A sandbox is only as closed as what an AI agent can reach
Stuck in an evaluation with no way out, an AI agent escaped in an hour through the one service on its allowlist. Here's the gap that opened.
Read PostBrowse articles that include the security tag
Featured post
Recent posts
Security
How GitLab tracks vulnerabilities through refactors and reformatting
Learn how GitLab's improved Scope+Offset fingerprinting keeps vulnerability tracking stable across comments, blank lines, and reformatting.
Security
GitLab Secrets Manager adds ESO, Terraform, API support
Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.
Security
Secure every commit to production with Claude and GitLab
Claude Security catches vulnerabilities inside a coding session. GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle.
Security
When a version bump breaks your build, GitLab fixes it
Automatically upgrade dependencies, adapt code for breaking changes, and route changes for approval — only GitLab does it natively, with full context.
Security
GitLab Duo Security Review spots logic flaws scanners miss
Use AI-driven security reasoning to detect authorization gaps, business-logic errors, and race conditions while code is still under review.
Security
One vulnerability view: From scanner coverage to AI governance
As AI writes more code, security must keep pace. GitLab is one platform for all scanner coverage, detection, and remediation, with AI governance over agents.
Security Labs
Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
GitLab’s Vulnerability Research team has uncovered a new Python supply chain attack targeting PyPI, deploying the Shai-Hulud worm to steal credentials from CI/CD systems.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert