Track organization-wide security risk in one dashboard
For enterprises with many top-level groups, GitLab now aggregates vulnerabilities and a single risk score across your entire organization.
Read PostBrowse articles that include the security tag
Featured post
Recent posts
Product
GitLab Transcend: Speed you can trust, all the way to production
Every new GitLab innovation announced at Transcend: what shipped, what's coming, and how to get started.
Security Labs
DeepSeek-Reasonix: How a poisoned config can hijack an AI coding agent
GitLab's Threat Research Group found a flaw, ConfigPoisoning, that runs attacker code when a developer views a file's diff in DeepSeek-Reasonix.
Security
Securing the software factory at machine speed
The foundation for agentic software development must evolve with AI models, continuously shortening the path from detection to verified remediation.
Security
When to use SAST versus an LLM security scanner
AI-based review and SAST catch different classes of bugs and both have benefits. Here's how to decide which one runs where, and when your team needs both.
Security
GitLab Dedicated: Compliance for a new regulatory era
Streamline compliance with GitLab Dedicated. Gain isolation, control, and audit readiness for DORA, NIS2, and GDPR in a single-tenant SaaS environment.
Security
Prepare for the Cyber Resilience Act's 24-hour reporting deadline
Under the Cyber Resilience Act, manufacturers have 24 hours to report an actively exploited vulnerability in their product. See how GitLab helps you answer fast.
Security Labs
Critical remote code execution in vm2, a widely used Node.js sandbox library
GitLab's Threat Research Group found a critical sandbox escape in vm2 that runs attacker code using the library's own documented configuration.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert