"href":677,"dataGaName":678,"dataGaLocation":814},{"text":685,"config":1031},{"href":687,"dataGaName":688,"dataGaLocation":814},{"text":690,"config":1033},{"href":692,"dataGaName":693,"dataGaLocation":814},{"text":1035,"config":1036},"Modern Slavery Transparency Statement",{"href":1037,"dataGaName":1038,"dataGaLocation":814},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1040},[1041,1044,1047],{"text":1042,"config":1043},"Terms",{"href":865,"dataGaName":866,"dataGaLocation":814},{"text":1045,"config":1046},"Cookies",{"dataGaName":875,"dataGaLocation":814,"id":876,"isOneTrustButton":358},{"text":1048,"config":1049},"Privacy",{"href":870,"dataGaName":871,"dataGaLocation":814},[1051],{"id":1052,"title":7,"body":354,"config":1053,"content":1055,"description":354,"extension":1059,"meta":1060,"navigation":358,"path":1061,"seo":1062,"stem":1063,"__hash__":1064},"blogAuthors/en-us/blog/authors/heather-simpson.yml",{"template":1054},"BlogAuthor",{"name":7,"config":1056},{"headshot":1057,"ctfId":1058},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659488/Blog/Author%20Headshots/gitlab-logo-extra-whitespace.png","hsimpson","yml",{},"/en-us/blog/authors/heather-simpson",{},"en-us/blog/authors/heather-simpson","4CpsZWXsBE_aB4RLpF20WPoTR1QnmwDhrVLV8WUGGTk",[1066,1074,1082],{"title":1067,"description":1068,"heroImage":1069,"category":350,"date":1070,"authors":1071,"slug":1073,"externalUrl":354},"How GitLab tracks vulnerabilities through refactors and reformatting","Learn how GitLab's improved Scope+Offset fingerprinting keeps vulnerability tracking stable across comments, blank lines, and reformatting.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[1072],"Julian Thome","improved-scope-offset-fingerprinting",{"title":1075,"description":1076,"heroImage":1069,"category":350,"date":1077,"authors":1078,"slug":1081,"externalUrl":354},"GitLab Secrets Manager adds ESO, Terraform, API support","Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.","2026-08-06",[1079,1080],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1083,"description":1084,"heroImage":1085,"category":350,"date":1086,"authors":1087,"slug":1089,"externalUrl":354},"Secure every commit to production with Claude and GitLab","Claude Security catches vulnerabilities inside a coding session. GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle. ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[1088],"Alisa Ho","claude-security-and-gitlab",{"promotions":1091},[1092,1106,1118,1129],{"id":1093,"categories":1094,"header":1096,"text":1097,"button":1098,"image":1103},"ai-modernization",[1095],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":1099,"config":1100},"Get your AI maturity score",{"href":1101,"dataGaName":1102,"dataGaLocation":580},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":1104},{"src":1105},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1107,"categories":1108,"header":1110,"text":1097,"button":1111,"image":1115},"devops-modernization",[1109,915],"product","Are you just managing tools or shipping innovation?",{"text":1112,"config":1113},"Get your DevOps maturity score",{"href":1114,"dataGaName":1102,"dataGaLocation":580},"/assessments/devops-modernization-assessment/",{"config":1116},{"src":1117},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1119,"categories":1120,"header":1121,"text":1097,"button":1122,"image":1126},"security-modernization",[350],"Are you trading speed for security?",{"text":1123,"config":1124},"Get your security maturity score",{"href":1125,"dataGaName":1102,"dataGaLocation":580},"/assessments/security-modernization-assessment/",{"config":1127},{"src":1128},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1130,"paths":1131,"header":1134,"text":1135,"button":1136,"image":1141},"github-azure-migration",[1132,1133],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":1137,"config":1138},"See how GitLab compares to GitHub",{"href":1139,"dataGaName":1140,"dataGaLocation":580},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1142},{"src":1117},{"header":1144,"blurb":1145,"button":1146,"secondaryButton":1151},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":1147,"config":1148},"Get your free trial",{"href":1149,"dataGaName":380,"dataGaLocation":1150},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":851,"config":1152},{"href":704,"dataGaName":385,"dataGaLocation":1150},1786803741649]