The benefits of transparency in a compliance audit
We’re transparent by default, and just completed our first SOC 2 Type 1 audit! How does our public-first stance affect our compliance efforts and impact an audit? Read on
How we manage open source security software
Open source software presents unique security challenges. Here’s what you need to know.
Top 6 security trends in GitLab-hosted projects
Using components with known vulnerabilities is the most common security problem in GitLab.com-hosted projects.
How to exploit parser differentials
Your guide to abusing 'language barriers' between web components.
We answer your most popular questions about our Zero Trust journey
From why we chose Okta to issues around data fluidity, here are answers to your most-asked ZT questions.
Tutorial on privilege escalation and post exploitation tactics in Google Cloud Platform environments
A Red Team exercise on exploiting design decisions on GCP.
GitLab is now a member of the OWASP Foundation
GitLab is thrilled to announce our membership in the OWASP Foundation.
Celebrating a million dollars in bounties paid
Our bug bounty program has grown, expanded and matured in the past 5 years. A lot can happen in a million dollars’ time.
Introducing Token-Hunter
Our red team has created a new tool to find sensitive data in the vast, wide-open.
Bugs, bounties, and cherry browns
Cheers, our bug bounty program is celebrating one year!
Shopping for an admin account via path traversal
How to exploit a path traversal issue to gain an admin account
How to overcome toolchain security challenges with GitLab
Use GitLab to control your toolchain sprawl, improve team communication and productivity, and secure your DevOps lifecycle.
We are increasing bounties in our bug bounty program
We're now offering higher bounties for critical and high severity reports.
Zero Trust at GitLab: Where do we go from here?
We take a look back at how far we've come in our ZTN implementation, and at the progress we still need to make.
Zero Trust at GitLab: Implementation challenges (and a few solutions)
Implementing change in an already working environment always brings its fair share of growing pains. What happens when that change is Zero Trust?
Why we're reducing the time to payout and launching a bug bounty anniversary contest
You talked. We listened. Quicker bug bounty payouts and we're holding a contest for our hackers!