[{"data":1,"prerenderedAt":1014},["ShallowReactive",2],{"/blog/the-security-tightrope":3,"navigation-en-us":229,"banner-en-us":657,"footer-en-us":667,"blog-post-authors-en-us-Heather Simpson":912,"blog-related-posts-en-us-the-security-tightrope":927,"blog-promotions-en-us":951,"next-steps-en-us":1004},{"id":4,"title":5,"authors":6,"body":8,"category":209,"date":210,"description":211,"extension":212,"externalUrl":213,"faq":213,"featured":214,"heroImage":215,"meta":216,"navigation":217,"path":218,"seo":219,"slug":222,"stem":223,"tags":224,"template":227,"updatedDate":213,"__hash__":228},"blogPosts/en-us/blog/the-security-tightrope.md","The security tightrope: balancing security with ease-of-use",[7],"Heather Simpson",{"type":9,"value":10,"toc":203},"minimark",[11,26,32,38,49,65,70,73,77,80,90,93,113,122,132,135,145,148,152,156,159,162,172,176,180,184,188],[12,13,14,15,20,21,25],"p",{},"We sat down with GitLab security engineer Shawn Sichak to talk about the challenging act of balancing user experience (convenience!) with the friction that’s introduced when trying to keep something secure.\n",[16,17],"img",{"alt":18,"src":19},"Shawn Sichak Headshot","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399045/blog/Content%20Images/ssichakbw.png"," ",[22,23,24],"strong",{},"Name:"," Shawn Sichak",[12,27,28,31],{},[22,29,30],{},"Title:"," Security Engineer, Security Operations",[12,33,34,37],{},[22,35,36],{},"How long have you been at GitLab?",": I joined October 2018",[12,39,40,20,43],{},[22,41,42],{},"GitLab handle:",[44,45,48],"a",{"href":46,"rel":47},"https://gitlab.com/ssichak",[],"@ssichak",[12,50,51,20,54,59,60],{},[22,52,53],{},"Connect with Shawn:",[44,55,58],{"href":56,"rel":57},"https://www.linkedin.com/in/shawnsichak",[],"LinkedIn"," / ",[44,61,64],{"href":62,"rel":63},"https://twitter.com/shawnsichak/",[],"Twitter",[66,67,69],"h4",{"id":68},"tell-us-what-you-do-here-at-gitlab","Tell us what you do here at GitLab:",[12,71,72],{},"As part of the Security Operations team, I’m involved in events ranging from incident response and log analysis, to the development of tooling and automation to help contribute to and improve the security of the GitLab products and GitLab.com services.",[66,74,76],{"id":75},"whats-the-most-challenging-or-rewarding-aspect-of-your-role-there-is-a-balancing-act-in-security-between-user-experience-convenience-and-the-friction-introduced-while-trying-to-keep-something-secure-friction-creates-drag-and-drag-slows-progress-you-want-to-help-keep-people-and-the-company-as-secure-as-possible-without-unnecessarily-getting-in-their-way-or-slowing-down-their-work","What’s the most challenging or rewarding aspect of your role? There is a balancing act in security between user experience (convenience!) and the friction introduced while trying to keep something secure. Friction creates drag, and drag slows progress. You want to help keep people and the company as secure as possible without unnecessarily getting in their way or slowing down their work.",[12,78,79],{},"I find that challenge incredibly interesting. When you are able to develop automation or other methods of enabling people to do the right (secure) thing by default, it’s a very rewarding feeling.",[66,81,83,84,89],{"id":82},"and-what-are-the-top-2-3-initiatives-youre-currently-focused-on-similar-to-my-colleague-and-fellow-security-engineer-jayson-salazars-response-ive-been-working-on-developing-and-implementing-new-ideas-and-tooling-around-helping-our-team-gain-deeper-visibility-into-more-of-the-domains-here-at-gitlab","And, what are the top 2-3 initiatives you’re currently focused on? Similar to my colleague and fellow security engineer ",[44,85,88],{"href":86,"rel":87},"https://about.gitlab.com/blog/the-cloud-native-all-remote-security-challenge/",[],"Jayson Salazar's response",", I’ve been working on developing and implementing new ideas and tooling around helping our team gain deeper visibility into more of the domains here at GitLab.",[12,91,92],{},"We are moving towards a more proactive approach to security response, where automation can help us perform actions in a consistent and repeatable manner, helping the Security team scale. We are laying the groundwork now for much bigger things to come by aggregating, analyzing, and alerting on many diverse data sources so that the outputs can then be fed into further automated response pipelines.",[66,94,96,97,101,102,106,107,112],{"id":95},"what-is-the-most-significant-piece-of-security-advice-you-could-provide-to-a-colleague-or-friend-its-pretty-simple-and-common-advice-so-common-that-paul-alexander-and-alex-cite-it-as-their-go-to-security-advice-but-not-heeded-often-enough-utilize-unique-passwords-per-service-and-set-up-a-password-manager-to-help-generate-store-and-access-them-as-needed-also-enabling-two-factor-authentication-2fa-everywhere-it-is-available-every-additional-step-you-take-to-make-it-more-difficult-for-an-attacker-will-significantly-decrease-the-chance-of-your-accounts-being-compromised","What is the most significant piece of security advice you could provide to a colleague or friend? It’s pretty simple and common advice (so common that ",[44,98,100],{"href":99},"/blog/ask-gitlab-security-paul-harrison/","Paul",", ",[44,103,105],{"href":104},"/blog/ask-gitlab-security-alexander-dietrich/","Alexander"," and ",[44,108,111],{"href":109,"rel":110},"https://medium.com/gitlab-magazine/how-we-use-automation-to-scale-up-security-at-gitlab-f8440574e0e4",[],"Alex"," cite it as their go-to security advice), but not heeded often enough:  utilize unique passwords per service and set up a password manager to help generate, store, and access them as needed. Also, enabling two-factor authentication (2FA) everywhere it is available. Every additional step you take to make it more difficult for an attacker will significantly decrease the chance of your accounts being compromised.",[12,114,115,116,121],{},"But I’d also recommend giving Bruce Schneier’s excellent ",[44,117,120],{"href":118,"rel":119},"https://www.schneier.com/blog/archives/2008/03/the_security_mi_1.html",[],"article"," on ‘The Security Mindset’ a read. While the goal isn’t to give everyone a cynical view of the world, I think understanding the mindset and thought process from an attacker’s perspective can be incredibly beneficial while trying to keep yourself (and others!) secure.",[66,123,125,126,131],{"id":124},"what-is-the-most-important-emerging-trend-you-see-in-security-it-is-refreshing-to-see-security-become-less-of-a-walled-garden-and-more-incorporated-into-other-areas-of-software-and-systems-development-taking-development-techniques-and-best-practices-from-softwaresystems-engineering-and-integrating-them-into-security-workflows-has-already-been-producing-some-exciting-new-tooling-and-ideas-soar-compliance-as-code-etc","What is the most important emerging trend you see in security?  It is refreshing to see security become less of a walled garden and more incorporated into other areas of software and systems development. Taking development techniques and best practices from software/systems engineering and integrating them into security workflows has already been producing some exciting new tooling and ideas (SOAR, ",[44,127,130],{"href":128,"rel":129},"https://about.gitlab.com/blog/get-started-compliance-as-code/",[],"compliance-as-code",", etc).",[12,133,134],{},"I think continued advancement in areas that better enable security teams to “scale” are going to be incredibly important. Whether that be through the use of automation or more actionable data; security teams are going to need to be creative to keep up with the pace of change/development and the ever growing amount of data to analyze.",[66,136,138,139,144],{"id":137},"from-the-perspective-of-your-role-whats-gitlab-doing-better-than-anyone-else-in-terms-of-security-transparency-its-something-not-given-much-consideration-when-it-comes-to-security-in-most-organizations-being-transparent-about-issues-and-vulnerabilities-while-still-protecting-our-customers-and-services-allows-the-wider-community-visibility-into-how-we-handle-security-internally-but-also-enables-contribution-and-promotes-collaboration-ultimately-strengthening-our-security","From the perspective of your role, what’s GitLab doing better than anyone else in terms of security? ",[44,140,143],{"href":141,"rel":142},"https://handbook.gitlab.com/handbook/values/#transparency",[],"Transparency"," - it’s something not given much consideration when it comes to security in most organizations. Being transparent about issues and vulnerabilities (while still protecting our customers and services) allows the wider community visibility into how we handle security internally, but also enables contribution and promotes collaboration; ultimately strengthening our security.",[12,146,147],{},"There are obvious exceptions to the rule and not everything can be public, but I think that transparency in security is something that we as an industry should strive to do a better job at.",[66,149,151],{"id":150},"is-there-an-area-of-security-research-you-think-deserves-more-attention-why-i-find-the-field-of-security-in-industrial-control-systems-fascinating-the-intersection-between-cyber-and-physical-systems-presents-its-own-set-of-unique-challenges-and-the-stakes-are-so-high-ranging-from-the-integrity-of-public-utilities-to-telecommunications-entities","Is there an area of security research you think deserves more attention? Why? I find the field of security in Industrial Control Systems fascinating. The intersection between cyber and physical systems presents its own set of unique challenges, and the stakes are so high, ranging from the integrity of public utilities to telecommunications entities.",[66,153,155],{"id":154},"in-the-past-decade-how-has-your-area-of-expertise-changed-looking-back-its-been-an-interesting-ride","In the past decade, how has your area of expertise changed? Looking back - it’s been an interesting ride.",[12,157,158],{},"I remember coming out of school still unsure if I wanted to pursue a career in hardware or software. I eventually narrowed the job search to two offers - designing robotics for a bottling facility or a software engineering position in telecommunications. Went the software path and never really looked back.",[12,160,161],{},"Since then, I’ve moved from development to systems work to research, eventually settling in security which allows me the opportunity to work on a little bit of everything!",[163,164,166,167,171],"h2",{"id":165},"now-for-the-questions-you-really-want-to-have-answered","Now, for the questions you ",[168,169,170],"em",{},"really"," want to have answered:",[66,173,175],{"id":174},"vim-or-emacs-vim-as-they-say-emacs-is-a-great-operating-system-lacking-only-a-decent-editor","VIM or EMACS? VIM - as they say, EMACS is a great operating system, lacking only a decent editor.",[66,177,179],{"id":178},"you-get-one-superpower-what-is-it-the-ability-to-always-pick-the-fastest-checkout-line-at-the-grocery-store-i-currently-possess-the-opposite-power","You get one superpower, what is it? The ability to always pick the fastest checkout line at the grocery store. I currently possess the opposite power.",[66,181,183],{"id":182},"is-a-hotdog-a-sandwich-i-dont-like-to-talk-about-religion","Is a hotdog a sandwich? I don’t like to talk about religion.",[66,185,187],{"id":186},"you-need-pancakes-ihop-or-local-pancake-shop-i-really-appreciate-how-accurately-the-first-statement-of-this-question-describes-most-of-my-life-with-that-being-said-mom-and-pop-shop-first-but-i-support-all-pancakes","You need pancakes. IHOP or local pancake shop? I really appreciate how accurately the first statement of this question describes most of my life. With that being said, mom and pop shop first, but I support all pancakes.",[12,189,190,191,196,197,202],{},"Photo by ",[44,192,195],{"href":193,"rel":194},"https://www.pexels.com/@pixabay",[],"Pixabay"," from ",[44,198,201],{"href":199,"rel":200},"https://www.pexels.com",[],"Pexels",".",{"title":204,"searchDepth":205,"depth":205,"links":206},"",2,[207],{"id":165,"depth":205,"text":208},"Now, for the questions you really want to have answered:","unfiltered","2019-11-07","How do you balance user experience with the friction that’s introduced when trying to keep something secure?","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749680866/Blog/Hero%20Images/architecture-boulder-city-cityscape-220759.jpg",{},true,"/en-us/blog/the-security-tightrope",{"title":5,"description":211,"ogTitle":5,"ogDescription":211,"noIndex":214,"ogImage":215,"ogUrl":220,"ogSiteName":221,"ogType":120,"canonicalUrls":220},"https://about.gitlab.com/blog/the-security-tightrope","https://about.gitlab.com","the-security-tightrope","en-us/blog/the-security-tightrope",[225,226,225],"security","inside GitLab","BlogPost","oTiEKelTR_JBa5SChpLMrXUyG8EqpHLh9UEi7wZ_Cpw",{"logo":230,"freeTrial":235,"sales":240,"login":245,"items":250,"search":577,"minimal":608,"duo":627,"switchNav":636,"pricingDeployment":647},{"config":231},{"href":232,"dataGaName":233,"dataGaLocation":234},"/","gitlab logo","header",{"text":236,"config":237},"Get free trial",{"href":238,"dataGaName":239,"dataGaLocation":234},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":241,"config":242},"Request a demo",{"href":243,"dataGaName":244,"dataGaLocation":234},"/sales/?contact-topic=request-demo","sales",{"text":246,"config":247},"Sign in",{"href":248,"dataGaName":249,"dataGaLocation":234},"https://gitlab.com/users/sign_in/","sign in",[251,280,380,385,499,555],{"text":252,"config":253,"menu":255},"Platform",{"dataNavLevelOne":254},"platform",{"type":256,"columns":257},"cards",[258,264,272],{"title":252,"description":259,"link":260},"The intelligent orchestration platform for DevSecOps",{"text":261,"config":262},"Explore our Platform",{"href":263,"dataGaName":254,"dataGaLocation":234},"/platform/",{"title":265,"description":266,"link":267},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":268,"config":269},"Meet GitLab Duo",{"href":270,"dataGaName":271,"dataGaLocation":234},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":273,"description":274,"link":275},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":276,"config":277},"Learn more",{"href":278,"dataGaName":279,"dataGaLocation":234},"/why-gitlab/","why gitlab",{"text":281,"left":217,"config":282,"menu":284},"Product",{"dataNavLevelOne":283},"solutions",{"type":285,"link":286,"columns":290,"feature":359},"lists",{"text":287,"config":288},"View all Solutions",{"href":289,"dataGaName":283,"dataGaLocation":234},"/solutions/",[291,315,338],{"title":292,"description":293,"link":294,"items":299},"Automation","CI/CD and automation to accelerate deployment",{"config":295},{"icon":296,"href":297,"dataGaName":298,"dataGaLocation":234},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[300,304,307,311],{"text":301,"config":302},"CI/CD",{"href":303,"dataGaLocation":234,"dataGaName":301},"/solutions/continuous-integration/",{"text":265,"config":305},{"href":270,"dataGaLocation":234,"dataGaName":306},"gitlab duo agent platform - product menu",{"text":308,"config":309},"Source Code Management",{"href":310,"dataGaLocation":234,"dataGaName":308},"/solutions/source-code-management/",{"text":312,"config":313},"Automated Software Delivery",{"href":297,"dataGaLocation":234,"dataGaName":314},"Automated software delivery",{"title":316,"description":317,"link":318,"items":323},"Security","Deliver code faster without compromising security",{"config":319},{"href":320,"dataGaName":321,"dataGaLocation":234,"icon":322},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[324,328,333],{"text":325,"config":326},"Application Security Testing",{"href":320,"dataGaName":327,"dataGaLocation":234},"Application security testing",{"text":329,"config":330},"Software Supply Chain Security",{"href":331,"dataGaLocation":234,"dataGaName":332},"/solutions/supply-chain/","Software supply chain security",{"text":334,"config":335},"Software Compliance",{"href":336,"dataGaName":337,"dataGaLocation":234},"/solutions/software-compliance/","software compliance",{"title":339,"link":340,"items":345},"Measurement",{"config":341},{"icon":342,"href":343,"dataGaName":344,"dataGaLocation":234},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[346,350,354],{"text":347,"config":348},"Visibility & Measurement",{"href":343,"dataGaLocation":234,"dataGaName":349},"Visibility and Measurement",{"text":351,"config":352},"Value Stream Management",{"href":353,"dataGaLocation":234,"dataGaName":351},"/solutions/value-stream-management/",{"text":355,"config":356},"Analytics & Insights",{"href":357,"dataGaLocation":234,"dataGaName":358},"/solutions/analytics-and-insights/","Analytics and insights",{"title":360,"type":285,"items":361},"GitLab for",[362,368,374],{"text":363,"config":364},"Enterprise",{"icon":365,"href":366,"dataGaLocation":234,"dataGaName":367},"Building","/enterprise/","enterprise",{"text":369,"config":370},"Small Business",{"icon":371,"href":372,"dataGaLocation":234,"dataGaName":373},"Work","/small-business/","small business",{"text":375,"config":376},"Public Sector",{"icon":377,"href":378,"dataGaLocation":234,"dataGaName":379},"Organization","/solutions/public-sector/","public sector",{"text":381,"config":382},"Pricing",{"href":383,"dataGaName":384,"dataGaLocation":234,"dataNavLevelOne":384},"/pricing/","pricing",{"text":386,"config":387,"menu":389},"Resources",{"dataNavLevelOne":388},"resources",{"type":285,"link":390,"columns":394,"feature":488},{"text":391,"config":392},"View all resources",{"href":393,"dataGaName":388,"dataGaLocation":234},"/resources/",[395,428,455],{"title":396,"items":397},"Getting started",[398,403,408,413,418,423],{"text":399,"config":400},"Install",{"href":401,"dataGaName":402,"dataGaLocation":234},"/install/","install",{"text":404,"config":405},"Quick start guides",{"href":406,"dataGaName":407,"dataGaLocation":234},"/get-started/","quick setup checklists",{"text":409,"config":410},"Learn",{"href":411,"dataGaLocation":234,"dataGaName":412},"https://university.gitlab.com/","learn",{"text":414,"config":415},"Product documentation",{"href":416,"dataGaName":417,"dataGaLocation":234},"https://docs.gitlab.com/","product documentation",{"text":419,"config":420},"Best practice videos",{"href":421,"dataGaName":422,"dataGaLocation":234},"/getting-started-videos/","best practice videos",{"text":424,"config":425},"Integrations",{"href":426,"dataGaName":427,"dataGaLocation":234},"/integrations/","integrations",{"title":429,"items":430},"Discover",[431,436,441,446,450],{"text":432,"config":433},"Customer success stories",{"href":434,"dataGaName":435,"dataGaLocation":234},"/customers/","customer success stories",{"text":437,"config":438},"Blog",{"href":439,"dataGaName":440,"dataGaLocation":234},"/blog/","blog",{"text":442,"config":443},"Demo Hub",{"href":444,"dataGaName":445,"dataGaLocation":234},"/demo-hub/","demo hub",{"text":447,"config":448},"The Source",{"href":449,"dataGaName":440,"dataGaLocation":234},"/the-source/",{"text":451,"config":452},"Remote",{"href":453,"dataGaName":454,"dataGaLocation":234},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":456,"items":457},"Connect",[458,463,468,473,478,483],{"text":459,"config":460},"GitLab Services",{"href":461,"dataGaName":462,"dataGaLocation":234},"/services/","services",{"text":464,"config":465},"Contribute",{"href":466,"dataGaName":467,"dataGaLocation":234},"https://contributors.gitlab.com","contribute",{"text":469,"config":470},"Community",{"href":471,"dataGaName":472,"dataGaLocation":234},"/community/","community",{"text":474,"config":475},"Forum",{"href":476,"dataGaName":477,"dataGaLocation":234},"https://forum.gitlab.com/","forum",{"text":479,"config":480},"Events",{"href":481,"dataGaName":482,"dataGaLocation":234},"/events/","events",{"text":484,"config":485},"Partners",{"href":486,"dataGaName":487,"dataGaLocation":234},"/partners/","partners",{"config":489,"title":492,"text":493,"link":494},{"background":490,"textColor":491},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":495,"config":496},"Read the latest",{"href":497,"dataGaName":498,"dataGaLocation":234},"/whats-new/","whats new",{"text":500,"config":501,"menu":503},"Company",{"dataNavLevelOne":502},"company",{"type":285,"columns":504},[505],{"items":506},[507,512,518,520,525,530,535,540,545,550],{"text":508,"config":509},"About",{"href":510,"dataGaName":511,"dataGaLocation":234},"/company/","about",{"text":513,"config":514,"footerGa":517},"Jobs",{"href":515,"dataGaName":516,"dataGaLocation":234},"/jobs/","jobs",{"dataGaName":516},{"text":479,"config":519},{"href":481,"dataGaName":482,"dataGaLocation":234},{"text":521,"config":522},"Leadership",{"href":523,"dataGaName":524,"dataGaLocation":234},"/company/team/e-group/","leadership",{"text":526,"config":527},"Handbook",{"href":528,"dataGaName":529,"dataGaLocation":234},"https://handbook.gitlab.com/","handbook",{"text":531,"config":532},"Investor relations",{"href":533,"dataGaName":534,"dataGaLocation":234},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":536,"config":537},"Trust Center",{"href":538,"dataGaName":539,"dataGaLocation":234},"/security/","trust center",{"text":541,"config":542},"AI Transparency Center",{"href":543,"dataGaName":544,"dataGaLocation":234},"/ai-transparency-center/","ai transparency center",{"text":546,"config":547},"Newsletter",{"href":548,"dataGaName":549,"dataGaLocation":234},"/company/contact/#contact-forms","newsletter",{"text":551,"config":552},"Press",{"href":553,"dataGaName":554,"dataGaLocation":234},"/press/","press",{"text":556,"config":557,"menu":558},"Contact us",{"dataNavLevelOne":502},{"type":285,"columns":559},[560],{"items":561},[562,567,572],{"text":563,"config":564},"Talk to sales",{"href":565,"dataGaName":566,"dataGaLocation":234},"/sales/","talk to sales",{"text":568,"config":569},"Support portal",{"href":570,"dataGaName":571,"dataGaLocation":234},"https://support.gitlab.com/hc/en-us","support portal",{"text":573,"config":574},"Customer portal",{"href":575,"dataGaName":576,"dataGaLocation":234},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":578,"login":579,"suggestions":586},"Close",{"text":580,"link":581},"To search repositories and projects, login to",{"text":582,"config":583},"gitlab.com",{"href":248,"dataGaName":584,"dataGaLocation":585},"search login","search",{"text":587,"default":588},"Suggestions",[589,591,595,597,601,605],{"text":265,"config":590},{"href":270,"dataGaName":265,"dataGaLocation":585},{"text":592,"config":593},"Code Suggestions (AI)",{"href":594,"dataGaName":592,"dataGaLocation":585},"/solutions/code-suggestions/",{"text":301,"config":596},{"href":303,"dataGaName":301,"dataGaLocation":585},{"text":598,"config":599},"GitLab on AWS",{"href":600,"dataGaName":598,"dataGaLocation":585},"/partners/technology-partners/aws/",{"text":602,"config":603},"GitLab on Google Cloud",{"href":604,"dataGaName":602,"dataGaLocation":585},"/partners/technology-partners/google-cloud-platform/",{"text":606,"config":607},"Why GitLab?",{"href":278,"dataGaName":606,"dataGaLocation":585},{"freeTrial":609,"mobileIcon":614,"desktopIcon":619,"secondaryButton":622},{"text":610,"config":611},"Start free trial",{"href":612,"dataGaName":239,"dataGaLocation":613},"https://gitlab.com/-/trials/new/","nav",{"altText":615,"config":616},"Gitlab Icon",{"src":617,"dataGaName":618,"dataGaLocation":613},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":615,"config":620},{"src":621,"dataGaName":618,"dataGaLocation":613},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":623,"config":624},"Get Started",{"href":625,"dataGaName":626,"dataGaLocation":613},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":628,"mobileIcon":632,"desktopIcon":634},{"text":629,"config":630},"Learn more about GitLab Duo",{"href":270,"dataGaName":631,"dataGaLocation":613},"gitlab duo",{"altText":615,"config":633},{"src":617,"dataGaName":618,"dataGaLocation":613},{"altText":615,"config":635},{"src":621,"dataGaName":618,"dataGaLocation":613},{"button":637,"mobileIcon":642,"desktopIcon":644},{"text":638,"config":639},"/switch",{"href":640,"dataGaName":641,"dataGaLocation":613},"#contact","switch",{"altText":615,"config":643},{"src":617,"dataGaName":618,"dataGaLocation":613},{"altText":615,"config":645},{"src":646,"dataGaName":618,"dataGaLocation":613},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":648,"mobileIcon":653,"desktopIcon":655},{"text":649,"config":650},"Back to pricing",{"href":383,"dataGaName":651,"dataGaLocation":613,"icon":652},"back to pricing","GoBack",{"altText":615,"config":654},{"src":617,"dataGaName":618,"dataGaLocation":613},{"altText":615,"config":656},{"src":621,"dataGaName":618,"dataGaLocation":613},{"title":658,"titleMobile":659,"button":660,"config":665},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":276,"config":661},{"href":662,"dataGaName":663,"dataGaLocation":664},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":666,"disabled":214},"release",{"data":668},{"text":669,"source":670,"edit":676,"contribute":681,"config":686,"items":691,"minimal":901},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":671,"config":672},"View page source",{"href":673,"dataGaName":674,"dataGaLocation":675},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":677,"config":678},"Edit this page",{"href":679,"dataGaName":680,"dataGaLocation":675},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":682,"config":683},"Please contribute",{"href":684,"dataGaName":685,"dataGaLocation":675},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":687,"facebook":688,"youtube":689,"linkedin":690},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[692,739,793,837,869],{"title":381,"links":693,"subMenu":708},[694,698,703],{"text":695,"config":696},"View plans",{"href":383,"dataGaName":697,"dataGaLocation":675},"view plans",{"text":699,"config":700},"Why Premium?",{"href":701,"dataGaName":702,"dataGaLocation":675},"/pricing/premium/","why premium",{"text":704,"config":705},"Why Ultimate?",{"href":706,"dataGaName":707,"dataGaLocation":675},"/pricing/ultimate/","why ultimate",[709],{"title":710,"links":711},"Contact Us",[712,715,717,719,724,729,734],{"text":713,"config":714},"Contact sales",{"href":565,"dataGaName":244,"dataGaLocation":675},{"text":568,"config":716},{"href":570,"dataGaName":571,"dataGaLocation":675},{"text":573,"config":718},{"href":575,"dataGaName":576,"dataGaLocation":675},{"text":720,"config":721},"Status",{"href":722,"dataGaName":723,"dataGaLocation":675},"https://status.gitlab.com/","status",{"text":725,"config":726},"Terms of use",{"href":727,"dataGaName":728,"dataGaLocation":675},"/terms/","terms of use",{"text":730,"config":731},"Privacy statement",{"href":732,"dataGaName":733,"dataGaLocation":675},"/privacy/","privacy statement",{"text":735,"config":736},"Cookie preferences",{"dataGaName":737,"dataGaLocation":675,"id":738,"isOneTrustButton":217},"cookie preferences","ot-sdk-btn",{"title":281,"links":740,"subMenu":749},[741,745],{"text":742,"config":743},"DevSecOps platform",{"href":263,"dataGaName":744,"dataGaLocation":675},"devsecops platform",{"text":746,"config":747},"AI-Assisted Development",{"href":270,"dataGaName":748,"dataGaLocation":675},"ai-assisted development",[750],{"title":751,"links":752},"Topics",[753,758,763,768,773,778,783,788],{"text":754,"config":755},"CICD",{"href":756,"dataGaName":757,"dataGaLocation":675},"/topics/ci-cd/","cicd",{"text":759,"config":760},"GitOps",{"href":761,"dataGaName":762,"dataGaLocation":675},"/topics/gitops/","gitops",{"text":764,"config":765},"DevOps",{"href":766,"dataGaName":767,"dataGaLocation":675},"/topics/devops/","devops",{"text":769,"config":770},"Version Control",{"href":771,"dataGaName":772,"dataGaLocation":675},"/topics/version-control/","version control",{"text":774,"config":775},"DevSecOps",{"href":776,"dataGaName":777,"dataGaLocation":675},"/topics/devsecops/","devsecops",{"text":779,"config":780},"Cloud Native",{"href":781,"dataGaName":782,"dataGaLocation":675},"/topics/cloud-native/","cloud native",{"text":784,"config":785},"AI for Coding",{"href":786,"dataGaName":787,"dataGaLocation":675},"/topics/devops/ai-for-coding/","ai for coding",{"text":789,"config":790},"Agentic AI",{"href":791,"dataGaName":792,"dataGaLocation":675},"/topics/agentic-ai/","agentic ai",{"title":794,"links":795},"Solutions",[796,798,800,805,809,812,816,819,821,824,827,832],{"text":325,"config":797},{"href":320,"dataGaName":325,"dataGaLocation":675},{"text":314,"config":799},{"href":297,"dataGaName":298,"dataGaLocation":675},{"text":801,"config":802},"Agile development",{"href":803,"dataGaName":804,"dataGaLocation":675},"/solutions/agile-delivery/","agile delivery",{"text":806,"config":807},"SCM",{"href":310,"dataGaName":808,"dataGaLocation":675},"source code management",{"text":754,"config":810},{"href":303,"dataGaName":811,"dataGaLocation":675},"continuous integration & delivery",{"text":813,"config":814},"Value stream management",{"href":353,"dataGaName":815,"dataGaLocation":675},"value stream management",{"text":759,"config":817},{"href":818,"dataGaName":762,"dataGaLocation":675},"/solutions/gitops/",{"text":363,"config":820},{"href":366,"dataGaName":367,"dataGaLocation":675},{"text":822,"config":823},"Small business",{"href":372,"dataGaName":373,"dataGaLocation":675},{"text":825,"config":826},"Public sector",{"href":378,"dataGaName":379,"dataGaLocation":675},{"text":828,"config":829},"Education",{"href":830,"dataGaName":831,"dataGaLocation":675},"/solutions/education/","education",{"text":833,"config":834},"Financial services",{"href":835,"dataGaName":836,"dataGaLocation":675},"/solutions/finance/","financial services",{"title":386,"links":838},[839,841,843,845,848,850,853,855,857,859,861,863,865,867],{"text":399,"config":840},{"href":401,"dataGaName":402,"dataGaLocation":675},{"text":404,"config":842},{"href":406,"dataGaName":407,"dataGaLocation":675},{"text":409,"config":844},{"href":411,"dataGaName":412,"dataGaLocation":675},{"text":414,"config":846},{"href":416,"dataGaName":847,"dataGaLocation":675},"docs",{"text":437,"config":849},{"href":439,"dataGaName":440,"dataGaLocation":675},{"text":851,"config":852},"What's new",{"href":497,"dataGaName":498,"dataGaLocation":675},{"text":432,"config":854},{"href":434,"dataGaName":435,"dataGaLocation":675},{"text":451,"config":856},{"href":453,"dataGaName":454,"dataGaLocation":675},{"text":459,"config":858},{"href":461,"dataGaName":462,"dataGaLocation":675},{"text":464,"config":860},{"href":466,"dataGaName":467,"dataGaLocation":675},{"text":469,"config":862},{"href":471,"dataGaName":472,"dataGaLocation":675},{"text":474,"config":864},{"href":476,"dataGaName":477,"dataGaLocation":675},{"text":479,"config":866},{"href":481,"dataGaName":482,"dataGaLocation":675},{"text":484,"config":868},{"href":486,"dataGaName":487,"dataGaLocation":675},{"title":500,"links":870},[871,873,875,877,879,881,885,890,892,894,896],{"text":508,"config":872},{"href":510,"dataGaName":502,"dataGaLocation":675},{"text":513,"config":874},{"href":515,"dataGaName":516,"dataGaLocation":675},{"text":521,"config":876},{"href":523,"dataGaName":524,"dataGaLocation":675},{"text":526,"config":878},{"href":528,"dataGaName":529,"dataGaLocation":675},{"text":531,"config":880},{"href":533,"dataGaName":534,"dataGaLocation":675},{"text":882,"config":883},"Sustainability",{"href":884,"dataGaName":882,"dataGaLocation":675},"/sustainability/",{"text":886,"config":887},"Diversity, inclusion and belonging (DIB)",{"href":888,"dataGaName":889,"dataGaLocation":675},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":536,"config":891},{"href":538,"dataGaName":539,"dataGaLocation":675},{"text":546,"config":893},{"href":548,"dataGaName":549,"dataGaLocation":675},{"text":551,"config":895},{"href":553,"dataGaName":554,"dataGaLocation":675},{"text":897,"config":898},"Modern Slavery Transparency Statement",{"href":899,"dataGaName":900,"dataGaLocation":675},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":902},[903,906,909],{"text":904,"config":905},"Terms",{"href":727,"dataGaName":728,"dataGaLocation":675},{"text":907,"config":908},"Cookies",{"dataGaName":737,"dataGaLocation":675,"id":738,"isOneTrustButton":217},{"text":910,"config":911},"Privacy",{"href":732,"dataGaName":733,"dataGaLocation":675},[913],{"id":914,"title":7,"body":213,"config":915,"content":917,"description":213,"extension":921,"meta":922,"navigation":217,"path":923,"seo":924,"stem":925,"__hash__":926},"blogAuthors/en-us/blog/authors/heather-simpson.yml",{"template":916},"BlogAuthor",{"name":7,"config":918},{"headshot":919,"ctfId":920},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659488/Blog/Author%20Headshots/gitlab-logo-extra-whitespace.png","hsimpson","yml",{},"/en-us/blog/authors/heather-simpson",{},"en-us/blog/authors/heather-simpson","4CpsZWXsBE_aB4RLpF20WPoTR1QnmwDhrVLV8WUGGTk",[928,936,944],{"title":929,"description":930,"heroImage":931,"category":209,"date":932,"authors":933,"slug":935,"externalUrl":213},"CEO Shadow Takeaways from Jacie","Recap of my experience in the CEO Shadow Program.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749664102/Blog/Hero%20Images/gitlab-values-cover.png","2021-05-18",[934],"Jacie Bandur","ceo-shadow-recap",{"title":937,"description":938,"heroImage":939,"category":209,"date":940,"authors":941,"slug":943,"externalUrl":213},"Why I love contributing to GitLab","Making small meaningful changes is what it's all about.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749679501/Blog/Hero%20Images/new-feature.png","2021-05-11",[942],"Austin Regnery","why-i-love-contributing-to-gitlab",{"title":945,"description":946,"heroImage":947,"category":209,"date":940,"authors":948,"slug":950,"externalUrl":213},"Placebo Lines on the Pipeline Graph","Have you noticed the connecting lines missing on your pipelines lately? Here's why","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749679507/Blog/Hero%20Images/ci-cd.png",[949],"Sam Beckham","placebo-lines-on-the-pipeline-graph",{"promotions":952},[953,967,979,990],{"id":954,"categories":955,"header":957,"text":958,"button":959,"image":964},"ai-modernization",[956],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":960,"config":961},"Get your AI maturity score",{"href":962,"dataGaName":963,"dataGaLocation":440},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":965},{"src":966},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":968,"categories":969,"header":971,"text":958,"button":972,"image":976},"devops-modernization",[970,777],"product","Are you just managing tools or shipping innovation?",{"text":973,"config":974},"Get your DevOps maturity score",{"href":975,"dataGaName":963,"dataGaLocation":440},"/assessments/devops-modernization-assessment/",{"config":977},{"src":978},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":980,"categories":981,"header":982,"text":958,"button":983,"image":987},"security-modernization",[225],"Are you trading speed for security?",{"text":984,"config":985},"Get your security maturity score",{"href":986,"dataGaName":963,"dataGaLocation":440},"/assessments/security-modernization-assessment/",{"config":988},{"src":989},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":991,"paths":992,"header":995,"text":996,"button":997,"image":1002},"github-azure-migration",[993,994],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":998,"config":999},"See how GitLab compares to GitHub",{"href":1000,"dataGaName":1001,"dataGaLocation":440},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1003},{"src":978},{"header":1005,"blurb":1006,"button":1007,"secondaryButton":1012},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":1008,"config":1009},"Get your free trial",{"href":1010,"dataGaName":239,"dataGaLocation":1011},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":713,"config":1013},{"href":565,"dataGaName":244,"dataGaLocation":1011},1786803753511]