[{"data":1,"prerenderedAt":1356},["ShallowReactive",2],{"/de-de/blog/our-step-by-step-guide-to-evaluating-runtime-security-tools":3,"navigation-de-de":585,"banner-de-de":1021,"footer-de-de":1028,"blog-post-authors-de-de-Hiroki Suezawa|Mitra Jozenazemian":1284,"blog-related-posts-de-de-our-step-by-step-guide-to-evaluating-runtime-security-tools":1311,"blog-share-wrapper-de-de":1336,"next-steps-de-de":1346},{"id":4,"title":5,"authors":6,"body":9,"category":564,"date":565,"description":566,"extension":567,"externalUrl":568,"faq":568,"featured":569,"heroImage":570,"meta":571,"navigation":572,"path":573,"seo":574,"slug":578,"stem":579,"tags":580,"template":583,"updatedDate":568,"__hash__":584},"blogPosts/de-de/blog/our-step-by-step-guide-to-evaluating-runtime-security-tools.md","Runtime-Security-Tools systematisch bewerten",[7,8],"Hiroki Suezawa","Mitra Jozenazemian",{"type":10,"value":11,"toc":545},"minimark",[12,23,26,31,34,39,62,65,69,72,92,98,101,105,108,153,157,160,210,214,219,225,264,267,362,364,369,374,408,469,471,475,478,498,502,506,531,535,538,542],[13,14,15,16,22],"p",{},"Das richtige Runtime-Security-Tool zu wählen, entscheidet darüber, wie gut sich moderne cloud-native Umgebungen schützen lassen. Wir haben dafür ein gründliches Bewertungsverfahren durchlaufen, mit echten Angriffssimulationen auf unseren ",[17,18,21],"a",{"href":19,"rel":20},"https://about.gitlab.com/de-de/blog/improve-security-auditing-with-gitlab-operational-container-scanning/",[],"Kubernetes-Clustern"," und Linux-Servern. Der Grund: Herkömmliche Cloud-Audit-Logs liefern zu wenig Detail und lassen dadurch Lücken bei Bedrohungserkennung, Incident Response und Forensik. Unsere Bewertung hat jede kritische Phase im Einzelnen untersucht, vom ersten Zugriff über die laterale Bewegung bis zur Datenexfiltration.",[13,24,25],{},"Den Anbieter nennen wir in diesem Beitrag nicht. Wir teilen aber unser Vorgehen im Detail und die wichtigsten Erkenntnisse daraus, als Vorlage, die sich für eigene Werkzeugbewertungen anpassen lässt.",[27,28,30],"h2",{"id":29},"warum-sind-runtime-security-tools-nötig","Warum sind Runtime-Security-Tools nötig?",[13,32,33],{},"Ohne Runtime-Security-Tools wird es ausgesprochen schwierig, \"verdächtige Aktivitäten\" zu erkennen und nachzuvollziehen, \"was tatsächlich geschehen ist\".",[35,36,38],"h3",{"id":37},"grenzen-von-cloud-audit-logs","Grenzen von Cloud-Audit-Logs",[40,41,42,50],"ul",{},[43,44,45,49],"li",{},[46,47,48],"strong",{},"Fehlende Laufzeitdetails","\nCloud-Audit-Logs erfassen vor allem Operationen und Datenzugriffe innerhalb der Cloud. Was zur Laufzeit auf Systemen wie Kubernetes-Servern geschieht, halten sie nicht fest: feingranulare Befehlsausführungen, Prozessverhalten und kurzlebige Netzwerkaktivitäten bleiben außen vor.",[43,51,52,55,56,61],{},[46,53,54],{},"Lücken bei Untersuchung und Forensik","\nIn Kubernetes-Umgebungen können ohne durchgehende Protokollierung in Echtzeit entscheidende Aufzeichnungen verloren gehen, sobald ein ",[17,57,60],{"href":58,"rel":59},"https://about.gitlab.com/de-de/blog/complete-guide-to-gitlab-container-scanning/",[],"Container"," endet.",[13,63,64],{},"Es gibt bekannte quelloffene Runtime-Security-Tools. Wir haben uns dennoch für die Bewertung eines kommerziellen Produkts entschieden, um zusätzliche Fähigkeiten und Enterprise-Support anhand von Angriffssimulationen zu prüfen.",[35,66,68],{"id":67},"aufgabe-und-zweck-von-runtime-security-tools","Aufgabe und Zweck von Runtime-Security-Tools",[13,70,71],{},"Runtime-Security-Tools schließen diese Lücken, indem sie Systeme fortlaufend in Echtzeit überwachen. Sie leisten dabei Folgendes:",[40,73,74,80,86],{},[43,75,76,79],{},[46,77,78],{},"Bedrohungserkennung","\nSie beobachten Befehlsausführungen, Systemaufrufe und Netzwerkereignisse in Echtzeit und erkennen ungewöhnliches Verhalten unmittelbar, sodass das Sicherheitsteam zügig reagieren kann. Manche Public-Cloud-Anbieter bieten inzwischen eine eingeschränkte Laufzeitüberwachung an, doch diesen nativen Lösungen fehlt in der Regel die Tiefe und Breite spezialisierter Sicherheitswerkzeuge.",[43,81,82,85],{},[46,83,84],{},"Incident Response","\nDurch lückenlose chronologische Aufzeichnungen der Systemaktivitäten liefern diese Werkzeuge dem Sicherheitsteam die Belege, um den zeitlichen Ablauf eines Angriffs zu rekonstruieren, das volle Ausmaß der Kompromittierung zu bestimmen und nach einem Vorfall gründliche forensische Untersuchungen durchzuführen.",[43,87,88,91],{},[46,89,90],{},"Skalierbarkeit der Untersuchung","\nAnders als bei forensischer Analyse Endpunkt für Endpunkt lassen sich Daten zentral über die gesamte Umgebung hinweg sammeln, speichern und auswerten. Vorfälle lassen sich dadurch untersuchen, ohne verstreute Datenquellen von Hand zusammenzuführen.",[13,93,94,97],{},[46,95,96],{},"Hinweis:"," Runtime-Security-Tools bringen mitunter auch Schwachstellenverwaltung für Container und Server mit. Diese Funktionen sind hier nicht Gegenstand der Betrachtung.",[13,99,100],{},"Bedrohungserkennung nützt nur, wenn Alerts die richtigen Personen erreichen und dort auch bearbeitet werden. Wie das Sicherheitsteam von GitLab dafür einen Self-Service-Workflow für die Alert-Bearbeitung aufgebaut hat, steht in einem eigenen Beitrag (englisch).",[27,102,104],{"id":103},"worauf-es-bei-der-bewertung-ankam","Worauf es bei der Bewertung ankam",[13,106,107],{},"Unser Hauptziel war herauszufinden, wie wirksam ein Runtime-Security-Tool in echten Sicherheitsuntersuchungen ist. Bewertungen richten sich oft auf die Menge der Erkennungen oder die Abdeckung insgesamt. Im Betrieb aber kann eine Flut von False Positives ein Incident-Response-Team lahmlegen. Dasselbe gilt für Dutzende Alerts, die alle zur selben Angriffskette gehören. Unsere Untersuchung zielte deshalb darauf, ob sich mit dem Werkzeug tatsächliche Angriffe verstehen und bearbeiten lassen.",[40,109,110,135],{},[43,111,112,115],{},[46,113,114],{},"Erkennungsfähigkeit",[40,116,117,123,129],{},[43,118,119,122],{},[46,120,121],{},"Eingebaute Regeln","\nWir haben geprüft, ob die mitgelieferten Regelsätze verschiedene Angriffstechniken zuverlässig erkennen und dabei genug Detail für eine belastbare Einordnung liefern.",[43,124,125,128],{},[46,126,127],{},"Eigene Erkennungsregeln","\nWir haben bewertet, wie leicht sich zusätzliche Regeln einbinden lassen, und dabei die Qualität der Telemetriedaten betrachtet, mit denen sich eigene Überwachungslösungen bauen lassen, zugeschnitten auf unsere Kenntnis der eigenen Umgebung.",[43,130,131,134],{},[46,132,133],{},"Alert-Qualität","\nEbenso haben wir die Rate der False Positives überprüft und bestätigt, dass das Werkzeug sich auf echte, handlungsbedürftige Bedrohungen konzentriert und Rauschen vermeidet, das zu Alert-Müdigkeit führt.",[43,136,137,139],{},[46,138,84],{},[40,140,141,147],{},[43,142,143,146],{},[46,144,145],{},"Aussagekraft der Logs","\nWir haben bewertet, ob die Logs genug Detail festhalten, um einen Vorfall vollständig zu rekonstruieren: ausgeführte Befehle, Netzwerkverbindungen, DNS-Abfragen und Prozessinformationen. Den gesamten Angriffsverlauf zusammensetzen und die volle Wirkung bestimmen zu können, ist in der Incident Response entscheidend.",[43,148,149,152],{},[46,150,151],{},"Durchsuchbarkeit der Logs","\nWir haben geprüft, wie gut sich Ereignisse über mehrere Systeme hinweg suchen, filtern und zueinander in Beziehung setzen lassen. Große Datenmengen zügig abfragen zu können, ist bei Sicherheitsvorfällen unverzichtbar.",[27,154,156],{"id":155},"der-ablauf-der-bewertung","Der Ablauf der Bewertung",[13,158,159],{},"Wir haben die Bewertung in vier Phasen gegliedert:",[161,162,163,180,198,204],"ol",{},[43,164,165,168,169],{},[46,166,167],{},"Angriffsszenarien entwickeln","\nWir haben Szenarien entworfen, die realen Angriffsabläufen nachempfunden sind. Gemeinsam mit unserem Red Team entstanden daraus:",[40,170,171,174,177],{},[43,172,173],{},"Angriffe über GitLab-spezifische Schwachstellen (etwa CVE-2021-22205)",[43,175,176],{},"Angriffe über kompromittierte Entwicklungsrechner",[43,178,179],{},"detaillierte Schritt-für-Schritt-Abläufe",[43,181,182,185,186,194,197],{},[46,183,184],{},"Infrastruktur aufsetzen","\nWir haben zwei parallele Umgebungen bereitgestellt:",[40,187,188,191],{},[43,189,190],{},"eine Kubernetes-Umgebung",[43,192,193],{},"eine Umgebung mit virtuellen Maschinen",[195,196],"br",{},"Für die Prüfung bekannter Schwachstellen kam eine ältere GitLab-Version zum Einsatz, und beide Umgebungen durchliefen vergleichbare Abläufe.",[43,199,200,203],{},[46,201,202],{},"Angriffe ausführen","\nWir haben den Angriffsablauf jedes Szenarios durchgeführt und den zeitlichen Verlauf genau festgehalten, vom ersten Zugriff über die laterale Bewegung bis zur Datenexfiltration.",[43,205,206,209],{},[46,207,208],{},"Ergebnisse auswerten","\nWir haben Erkennungsfähigkeit, Aussagekraft der Logs und Verbesserungsbedarf umfassend bewertet und Stärken wie Schwächen der Werkzeuge klar benannt.",[35,211,213],{"id":212},"die-angriffsszenarien","Die Angriffsszenarien",[13,215,216],{},[46,217,218],{},"Szenario 1: Ausnutzen einer bekannten GitLab-Schwachstelle",[13,220,221],{},[222,223],"img",{"alt":218,"src":224},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097560/Blog/Content%20Images/Blog/Content%20Images/image1_aHR0cHM6_1750097560795.png",[40,226,227],{},[43,228,229,232],{},[46,230,231],{},"Angriffsablauf",[161,233,234,240,246,252,258],{},[43,235,236,239],{},[46,237,238],{},"Erster Zugriff","\nWir haben CVE-2021-22205 ausgenutzt, eine bekannte GitLab-Schwachstelle, die Remote Code Execution erlaubt. Damit hatten wir unberechtigten Zugriff auf das Zielsystem.",[43,241,242,245],{},[46,243,244],{},"Befehlsausführung","\nNach dem Zugriff haben wir eine Reverse Shell gestartet, um die kompromittierte Maschine aus der Ferne zu steuern.",[43,247,248,251],{},[46,249,250],{},"C2-Agent einrichten","\nWir haben einen Command-and-Control-Agenten (C2) installiert, um Persistenztechniken zu bewerten und weitere Befehle aus der Ferne auszuführen.",[43,253,254,257],{},[46,255,256],{},"Laterale Bewegung","\nAnschließend haben wir uns innerhalb der Umgebung weiterbewegt und auf Secrets der Kubernetes-API sowie auf PostgreSQL-Datenbanken zugegriffen.",[43,259,260,263],{},[46,261,262],{},"Datenexfiltration","\nSensible Daten haben wir über einen eigenen C2-Kanal abgezogen.",[13,265,266],{},"Die folgende Tabelle fasst die Techniken je Phase zusammen:",[268,269,270,297],"table",{},[271,272,273],"thead",{},[274,275,276,280,283,286,289,291,294],"tr",{},[277,278,238],"th",{"align":279},"left",[277,281,282],{"align":279},"Command and Control",[277,284,285],{"align":279},"Enumeration",[277,287,288],{"align":279},"Zugriff auf Zugangsdaten",[277,290,256],{"align":279},[277,292,293],{"align":279},"Sammlung",[277,295,296],{"align":279},"Exfiltration",[298,299,300,324,344],"tbody",{},[274,301,302,306,309,312,315,318,321],{},[303,304,305],"td",{"align":279},"GitLab über bekannte RCE-Schwachstelle ausnutzen",[303,307,308],{"align":279},"Bekannten Reverse-Shell-Befehl ausführen",[303,310,311],{"align":279},"Informationen auf dem System sammeln",[303,313,314],{"align":279},"Umgebungsvariablen auslesen",[303,316,317],{"align":279},"Secret über die Kubernetes-API holen",[303,319,320],{"align":279},"Daten aus Cloud Storage holen",[303,322,323],{"align":279},"Exfiltration über C2-Kanal",[274,325,326,328,331,333,336,339,342],{},[303,327],{"align":279},[303,329,330],{"align":279},"C2-Agent für die Post-Exploitation installieren",[303,332],{"align":279},[303,334,335],{"align":279},"K8s-Token holen",[303,337,338],{"align":279},"Zugriff auf Datenbank",[303,340,341],{"align":279},"DNS-Exfiltration",[303,343],{"align":279},[274,345,346,348,351,353,356,358,360],{},[303,347],{"align":279},[303,349,350],{"align":279},"SOCKS-Proxy",[303,352],{"align":279},[303,354,355],{"align":279},"Cloud-Token über Metadatenserver holen",[303,357],{"align":279},[303,359],{"align":279},[303,361],{"align":279},[195,363],{},[13,365,366],{},[46,367,368],{},"Szenario 2: Kompromittierter Entwicklungsrechner",[13,370,371],{},[222,372],{"alt":368,"src":373},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097561/Blog/Content%20Images/Blog/Content%20Images/image2_aHR0cHM6_1750097560796.png",[40,375,376],{},[43,377,378,380],{},[46,379,231],{},[161,381,382,388,394,400],{},[43,383,384,387],{},[46,385,386],{},"Erste Kompromittierung","\nWir haben nachgestellt, wie ein Angreifer einen Entwicklungsrechner übernimmt und legitime Zugangsdaten missbraucht, um unberechtigt an interne Ressourcen zu gelangen.",[43,389,390,393],{},[46,391,392],{},"Rechteausweitung","\nMit den erbeuteten Zugangsdaten haben wir unsere Rechte in der Kubernetes-Umgebung ausgeweitet.",[43,395,396,399],{},[46,397,398],{},"Container manipulieren","\nWir haben einen privilegierten Container ausgerollt, um an sensible Informationen zu kommen.",[43,401,402,405,406,266],{},[46,403,404],{},"Exfiltration und Persistenz","\nWir haben sensible Daten abgezogen und uns dauerhaften Zugriff erhalten.",[195,407],{},[268,409,410,427],{},[271,411,412],{},[274,413,414,416,419,421,423,425],{},[277,415,238],{"align":279},[277,417,418],{"align":279},"Ausführung",[277,420,392],{"align":279},[277,422,288],{"align":279},[277,424,256],{"align":279},[277,426,296],{"align":279},[298,428,429,449],{},[274,430,431,434,437,440,443,446],{},[303,432,433],{"align":279},"Gültiges Konto (kubectl)",[303,435,436],{"align":279},"Neuen Container anlegen",[303,438,439],{"align":279},"Privilegierten Container anlegen",[303,441,442],{"align":279},"K8s-Secrets über die Rechte des Nodes holen",[303,444,445],{"align":279},"In einen Container auf demselben Node wechseln",[303,447,448],{"align":279},"Zugangsdaten auf den Angreifer-Server laden",[274,450,451,453,455,457,465,467],{},[303,452],{"align":279},[303,454],{"align":279},[303,456],{"align":279},[303,458,459,460,464],{"align":279},"Container-Umgebungsvariablen per ",[461,462,463],"code",{},"crictl"," auf dem Node auslesen",[303,466],{"align":279},[303,468],{"align":279},[195,470],{},[35,472,474],{"id":473},"die-ausführung-der-angriffe","Die Ausführung der Angriffe",[13,476,477],{},"Während der Szenarien haben wir nach folgendem Vorgehen detaillierte Aufzeichnungen gewonnen:",[40,479,480,486,492],{},[43,481,482,485],{},[46,483,484],{},"Erkennungen überprüfen:"," Wir haben festgestellt, ob jeder Angriffsbefehl erkannt und ob die entscheidenden Punkte jedes Szenarios ordentlich gemeldet wurden.",[43,487,488,491],{},[46,489,490],{},"Zeitverlauf festhalten:"," Jedes Ereignis wurde der Reihe nach protokolliert, um zu bewerten, wie gut Befehlsausführungen und Netzwerkkommunikation erfasst werden.",[43,493,494,497],{},[46,495,496],{},"Bewerten und auswerten:"," Jedes Ereignis wurde nach Erkennungsgüte bewertet, um die Leistung des Werkzeugs zahlenmäßig einzuordnen.",[27,499,501],{"id":500},"was-wir-gelernt-haben","Was wir gelernt haben",[35,503,505],{"id":504},"kommerzielle-produkte-selbst-prüfen","Kommerzielle Produkte selbst prüfen",[40,507,508,514,520],{},[43,509,510,513],{},[46,511,512],{},"Erkennungslücken finden und angehen (Zusammenarbeit mit dem Anbieter)","\nUnsere Bewertung hat gezeigt, dass mehrere kritische Szenarien und Ereignisse nicht erkannt oder nicht protokolliert wurden. Daraufhin haben wir mit dem Anbieter gesprochen und mehrere Verbesserungswünsche eingereicht. Der Anbieter hat das Produkt anschließend erweitert und die Erkennung verbessert, und viele der von uns gefundenen Punkte sind inzwischen behoben.",[43,515,516,519],{},[46,517,518],{},"Grenzen verstehen","\nViele moderne Runtime-Security-Tools setzen auf eBPF, um Linux-Systemaufrufe zur Erkennung zu beobachten. Weil Befehle innerhalb eines C2-Frameworks jedoch keine neuen Prozesse erzeugen, war es schwierig, diese Angriffsereignisse nachzuverfolgen.",[43,521,522,525,526,530],{},[46,523,524],{},"Reichweite der Werkzeuge einordnen","\nUnsere Ergebnisse zeigen, dass es in der ",[17,527,84],{"href":528,"rel":529},"https://about.gitlab.com/de-de/blog/devsecops-shift-left-guide/",[]," nicht genügt, sich allein auf Runtime-Security-Tools zu stützen. Erst zusammen mit anderen Logs, etwa Kubernetes-Audit-Logs und Cloud-Logs, entsteht ein vollständiges Bild.",[35,532,534],{"id":533},"warum-durchgehende-laufzeitprotokollierung-in-kubernetes-zählt","Warum durchgehende Laufzeitprotokollierung in Kubernetes zählt",[13,536,537],{},"In Kubernetes-Umgebungen droht der Verlust forensischer Daten, sobald Container enden. Durchgehende Protokollierung ist deshalb unverzichtbar. Unsere Bewertung hat bestätigt, dass eine skalierbare, dauerhafte Protokollinfrastruktur entscheidend ist. Ohne geeignete Runtime-Security-Tools kann nach einem Angriff eine erhebliche Menge wichtiger Informationen verloren sein.",[27,539,541],{"id":540},"fazit","Fazit",[13,543,544],{},"Wir installieren Sicherheitswerkzeuge nicht blind, sondern prüfen ihren Nutzen, damit unsere Kundschaft GitLab.com sicher nutzen kann. Gründliche Produktbewertungen wie die beschriebene bringen nicht nur Anwendungsfälle und Verbesserungsbedarf zutage, die Anbietern entgehen können. Sie liefern zugleich Erkenntnisse, von denen der Anbieter ebenso profitiert wie die eigenen Teams, wenn es darum geht, den Einsatz des Werkzeugs sinnvoll aufzusetzen.",{"title":546,"searchDepth":547,"depth":547,"links":548},"",2,[549,554,555,559,563],{"id":29,"depth":547,"text":30,"children":550},[551,553],{"id":37,"depth":552,"text":38},3,{"id":67,"depth":552,"text":68},{"id":103,"depth":547,"text":104},{"id":155,"depth":547,"text":156,"children":556},[557,558],{"id":212,"depth":552,"text":213},{"id":473,"depth":552,"text":474},{"id":500,"depth":547,"text":501,"children":560},[561,562],{"id":504,"depth":552,"text":505},{"id":533,"depth":552,"text":534},{"id":540,"depth":547,"text":541},"security","2026-08-26","Erkenntnisse aus der Bewertung eines Runtime-Security-Tools durch GitLabs Security-Team, mit echten Angriffssimulationen auf Kubernetes und Linux.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097534/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_1097303277_6gTk7M1DNx0tFuovupVFB1_1750097534344.jpg",{},true,"/de-de/blog/our-step-by-step-guide-to-evaluating-runtime-security-tools",{"title":5,"description":566,"ogTitle":5,"ogDescription":566,"noIndex":569,"ogImage":570,"ogUrl":575,"ogSiteName":576,"ogType":577,"canonicalUrls":575},"https://about.gitlab.com/de-de/blog/our-step-by-step-guide-to-evaluating-runtime-security-tools","https://about.gitlab.com","article","our-step-by-step-guide-to-evaluating-runtime-security-tools","de-de/blog/our-step-by-step-guide-to-evaluating-runtime-security-tools",[564,581,582],"DevSecOps","inside GitLab","BlogPost","cjXpeEggd_dLdOI9hW9xACYRNgTs4TOhAEewviF6H1o",{"logo":586,"freeTrial":591,"sales":596,"login":601,"items":606,"search":937,"minimal":972,"duo":991,"switchNav":1000,"pricingDeployment":1011},{"config":587},{"href":588,"dataGaName":589,"dataGaLocation":590},"/de-de/","gitlab logo","header",{"text":592,"config":593},"Kostenlose Testversion anfordern",{"href":594,"dataGaName":595,"dataGaLocation":590},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":597,"config":598},"Demo anfordern",{"href":599,"dataGaName":600,"dataGaLocation":590},"/request-a-demo/","sales",{"text":602,"config":603},"Anmelden",{"href":604,"dataGaName":605,"dataGaLocation":590},"https://gitlab.com/users/sign_in/","sign in",[607,693,781,786,861,915],{"text":608,"left":572,"config":609,"menu":611},"Plattform",{"dataNavLevelOne":610},"platform",{"type":612,"link":613,"columns":617,"feature":682},"lists",{"text":614,"config":615},"Die Plattform erkunden",{"href":616,"dataGaName":610,"dataGaLocation":590},"/de-de/platform/",[618,641,664],{"title":619,"items":620},"Ausführung und Workflows",[621,626,631,636],{"text":622,"config":623},"CI/CD",{"href":624,"dataGaLocation":590,"dataGaName":625},"/de-de/solutions/continuous-integration/","ci/cd",{"text":627,"config":628},"Quellcodeverwaltung",{"href":629,"dataGaLocation":590,"dataGaName":630},"/de-de/solutions/source-code-management/","source code management",{"text":632,"config":633},"Agile Delivery",{"href":634,"dataGaLocation":590,"dataGaName":635},"/de-de/solutions/agile-delivery/","agile delivery",{"text":637,"config":638},"Artefaktverwaltung",{"href":639,"dataGaLocation":590,"dataGaName":640},"/de-de/artifact-central/","artifact management",{"title":642,"items":643},"Sicherheit und Governance",[644,649,654,659],{"text":645,"config":646},"Anwendungssicherheitstests",{"href":647,"dataGaLocation":590,"dataGaName":648},"/de-de/solutions/application-security-testing/","application security testing",{"text":650,"config":651},"Governance und Compliance",{"href":652,"dataGaLocation":590,"dataGaName":653},"/de-de/solutions/software-compliance/","governance and compliance",{"text":655,"config":656},"Secrets-Management",{"href":657,"dataGaLocation":590,"dataGaName":658},"/de-de/gitlab-secrets-manager/","secrets management",{"text":660,"config":661},"Lieferkettensicherheit",{"href":662,"dataGaLocation":590,"dataGaName":663},"/de-de/solutions/supply-chain/","supply chain security",{"title":665,"items":666},"Kontext und KI",[667,672,677],{"text":668,"config":669},"Agentische Orchestrierung",{"href":670,"dataGaLocation":590,"dataGaName":671},"/de-de/gitlab-duo-agent-platform/","agentic orchestration",{"text":673,"config":674},"Kontextgraph",{"href":675,"dataGaLocation":590,"dataGaName":676},"/de-de/gitlab-orbit/","context graph",{"text":678,"config":679},"Sichtbarkeit und Messung",{"href":680,"dataGaLocation":590,"dataGaName":681},"/de-de/solutions/visibility-measurement/","visibility and measurement",{"config":683,"title":686,"text":687,"link":688},{"background":684,"textColor":685},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1790185102/o7dn32anqcb6z8dgd3as.jpg')","#000","Warum GitLab","Eine Plattform für Schnelligkeit und Kontrolle im gesamten Software-Lebenszyklus.",{"text":689,"config":690},"Mehr erfahren",{"href":691,"dataGaName":692,"dataGaLocation":590},"/de-de/why-gitlab/","why gitlab",{"text":694,"left":572,"config":695,"menu":697},"Lösungen",{"dataNavLevelOne":696},"solutions",{"type":612,"link":698,"columns":702,"feature":772},{"text":699,"config":700},"Alle Lösungen anzeigen",{"href":701,"dataGaName":696,"dataGaLocation":590},"/de-de/solutions/",[703,721,739],{"title":704,"items":705},"Ergebnisse",[706,711,716],{"text":707,"config":708},"DevOps-Modernisierung",{"href":709,"dataGaLocation":590,"dataGaName":710},"/de-de/assessments/devops-modernization-assessment/","devops modernization",{"text":712,"config":713},"Sicherheitsmodernisierung",{"href":714,"dataGaLocation":590,"dataGaName":715},"/de-de/assessments/security-modernization-assessment/","security modernization",{"text":717,"config":718},"KI-Modernisierung",{"href":719,"dataGaLocation":590,"dataGaName":720},"/de-de/assessments/ai-modernization-assessment/","ai modernization",{"title":722,"items":723},"Nach Größe",[724,729,734],{"text":725,"config":726},"Große Unternehmen",{"href":727,"dataGaLocation":590,"dataGaName":728},"/de-de/enterprise/","enterprise",{"text":730,"config":731},"Kleine Unternehmen",{"href":732,"dataGaLocation":590,"dataGaName":733},"/de-de/small-business/","small business",{"text":735,"config":736},"Start-ups",{"href":737,"dataGaLocation":590,"dataGaName":738},"/de-de/solutions/startups/","startups",{"title":740,"items":741},"Branchen",[742,747,752,757,762,767],{"text":743,"config":744},"Finanzdienstleistungen",{"href":745,"dataGaLocation":590,"dataGaName":746},"/de-de/solutions/finance/","financial services",{"text":748,"config":749},"Öffentlicher Sektor",{"href":750,"dataGaLocation":590,"dataGaName":751},"/de-de/solutions/public-sector/","public sector",{"text":753,"config":754},"Telekommunikation",{"href":755,"dataGaLocation":590,"dataGaName":756},"/de-de/solutions/telecommunications/","telecommunications",{"text":758,"config":759},"Automobilindustrie",{"href":760,"dataGaLocation":590,"dataGaName":761},"/de-de/solutions/automotive/","automotive",{"text":763,"config":764},"Bildungswesen",{"href":765,"dataGaLocation":590,"dataGaName":766},"/de-de/solutions/education/","education",{"text":768,"config":769},"Luft- und Raumfahrt",{"href":770,"dataGaLocation":590,"dataGaName":771},"/de-de/solutions/aerospace/","aerospace",{"config":773,"title":774,"text":775,"link":776},{"background":684,"textColor":685},"GitLab-Sicherheitsstandard","Mehr dazu, wie du deine Software Factory stärkst und KI-Agenten Autonomie gewinnen lässt, ohne an Sicherheit einzubüßen.",{"text":777,"config":778},"Standard entdecken",{"href":779,"dataGaName":780,"dataGaLocation":590},"/gitlab-security-standard/","gitlab security standard",{"text":782,"config":783},"Preise",{"href":784,"dataGaName":785,"dataGaLocation":590,"dataNavLevelOne":785},"/de-de/pricing/","pricing",{"text":787,"config":788,"menu":790},"Ressourcen",{"dataNavLevelOne":789},"resources",{"type":612,"link":791,"columns":795,"feature":852},{"text":792,"config":793},"Alle Ressourcen anzeigen",{"href":794,"dataGaName":789,"dataGaLocation":590},"/de-de/resources/",[796,824],{"title":797,"items":798},"Entdecken",[799,804,809,814,819],{"text":800,"config":801},"Dokumentation",{"href":802,"dataGaName":803,"dataGaLocation":590},"https://docs.gitlab.com/","docs",{"text":805,"config":806},"GitLab University",{"href":807,"dataGaName":808,"dataGaLocation":590},"https://university.gitlab.com/","university",{"text":810,"config":811},"Demo-Reihe",{"href":812,"dataGaName":813,"dataGaLocation":590},"/de-de/gitlab-technical-demo-series/","demo series",{"text":815,"config":816},"Demo-Hub",{"href":817,"dataGaName":818,"dataGaLocation":590},"/de-de/demo-hub/","demo hub",{"text":820,"config":821},"Dienste",{"href":822,"dataGaName":823,"dataGaLocation":590},"/de-de/services/","services",{"title":825,"items":826},"Vernetzen",[827,832,837,842,847],{"text":828,"config":829},"Blog",{"href":830,"dataGaName":831,"dataGaLocation":590},"/de-de/blog/","blog",{"text":833,"config":834},"Community",{"href":835,"dataGaName":836,"dataGaLocation":590},"/community/","community",{"text":838,"config":839},"Kunden",{"href":840,"dataGaName":841,"dataGaLocation":590},"/de-de/customers/","customers",{"text":843,"config":844},"Partner",{"href":845,"dataGaName":846,"dataGaLocation":590},"/de-de/partners/","partners",{"text":848,"config":849},"Veranstaltungen",{"href":850,"dataGaName":851,"dataGaLocation":590},"/events/","events",{"config":853,"title":854,"text":855,"link":856},{"background":684,"textColor":685},"Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":857,"config":858},"Aktuelle Nachrichten",{"href":859,"dataGaName":860,"dataGaLocation":590},"/de-de/whats-new/","whats new",{"text":862,"config":863,"menu":865},"Unternehmen",{"dataNavLevelOne":864},"company",{"type":612,"columns":866},[867],{"items":868},[869,874,880,885,890,895,900,905,910],{"text":870,"config":871},"Über",{"href":872,"dataGaName":873,"dataGaLocation":590},"/de-de/company/","about",{"text":875,"config":876,"footerGa":879},"Karriere",{"href":877,"dataGaName":878,"dataGaLocation":590},"/jobs/","jobs",{"dataGaName":878},{"text":881,"config":882},"Presse",{"href":883,"dataGaName":884,"dataGaLocation":590},"/press/","press",{"text":886,"config":887},"Handbuch",{"href":888,"dataGaName":889,"dataGaLocation":590},"https://handbook.gitlab.com/","handbook",{"text":891,"config":892},"Geschäftsführung",{"href":893,"dataGaName":894,"dataGaLocation":590},"/company/team/e-group/","leadership",{"text":896,"config":897},"Investor Relations",{"href":898,"dataGaName":899,"dataGaLocation":590},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":901,"config":902},"Trust Center",{"href":903,"dataGaName":904,"dataGaLocation":590},"/de-de/security/","trust center",{"text":906,"config":907},"AI Transparency Center",{"href":908,"dataGaName":909,"dataGaLocation":590},"/de-de/ai-transparency-center/","ai transparency center",{"text":911,"config":912},"Newsletter",{"href":913,"dataGaName":914,"dataGaLocation":590},"/company/contact/#contact-forms","newsletter",{"text":916,"config":917,"menu":918},"Kontakt",{"dataNavLevelOne":864},{"type":612,"columns":919},[920],{"items":921},[922,927,932],{"text":923,"config":924},"Vertrieb kontaktieren",{"href":925,"dataGaName":926,"dataGaLocation":590},"/de-de/sales/","talk to sales",{"text":928,"config":929},"Support-Portal",{"href":930,"dataGaName":931,"dataGaLocation":590},"https://support.gitlab.com/hc/en-us","support portal",{"text":933,"config":934},"Kundenportal",{"href":935,"dataGaName":936,"dataGaLocation":590},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":938,"login":939,"suggestions":946},"Schließen",{"text":940,"link":941},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":942,"config":943},"gitlab.com",{"href":604,"dataGaName":944,"dataGaLocation":945},"search login","search",{"text":947,"default":948},"Vorschläge",[949,952,956,958,963,968],{"text":950,"config":951},"GitLab Duo Agent Platform",{"href":670,"dataGaName":950,"dataGaLocation":945},{"text":953,"config":954},"Codevorschläge (KI)",{"href":670,"dataGaName":955,"dataGaLocation":945},"Code Suggestions (AI)",{"text":622,"config":957},{"href":624,"dataGaName":622,"dataGaLocation":945},{"text":959,"config":960},"GitLab auf AWS",{"href":961,"dataGaName":962,"dataGaLocation":945},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":964,"config":965},"GitLab auf Google Cloud",{"href":966,"dataGaName":967,"dataGaLocation":945},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":969,"config":970},"Warum GitLab?",{"href":691,"dataGaName":971,"dataGaLocation":945},"Why GitLab?",{"freeTrial":973,"mobileIcon":978,"desktopIcon":983,"secondaryButton":986},{"text":974,"config":975},"Kostenlos testen",{"href":976,"dataGaName":595,"dataGaLocation":977},"https://gitlab.com/-/trials/new/","nav",{"altText":979,"config":980},"GitLab-Symbol",{"src":981,"dataGaName":982,"dataGaLocation":977},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":979,"config":984},{"src":985,"dataGaName":982,"dataGaLocation":977},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":987,"config":988},"Erste Schritte",{"href":989,"dataGaName":990,"dataGaLocation":977},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":992,"mobileIcon":996,"desktopIcon":998},{"text":993,"config":994},"Mehr über GitLab Duo erfahren",{"href":670,"dataGaName":995,"dataGaLocation":977},"gitlab duo",{"altText":979,"config":997},{"src":981,"dataGaName":982,"dataGaLocation":977},{"altText":979,"config":999},{"src":985,"dataGaName":982,"dataGaLocation":977},{"button":1001,"mobileIcon":1006,"desktopIcon":1008},{"text":1002,"config":1003},"/Option",{"href":1004,"dataGaName":1005,"dataGaLocation":977},"#contact","switch",{"altText":979,"config":1007},{"src":981,"dataGaName":982,"dataGaLocation":977},{"altText":979,"config":1009},{"src":1010,"dataGaName":982,"dataGaLocation":977},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":1012,"mobileIcon":1017,"desktopIcon":1019},{"text":1013,"config":1014},"Zurück zur Preisübersicht",{"href":784,"dataGaName":1015,"dataGaLocation":977,"icon":1016},"back to pricing","GoBack",{"altText":979,"config":1018},{"src":981,"dataGaName":982,"dataGaLocation":977},{"altText":979,"config":1020},{"src":985,"dataGaName":982,"dataGaLocation":977},{"title":1022,"button":1023,"config":1026},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":689,"config":1024},{"href":675,"dataGaName":1025,"dataGaLocation":590},"orbit",{"layout":1027,"disabled":569},"release",{"data":1029},{"text":1030,"source":1031,"edit":1037,"contribute":1042,"config":1047,"items":1052,"minimal":1273},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":1032,"config":1033},"Quelltext der Seite anzeigen",{"href":1034,"dataGaName":1035,"dataGaLocation":1036},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":1038,"config":1039},"Diese Seite bearbeiten",{"href":1040,"dataGaName":1041,"dataGaLocation":1036},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":1043,"config":1044},"Beteilige dich",{"href":1045,"dataGaName":1046,"dataGaLocation":1036},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":1048,"facebook":1049,"youtube":1050,"linkedin":1051},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[1053,1098,1155,1198,1240],{"title":782,"links":1054,"subMenu":1069},[1055,1059,1064],{"text":1056,"config":1057},"Tarife anzeigen",{"href":784,"dataGaName":1058,"dataGaLocation":1036},"view plans",{"text":1060,"config":1061},"Vorteile von Premium",{"href":1062,"dataGaName":1063,"dataGaLocation":1036},"/de-de/pricing/premium/","why premium",{"text":1065,"config":1066},"Vorteile von Ultimate",{"href":1067,"dataGaName":1068,"dataGaLocation":1036},"/de-de/pricing/ultimate/","why ultimate",[1070],{"title":916,"links":1071},[1072,1074,1076,1078,1083,1088,1093],{"text":923,"config":1073},{"href":925,"dataGaName":600,"dataGaLocation":1036},{"text":928,"config":1075},{"href":930,"dataGaName":931,"dataGaLocation":1036},{"text":933,"config":1077},{"href":935,"dataGaName":936,"dataGaLocation":1036},{"text":1079,"config":1080},"Status",{"href":1081,"dataGaName":1082,"dataGaLocation":1036},"https://status.gitlab.com/","status",{"text":1084,"config":1085},"Nutzungsbedingungen",{"href":1086,"dataGaName":1087,"dataGaLocation":1036},"/terms/","terms of use",{"text":1089,"config":1090},"Datenschutzerklärung",{"href":1091,"dataGaName":1092,"dataGaLocation":1036},"/de-de/privacy/","privacy statement",{"text":1094,"config":1095},"Cookie-Einstellungen",{"dataGaName":1096,"dataGaLocation":1036,"id":1097,"isOneTrustButton":572},"cookie preferences","ot-sdk-btn",{"title":608,"links":1099,"subMenu":1113},[1100,1103,1105,1107,1109,1111],{"text":1101,"config":1102},"Plattform entdecken",{"href":616,"dataGaName":610,"dataGaLocation":1036},{"text":668,"config":1104},{"href":670,"dataGaName":671,"dataGaLocation":1036},{"text":622,"config":1106},{"href":624,"dataGaName":625,"dataGaLocation":1036},{"text":673,"config":1108},{"href":675,"dataGaName":676,"dataGaLocation":1036},{"text":655,"config":1110},{"href":657,"dataGaName":658,"dataGaLocation":1036},{"text":686,"config":1112},{"href":691,"dataGaName":692,"dataGaLocation":1036},[1114],{"title":1115,"links":1116},"Themen",[1117,1121,1126,1131,1136,1140,1145,1150],{"text":622,"config":1118},{"href":1119,"dataGaName":1120,"dataGaLocation":1036},"/de-de/topics/ci-cd/","cicd",{"text":1122,"config":1123},"GitOps",{"href":1124,"dataGaName":1125,"dataGaLocation":1036},"/de-de/topics/gitops/","gitops",{"text":1127,"config":1128},"DevOps",{"href":1129,"dataGaName":1130,"dataGaLocation":1036},"/de-de/topics/devops/","devops",{"text":1132,"config":1133},"Versionskontrolle",{"href":1134,"dataGaName":1135,"dataGaLocation":1036},"/de-de/topics/version-control/","version control",{"text":581,"config":1137},{"href":1138,"dataGaName":1139,"dataGaLocation":1036},"/de-de/topics/devsecops/","devsecops",{"text":1141,"config":1142},"Cloud-nativ",{"href":1143,"dataGaName":1144,"dataGaLocation":1036},"/de-de/topics/cloud-native/","cloud native",{"text":1146,"config":1147},"KI für das Programmieren",{"href":1148,"dataGaName":1149,"dataGaLocation":1036},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":1151,"config":1152},"Agentische KI",{"href":1153,"dataGaName":1154,"dataGaLocation":1036},"/de-de/topics/agentic-ai/","agentic ai",{"title":694,"links":1156},[1157,1159,1161,1163,1165,1167,1169,1171,1173,1175,1178,1181,1183,1186,1190,1194],{"text":707,"config":1158},{"href":709,"dataGaName":710,"dataGaLocation":1036},{"text":712,"config":1160},{"href":714,"dataGaName":715,"dataGaLocation":1036},{"text":717,"config":1162},{"href":719,"dataGaName":720,"dataGaLocation":1036},{"text":743,"config":1164},{"href":745,"dataGaName":746,"dataGaLocation":1036},{"text":748,"config":1166},{"href":750,"dataGaName":751,"dataGaLocation":1036},{"text":753,"config":1168},{"href":755,"dataGaName":756,"dataGaLocation":1036},{"text":758,"config":1170},{"href":760,"dataGaName":761,"dataGaLocation":1036},{"text":763,"config":1172},{"href":765,"dataGaName":766,"dataGaLocation":1036},{"text":768,"config":1174},{"href":770,"dataGaName":771,"dataGaLocation":1036},{"text":1176,"config":1177},"Enterprise",{"href":727,"dataGaName":728,"dataGaLocation":1036},{"text":1179,"config":1180},"Kleinunternehmen",{"href":732,"dataGaName":733,"dataGaLocation":1036},{"text":735,"config":1182},{"href":737,"dataGaName":738,"dataGaLocation":1036},{"text":1122,"config":1184},{"href":1185,"dataGaName":1125,"dataGaLocation":1036},"/de-de/solutions/gitops/",{"text":1187,"config":1188},"Analyse der Softwarezusammensetzung (SCA)",{"href":662,"dataGaName":1189,"dataGaLocation":1036},"software composition analysis",{"text":1191,"config":1192},"Wertstrommanagement",{"href":680,"dataGaName":1193,"dataGaLocation":1036},"value stream management",{"text":1195,"config":1196},"Alle Lösungen",{"href":701,"dataGaName":1197,"dataGaLocation":1036},"all solutions",{"title":787,"links":1199},[1200,1205,1210,1212,1214,1216,1218,1220,1222,1224,1227,1229,1231,1233,1236],{"text":1201,"config":1202},"Installieren",{"href":1203,"dataGaName":1204,"dataGaLocation":1036},"/de-de/install/","install",{"text":1206,"config":1207},"Kurzanleitungen",{"href":1208,"dataGaName":1209,"dataGaLocation":1036},"/de-de/get-started/","quick setup checklists",{"text":800,"config":1211},{"href":802,"dataGaName":803,"dataGaLocation":1036},{"text":805,"config":1213},{"href":807,"dataGaName":808,"dataGaLocation":1036},{"text":810,"config":1215},{"href":812,"dataGaName":813,"dataGaLocation":1036},{"text":815,"config":1217},{"href":817,"dataGaName":818,"dataGaLocation":1036},{"text":820,"config":1219},{"href":822,"dataGaName":823,"dataGaLocation":1036},{"text":828,"config":1221},{"href":830,"dataGaName":831,"dataGaLocation":1036},{"text":833,"config":1223},{"href":835,"dataGaName":836,"dataGaLocation":1036},{"text":1225,"config":1226},"Kund(inn)en",{"href":840,"dataGaName":841,"dataGaLocation":1036},{"text":843,"config":1228},{"href":845,"dataGaName":846,"dataGaLocation":1036},{"text":848,"config":1230},{"href":850,"dataGaName":851,"dataGaLocation":1036},{"text":911,"config":1232},{"href":913,"dataGaName":914,"dataGaLocation":1036},{"text":1234,"config":1235},"Neuerungen",{"href":859,"dataGaName":860,"dataGaLocation":1036},{"text":1237,"config":1238},"Alle Ressourcen",{"href":794,"dataGaName":1239,"dataGaLocation":1036},"all resources",{"title":862,"links":1241},[1242,1244,1246,1248,1250,1252,1254,1256,1258,1263,1268],{"text":870,"config":1243},{"href":872,"dataGaName":864,"dataGaLocation":1036},{"text":875,"config":1245},{"href":877,"dataGaName":878,"dataGaLocation":1036},{"text":881,"config":1247},{"href":883,"dataGaName":884,"dataGaLocation":1036},{"text":886,"config":1249},{"href":888,"dataGaName":889,"dataGaLocation":1036},{"text":891,"config":1251},{"href":893,"dataGaName":894,"dataGaLocation":1036},{"text":896,"config":1253},{"href":898,"dataGaName":899,"dataGaLocation":1036},{"text":901,"config":1255},{"href":903,"dataGaName":904,"dataGaLocation":1036},{"text":906,"config":1257},{"href":908,"dataGaName":909,"dataGaLocation":1036},{"text":1259,"config":1260},"Nachhaltigkeit",{"href":1261,"dataGaName":1262,"dataGaLocation":1036},"/sustainability/","Sustainability",{"text":1264,"config":1265},"Vielfalt, Inklusion und Zugehörigkeit",{"href":1266,"dataGaName":1267,"dataGaLocation":1036},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1269,"config":1270},"Transparenzerklärung zu moderner Sklaverei",{"href":1271,"dataGaName":1272,"dataGaLocation":1036},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1274},[1275,1278,1281],{"text":1276,"config":1277},"Terms",{"href":1086,"dataGaName":1087,"dataGaLocation":1036},{"text":1279,"config":1280},"Cookies",{"dataGaName":1096,"dataGaLocation":1036,"id":1097,"isOneTrustButton":572},{"text":1282,"config":1283},"Datenschutz",{"href":1091,"dataGaName":1092,"dataGaLocation":1036},[1285,1299],{"id":1286,"title":7,"body":568,"config":1287,"content":1289,"description":568,"extension":1293,"meta":1294,"navigation":572,"path":1295,"seo":1296,"stem":1297,"__hash__":1298},"blogAuthors/en-us/blog/authors/hiroki-suezawa.yml",{"template":1288},"BlogAuthor",{"name":7,"config":1290},{"headshot":1291,"ctfId":1292},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749662370/Blog/Author%20Headshots/hiroki_suezawa.png","cw6ZIj0yjr1uw2LAFr23h","yml",{},"/en-us/blog/authors/hiroki-suezawa",{},"en-us/blog/authors/hiroki-suezawa","5SalhkDKL3j3O2JyjOofwTFjgEeNhoGH8nLQDeI7N7c",{"id":1300,"title":8,"body":568,"config":1301,"content":1302,"description":568,"extension":1293,"meta":1306,"navigation":572,"path":1307,"seo":1308,"stem":1309,"__hash__":1310},"blogAuthors/en-us/blog/authors/mitra-jozenazemian.yml",{"template":1288},{"name":8,"config":1303},{"headshot":1304,"ctfId":1305},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749662373/Blog/Author%20Headshots/Screenshot_2024-10-25_at_8.23.56_AM.png","4suqsutT8w5ZmkIvSVrmWQ",{},"/en-us/blog/authors/mitra-jozenazemian",{},"en-us/blog/authors/mitra-jozenazemian","DzsXAQdHz5kyKwnJ-xGAs_Wr_lt8XWi_J9LQijwLiVY",[1312,1320,1328],{"title":1313,"description":1314,"heroImage":1315,"category":564,"date":1316,"authors":1317,"slug":1319,"externalUrl":568},"Sicherheitsrisiken der gesamten Organisation in einem Dashboard","Für Unternehmen mit vielen Top-Level-Gruppen fasst GitLab jetzt Schwachstellen und einen einheitlichen Risikowert für die gesamte Organisation zusammen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-10-08",[1318],"Alisa Ho","security-risk-in-one-dashboard",{"title":1321,"description":1322,"heroImage":1323,"category":564,"date":1324,"authors":1325,"slug":1327,"externalUrl":568},"Dependency Firewall: riskante Pakete vor dem Build stoppen","GitLab Dependency Firewall hält schädliche und anfällige Pakete automatisch aus dem Build fern, damit Teams und Agenten mit geprüften Abhängigkeiten arbeiten.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198675/kmajkudog4fj3xc6qfyb.png","2026-10-06",[1318,1326],"Amit Shalem","transcend-dependency-firewall",{"title":1329,"description":1330,"heroImage":1331,"category":564,"date":1332,"authors":1333,"slug":1335,"externalUrl":568},"Die Software Factory maschinenschnell sichern","Das Fundament für agentische Softwareentwicklung muss mit den KI-Modellen wachsen und den Weg von der Erkennung zur verifizierten Behebung verkürzen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-09-18",[1334],"Chaim Mazal","securing-the-software-factory-at-machine-speed",{"header":1337,"text":1338,"button":1342,"disclaimer":1345},"Kostenlose 30-tägige\n\nGitLab-Testversion starten\n",[1339,1340,1341],"GitLab Duo Agent Platform nutzen","Unsere fortschrittlichsten Funktionen ausprobieren","Komplexe Aufgaben mit KI automatisieren",{"text":974,"config":1343},{"href":1344,"dataGaName":595,"dataGaLocation":831},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/blog/","Keine Kreditkarte erforderlich.",{"header":1347,"blurb":1348,"button":1349,"secondaryButton":1354},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1350,"config":1351},"Kostenlosen Test starten",{"href":1352,"dataGaName":595,"dataGaLocation":1353},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":923,"config":1355},{"href":925,"dataGaName":600,"dataGaLocation":1353},1791952244155]