[{"data":1,"prerenderedAt":954},["ShallowReactive",2],{"/blog/security-risk-in-one-dashboard":3,"navigation-en-us":191,"banner-en-us":623,"footer-en-us":633,"blog-post-authors-en-us-Alisa Ho":894,"blog-related-posts-en-us-security-risk-in-one-dashboard":908,"blog-share-wrapper-en-us":934,"next-steps-en-us":944},{"id":4,"title":5,"authors":6,"body":8,"category":172,"date":173,"description":174,"extension":175,"externalUrl":176,"faq":176,"featured":177,"heroImage":178,"meta":179,"navigation":180,"path":181,"seo":182,"slug":184,"stem":185,"tags":186,"template":189,"updatedDate":176,"__hash__":190},"blogPosts/en-us/blog/security-risk-in-one-dashboard.md","Track organization-wide security risk in one dashboard",[7],"Alisa Ho",{"type":9,"value":10,"toc":165},"minimark",[11,15,31,36,45,60,67,71,80,84,87,90,132,156],[12,13,14],"p",{},"If you run application security across more than one top-level group, getting a single organization-wide view of your risk has meant manually pulling together data. That is operational work rebuilt in spreadsheets and one-off scripts every time someone asks. This manual work is easy to get wrong, and is often out of date the moment it is published. Every hour spent assembling that view is an hour your security team is not spending on strategic work to drive down risk.",[12,16,17,18,24,25,30],{},"With GitLab 19.4, the ",[19,20,23],"a",{"href":21,"rel":22},"https://docs.gitlab.com/user/application_security/security_dashboard/#organization-security-dashboard",[],"security dashboard"," now gives you a consolidated view of risk at the organization level. Across every top-level group and every scanner your teams run, you can see how your whole application security program is doing, find where the real risk is concentrated, and act on it, without stitching anything together by hand. Your team spends its time remediating vulnerabilities instead of assembling reports, and when leadership or an auditor asks where the organization stands, you have a current, defensible answer on one screen. The organizational level security dashboard is available in beta for ",[19,26,29],{"href":27,"rel":28},"http://GitLab.com",[],"GitLab.com"," users.",[32,33,35],"h2",{"id":34},"see-total-risk-then-triage-down-to-the-project","See total risk, then triage down to the project",[12,37,38,39,44],{},"The ",[19,40,43],{"href":41,"rel":42},"https://docs.gitlab.com/user/application_security/security_dashboard/#risk-score-panel",[],"risk score"," quantifies the risk level across the entire organization. This score is calculated based on the severity and age of your open vulnerabilities, whether each one appears on the Known Exploited Vulnerabilities (KEV) list, and its Exploit Prediction Scoring System (EPSS) score. The risk score helps security leaders prioritize what area of the organization is most susceptible to threats, rather than a raw count that treats every finding as equal.",[12,46,47,48,53,54,59],{},"The charts around the risk score also proactively answer follow-up questions. ",[19,49,52],{"href":50,"rel":51},"https://docs.gitlab.com/user/application_security/security_dashboard/#vulnerabilities-over-time",[],"The Vulnerabilities over time"," view shows whether risk is trending up or down across the organization over 30, 60, or 90 days. ",[19,55,58],{"href":56,"rel":57},"https://docs.gitlab.com/user/application_security/security_dashboard/#vulnerabilities-by-age",[],"Vulnerabilities by age"," shows what is going stale and slipping past your remediation targets. Open vulnerabilities by severity and the top 10 Common Weakness Enumeration (CWE) show the shape of the risk, so a weakness that recurs across the whole organization gets interpreted as a training or policy gap rather than a series of bugs. Filter the entire dashboard by project or by report type to focus on static application security testing (SAST) or dependency scanning vulnerability types.",[12,61,62],{},[63,64],"img",{"alt":65,"src":66},"Security Dashboard","https://res.cloudinary.com/about-gitlab-com/image/upload/v1790167851/bujr5fgc20p2uf8uag1z.png",[32,68,70],{"id":69},"consolidate-every-scanner-into-one-view","Consolidate every scanner into one view",[12,72,73,74,79],{},"The organization dashboard isn’t limited to GitLab's own scanners. Any third-party scanner that outputs ",[19,75,78],{"href":76,"rel":77},"https://docs.gitlab.com/user/application_security/detect/sarif/",[],"Static Analysis Results Interchange Format (SARIF)"," reports can feed its findings into GitLab. These become vulnerability records like any native finding and roll up into the same risk score, charts, and per-project view. For a security team running multiple tools across the organization, you get one consolidated read on risk, including GitLab's scanners and those you already run, rather than a separate dashboard per tool and manual efforts to combine them.",[32,81,83],{"id":82},"turn-on-the-organization-security-dashboard","Turn on the organization security dashboard",[12,85,86],{},"The organization security dashboard is available in beta on GitLab.com for Ultimate. It reads the data your projects already produce, so switching it on depends on having the right pieces in place.",[12,88,89],{},"Before the dashboard can display your org-level risk, confirm four things:",[91,92,93,106,109,123],"ul",{},[94,95,96,97,101,102,105],"li",{},"You have created an Organization with multiple top-level groups using the Organizations (Beta) feature. To do this, Owners can ",[98,99,100],"strong",{},"Create Organizations"," under ",[98,103,104],{},"Settings > General > Advanced",".",[94,107,108],{},"You have Owner role access to the Organization-level in GitLab.",[94,110,111,116,117,122],{},[19,112,115],{"href":113,"rel":114},"https://docs.gitlab.com/user/search/advanced_search/",[],"Advanced search"," and ",[19,118,121],{"href":119,"rel":120},"https://docs.gitlab.com/user/application_security/vulnerability_report/#advanced-vulnerability-management",[],"advanced vulnerability management"," are active. These power the rollup across top-level groups, and on GitLab.com they are on by default.",[94,124,125,126,131],{},"Your projects run at least one ",[19,127,130],{"href":128,"rel":129},"https://docs.gitlab.com/user/application_security/detect/",[],"security scanner"," and have a completed scan on their default branch, so there are vulnerabilities to aggregate.",[12,133,134,135,138,139,142,143,146,147,150,151,155],{},"With that in place, go to the top bar, select ",[98,136,137],{},"Search"," or ",[98,140,141],{},"Go to",", and choose your Organization. In the left sidebar, select ",[98,144,145],{},"Secure",", then ",[98,148,149],{},"Security dashboard",". The ",[19,152,154],{"href":21,"rel":153},[],"organization view"," opens with the risk score and the charts across every top-level group in the organization.",[12,157,158,159,164],{},"Not on GitLab Ultimate yet? ",[19,160,163],{"href":161,"rel":162},"https://about.gitlab.com/free-trial/?utm_medium=native&utm_source=integrate-market&utm_campaign=eg_global_cmp_content-syndication_security_en_",[],"Start a free trial today"," to get organization-level visibility into your risk posture.",{"title":166,"searchDepth":167,"depth":167,"links":168},"",2,[169,170,171],{"id":34,"depth":167,"text":35},{"id":69,"depth":167,"text":70},{"id":82,"depth":167,"text":83},"security","2026-10-08","For enterprises with many top-level groups, GitLab now aggregates vulnerabilities and a single risk score across your entire organization.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png",{},true,"/en-us/blog/security-risk-in-one-dashboard",{"config":183,"title":5,"description":174},{"noIndex":177},"security-risk-in-one-dashboard","en-us/blog/security-risk-in-one-dashboard",[172,187,188],"features","AI","BlogPost","vd8MAJIq6YqEd9jVeITeR0QdyX7M_YUSge9yA-W7SDE",{"logo":192,"freeTrial":197,"sales":202,"login":207,"items":212,"search":543,"minimal":574,"duo":593,"switchNav":602,"pricingDeployment":613},{"config":193},{"href":194,"dataGaName":195,"dataGaLocation":196},"/","gitlab logo","header",{"text":198,"config":199},"Get free trial",{"href":200,"dataGaName":201,"dataGaLocation":196},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":203,"config":204},"Request a demo",{"href":205,"dataGaName":206,"dataGaLocation":196},"/request-a-demo/","sales",{"text":208,"config":209},"Sign in",{"href":210,"dataGaName":211,"dataGaLocation":196},"https://gitlab.com/users/sign_in/","sign in",[213,299,387,392,467,521],{"text":214,"left":180,"config":215,"menu":217},"Platform",{"dataNavLevelOne":216},"platform",{"type":218,"link":219,"columns":223,"feature":288},"lists",{"text":220,"config":221},"Explore the Platform",{"href":222,"dataGaName":216,"dataGaLocation":196},"/platform/",[224,247,270],{"title":225,"items":226},"Execution & Workflows",[227,232,237,242],{"text":228,"config":229},"CI/CD",{"href":230,"dataGaLocation":196,"dataGaName":231},"/solutions/continuous-integration/","ci/cd",{"text":233,"config":234},"Source Code Management",{"href":235,"dataGaLocation":196,"dataGaName":236},"/solutions/source-code-management/","source code management",{"text":238,"config":239},"Agile Delivery",{"href":240,"dataGaLocation":196,"dataGaName":241},"/solutions/agile-delivery/","agile delivery",{"text":243,"config":244},"Artifact Management",{"href":245,"dataGaLocation":196,"dataGaName":246},"/artifact-central/","artifact management",{"title":248,"items":249},"Security & Governance",[250,255,260,265],{"text":251,"config":252},"Application Security Testing",{"href":253,"dataGaLocation":196,"dataGaName":254},"/solutions/application-security-testing/","application security testing",{"text":256,"config":257},"Governance & Compliance",{"href":258,"dataGaLocation":196,"dataGaName":259},"/solutions/software-compliance/","governance and compliance",{"text":261,"config":262},"Secrets Management",{"href":263,"dataGaLocation":196,"dataGaName":264},"/gitlab-secrets-manager/","secrets management",{"text":266,"config":267},"Supply Chain Security",{"href":268,"dataGaLocation":196,"dataGaName":269},"/solutions/supply-chain/","supply chain security",{"title":271,"items":272},"Context & AI",[273,278,283],{"text":274,"config":275},"Agentic Orchestration",{"href":276,"dataGaLocation":196,"dataGaName":277},"/gitlab-duo-agent-platform/","agentic orchestration",{"text":279,"config":280},"Context Graph",{"href":281,"dataGaLocation":196,"dataGaName":282},"/gitlab-orbit/","context graph",{"text":284,"config":285},"Visibility & Measurement",{"href":286,"dataGaLocation":196,"dataGaName":287},"/solutions/visibility-measurement/","visibility and measurement",{"config":289,"title":292,"text":293,"link":294},{"background":290,"textColor":291},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1790185102/o7dn32anqcb6z8dgd3as.jpg')","#000","Why GitLab","One platform for speed with control across your software lifecycle.",{"text":295,"config":296},"Learn more",{"href":297,"dataGaName":298,"dataGaLocation":196},"/why-gitlab/","why gitlab",{"text":300,"left":180,"config":301,"menu":303},"Solutions",{"dataNavLevelOne":302},"solutions",{"type":218,"link":304,"columns":308,"feature":378},{"text":305,"config":306},"View all Solutions",{"href":307,"dataGaName":302,"dataGaLocation":196},"/solutions/",[309,327,345],{"title":310,"items":311},"Outcomes",[312,317,322],{"text":313,"config":314},"DevOps Modernization",{"href":315,"dataGaLocation":196,"dataGaName":316},"/assessments/devops-modernization-assessment/","devops modernization",{"text":318,"config":319},"Security Modernization",{"href":320,"dataGaLocation":196,"dataGaName":321},"/assessments/security-modernization-assessment/","security modernization",{"text":323,"config":324},"AI Modernization",{"href":325,"dataGaLocation":196,"dataGaName":326},"/assessments/ai-modernization-assessment/","ai modernization",{"title":328,"items":329},"By size",[330,335,340],{"text":331,"config":332},"Enterprise",{"href":333,"dataGaLocation":196,"dataGaName":334},"/enterprise/","enterprise",{"text":336,"config":337},"Small Business",{"href":338,"dataGaLocation":196,"dataGaName":339},"/small-business/","small business",{"text":341,"config":342},"Startups",{"href":343,"dataGaLocation":196,"dataGaName":344},"/solutions/startups/","startups",{"title":346,"items":347},"Industries",[348,353,358,363,368,373],{"text":349,"config":350},"Financial Services",{"href":351,"dataGaLocation":196,"dataGaName":352},"/solutions/finance/","financial services",{"text":354,"config":355},"Public Sector",{"href":356,"dataGaLocation":196,"dataGaName":357},"/solutions/public-sector/","public sector",{"text":359,"config":360},"Telecommunications",{"href":361,"dataGaLocation":196,"dataGaName":362},"/solutions/telecommunications/","telecommunications",{"text":364,"config":365},"Automotive",{"href":366,"dataGaLocation":196,"dataGaName":367},"/solutions/automotive/","automotive",{"text":369,"config":370},"Education",{"href":371,"dataGaLocation":196,"dataGaName":372},"/solutions/education/","education",{"text":374,"config":375},"Aerospace",{"href":376,"dataGaLocation":196,"dataGaName":377},"/solutions/aerospace/","aerospace",{"config":379,"title":380,"text":381,"link":382},{"background":290,"textColor":291},"GitLab Security Standard","Learn how to harden your software factory and let AI agents earn autonomy, without trading away security.",{"text":383,"config":384},"Explore the standard",{"href":385,"dataGaName":386,"dataGaLocation":196},"/gitlab-security-standard/","gitlab security standard",{"text":388,"config":389},"Pricing",{"href":390,"dataGaName":391,"dataGaLocation":196,"dataNavLevelOne":391},"/pricing/","pricing",{"text":393,"config":394,"menu":396},"Resources",{"dataNavLevelOne":395},"resources",{"type":218,"link":397,"columns":401,"feature":458},{"text":398,"config":399},"View all resources",{"href":400,"dataGaName":395,"dataGaLocation":196},"/resources/",[402,430],{"title":403,"items":404},"Discover",[405,410,415,420,425],{"text":406,"config":407},"Docs",{"href":408,"dataGaName":409,"dataGaLocation":196},"https://docs.gitlab.com/","docs",{"text":411,"config":412},"University",{"href":413,"dataGaName":414,"dataGaLocation":196},"https://university.gitlab.com/","university",{"text":416,"config":417},"Demo Series",{"href":418,"dataGaName":419,"dataGaLocation":196},"/gitlab-technical-demo-series/","demo series",{"text":421,"config":422},"Demo Hub",{"href":423,"dataGaName":424,"dataGaLocation":196},"/demo-hub/","demo hub",{"text":426,"config":427},"Services",{"href":428,"dataGaName":429,"dataGaLocation":196},"/services/","services",{"title":431,"items":432},"Connect",[433,438,443,448,453],{"text":434,"config":435},"Blog",{"href":436,"dataGaName":437,"dataGaLocation":196},"/blog/","blog",{"text":439,"config":440},"Community",{"href":441,"dataGaName":442,"dataGaLocation":196},"/community/","community",{"text":444,"config":445},"Customers",{"href":446,"dataGaName":447,"dataGaLocation":196},"/customers/","customers",{"text":449,"config":450},"Partners",{"href":451,"dataGaName":452,"dataGaLocation":196},"/partners/","partners",{"text":454,"config":455},"Events",{"href":456,"dataGaName":457,"dataGaLocation":196},"/events/","events",{"config":459,"title":460,"text":461,"link":462},{"background":290,"textColor":291},"What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":463,"config":464},"Read the latest",{"href":465,"dataGaName":466,"dataGaLocation":196},"/whats-new/","whats new",{"text":468,"config":469,"menu":471},"Company",{"dataNavLevelOne":470},"company",{"type":218,"columns":472},[473],{"items":474},[475,480,486,491,496,501,506,511,516],{"text":476,"config":477},"About",{"href":478,"dataGaName":479,"dataGaLocation":196},"/company/","about",{"text":481,"config":482,"footerGa":485},"Jobs",{"href":483,"dataGaName":484,"dataGaLocation":196},"/jobs/","jobs",{"dataGaName":484},{"text":487,"config":488},"Press",{"href":489,"dataGaName":490,"dataGaLocation":196},"/press/","press",{"text":492,"config":493},"Handbook",{"href":494,"dataGaName":495,"dataGaLocation":196},"https://handbook.gitlab.com/","handbook",{"text":497,"config":498},"Leadership",{"href":499,"dataGaName":500,"dataGaLocation":196},"/company/team/e-group/","leadership",{"text":502,"config":503},"Investor relations",{"href":504,"dataGaName":505,"dataGaLocation":196},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":507,"config":508},"Trust Center",{"href":509,"dataGaName":510,"dataGaLocation":196},"/security/","trust center",{"text":512,"config":513},"AI Transparency Center",{"href":514,"dataGaName":515,"dataGaLocation":196},"/ai-transparency-center/","ai transparency center",{"text":517,"config":518},"Newsletter",{"href":519,"dataGaName":520,"dataGaLocation":196},"/company/contact/#contact-forms","newsletter",{"text":522,"config":523,"menu":524},"Contact us",{"dataNavLevelOne":470},{"type":218,"columns":525},[526],{"items":527},[528,533,538],{"text":529,"config":530},"Talk to sales",{"href":531,"dataGaName":532,"dataGaLocation":196},"/sales/","talk to sales",{"text":534,"config":535},"Support portal",{"href":536,"dataGaName":537,"dataGaLocation":196},"https://support.gitlab.com/hc/en-us","support portal",{"text":539,"config":540},"Customer portal",{"href":541,"dataGaName":542,"dataGaLocation":196},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":544,"login":545,"suggestions":552},"Close",{"text":546,"link":547},"To search repositories and projects, login to",{"text":548,"config":549},"gitlab.com",{"href":210,"dataGaName":550,"dataGaLocation":551},"search login","search",{"text":553,"default":554},"Suggestions",[555,558,561,563,567,571],{"text":556,"config":557},"GitLab Duo Agent Platform",{"href":276,"dataGaName":556,"dataGaLocation":551},{"text":559,"config":560},"Code Suggestions (AI)",{"href":276,"dataGaName":559,"dataGaLocation":551},{"text":228,"config":562},{"href":230,"dataGaName":228,"dataGaLocation":551},{"text":564,"config":565},"GitLab on AWS",{"href":566,"dataGaName":564,"dataGaLocation":551},"/partners/technology-partners/aws/",{"text":568,"config":569},"GitLab on Google Cloud",{"href":570,"dataGaName":568,"dataGaLocation":551},"/partners/technology-partners/google-cloud-platform/",{"text":572,"config":573},"Why GitLab?",{"href":297,"dataGaName":572,"dataGaLocation":551},{"freeTrial":575,"mobileIcon":580,"desktopIcon":585,"secondaryButton":588},{"text":576,"config":577},"Start free trial",{"href":578,"dataGaName":201,"dataGaLocation":579},"https://gitlab.com/-/trials/new/","nav",{"altText":581,"config":582},"Gitlab Icon",{"src":583,"dataGaName":584,"dataGaLocation":579},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":581,"config":586},{"src":587,"dataGaName":584,"dataGaLocation":579},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":589,"config":590},"Get Started",{"href":591,"dataGaName":592,"dataGaLocation":579},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":594,"mobileIcon":598,"desktopIcon":600},{"text":595,"config":596},"Learn more about GitLab Duo",{"href":276,"dataGaName":597,"dataGaLocation":579},"gitlab duo",{"altText":581,"config":599},{"src":583,"dataGaName":584,"dataGaLocation":579},{"altText":581,"config":601},{"src":587,"dataGaName":584,"dataGaLocation":579},{"button":603,"mobileIcon":608,"desktopIcon":610},{"text":604,"config":605},"/switch",{"href":606,"dataGaName":607,"dataGaLocation":579},"#contact","switch",{"altText":581,"config":609},{"src":583,"dataGaName":584,"dataGaLocation":579},{"altText":581,"config":611},{"src":612,"dataGaName":584,"dataGaLocation":579},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":614,"mobileIcon":619,"desktopIcon":621},{"text":615,"config":616},"Back to pricing",{"href":390,"dataGaName":617,"dataGaLocation":579,"icon":618},"back to pricing","GoBack",{"altText":581,"config":620},{"src":583,"dataGaName":584,"dataGaLocation":579},{"altText":581,"config":622},{"src":587,"dataGaName":584,"dataGaLocation":579},{"title":624,"button":625,"config":631},"Ship at agent speed. Prove every step. Transcend is here.",{"text":626,"config":627},"Watch now",{"href":628,"dataGaName":629,"dataGaLocation":630},"/events/transcend/virtual/#watch-gitlab-transcend","transcend-october-2026-banner","global-banner",{"layout":632,"disabled":177},"release",{"data":634},{"text":635,"source":636,"edit":642,"contribute":647,"config":652,"items":657,"minimal":883},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":637,"config":638},"View page source",{"href":639,"dataGaName":640,"dataGaLocation":641},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":643,"config":644},"Edit this page",{"href":645,"dataGaName":646,"dataGaLocation":641},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":648,"config":649},"Please contribute",{"href":650,"dataGaName":651,"dataGaLocation":641},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":653,"facebook":654,"youtube":655,"linkedin":656},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[658,705,763,810,851],{"title":388,"links":659,"subMenu":674},[660,664,669],{"text":661,"config":662},"View plans",{"href":390,"dataGaName":663,"dataGaLocation":641},"view plans",{"text":665,"config":666},"Why Premium?",{"href":667,"dataGaName":668,"dataGaLocation":641},"/pricing/premium/","why premium",{"text":670,"config":671},"Why Ultimate?",{"href":672,"dataGaName":673,"dataGaLocation":641},"/pricing/ultimate/","why ultimate",[675],{"title":676,"links":677},"Contact Us",[678,681,683,685,690,695,700],{"text":679,"config":680},"Contact sales",{"href":531,"dataGaName":206,"dataGaLocation":641},{"text":534,"config":682},{"href":536,"dataGaName":537,"dataGaLocation":641},{"text":539,"config":684},{"href":541,"dataGaName":542,"dataGaLocation":641},{"text":686,"config":687},"Status",{"href":688,"dataGaName":689,"dataGaLocation":641},"https://status.gitlab.com/","status",{"text":691,"config":692},"Terms of use",{"href":693,"dataGaName":694,"dataGaLocation":641},"/terms/","terms of use",{"text":696,"config":697},"Privacy statement",{"href":698,"dataGaName":699,"dataGaLocation":641},"/privacy/","privacy statement",{"text":701,"config":702},"Cookie preferences",{"dataGaName":703,"dataGaLocation":641,"id":704,"isOneTrustButton":180},"cookie preferences","ot-sdk-btn",{"title":214,"links":706,"subMenu":720},[707,710,712,714,716,718],{"text":708,"config":709},"Explore the platform",{"href":222,"dataGaName":216,"dataGaLocation":641},{"text":274,"config":711},{"href":276,"dataGaName":277,"dataGaLocation":641},{"text":228,"config":713},{"href":230,"dataGaName":231,"dataGaLocation":641},{"text":279,"config":715},{"href":281,"dataGaName":282,"dataGaLocation":641},{"text":261,"config":717},{"href":263,"dataGaName":264,"dataGaLocation":641},{"text":292,"config":719},{"href":297,"dataGaName":298,"dataGaLocation":641},[721],{"title":722,"links":723},"Topics",[724,728,733,738,743,748,753,758],{"text":228,"config":725},{"href":726,"dataGaName":727,"dataGaLocation":641},"/topics/ci-cd/","cicd",{"text":729,"config":730},"GitOps",{"href":731,"dataGaName":732,"dataGaLocation":641},"/topics/gitops/","gitops",{"text":734,"config":735},"DevOps",{"href":736,"dataGaName":737,"dataGaLocation":641},"/topics/devops/","devops",{"text":739,"config":740},"Version Control",{"href":741,"dataGaName":742,"dataGaLocation":641},"/topics/version-control/","version control",{"text":744,"config":745},"DevSecOps",{"href":746,"dataGaName":747,"dataGaLocation":641},"/topics/devsecops/","devsecops",{"text":749,"config":750},"Cloud Native",{"href":751,"dataGaName":752,"dataGaLocation":641},"/topics/cloud-native/","cloud native",{"text":754,"config":755},"AI for Coding",{"href":756,"dataGaName":757,"dataGaLocation":641},"/topics/devops/ai-for-coding/","ai for coding",{"text":759,"config":760},"Agentic AI",{"href":761,"dataGaName":762,"dataGaLocation":641},"/topics/agentic-ai/","agentic ai",{"title":300,"links":764},[765,768,771,774,777,780,782,784,786,788,790,793,795,798,802,806],{"text":766,"config":767},"DevOps modernization",{"href":315,"dataGaName":316,"dataGaLocation":641},{"text":769,"config":770},"Security modernization",{"href":320,"dataGaName":321,"dataGaLocation":641},{"text":772,"config":773},"AI modernization",{"href":325,"dataGaName":326,"dataGaLocation":641},{"text":775,"config":776},"Financial services",{"href":351,"dataGaName":352,"dataGaLocation":641},{"text":778,"config":779},"Public sector",{"href":356,"dataGaName":357,"dataGaLocation":641},{"text":359,"config":781},{"href":361,"dataGaName":362,"dataGaLocation":641},{"text":364,"config":783},{"href":366,"dataGaName":367,"dataGaLocation":641},{"text":369,"config":785},{"href":371,"dataGaName":372,"dataGaLocation":641},{"text":374,"config":787},{"href":376,"dataGaName":377,"dataGaLocation":641},{"text":331,"config":789},{"href":333,"dataGaName":334,"dataGaLocation":641},{"text":791,"config":792},"Small business",{"href":338,"dataGaName":339,"dataGaLocation":641},{"text":341,"config":794},{"href":343,"dataGaName":344,"dataGaLocation":641},{"text":729,"config":796},{"href":797,"dataGaName":732,"dataGaLocation":641},"/solutions/gitops/",{"text":799,"config":800},"Software composition analysis",{"href":268,"dataGaName":801,"dataGaLocation":641},"software composition analysis",{"text":803,"config":804},"Value stream management",{"href":286,"dataGaName":805,"dataGaLocation":641},"value stream management",{"text":807,"config":808},"All solutions",{"href":307,"dataGaName":809,"dataGaLocation":641},"all solutions",{"title":393,"links":811},[812,817,822,824,826,828,830,832,834,836,838,840,842,844,847],{"text":813,"config":814},"Install",{"href":815,"dataGaName":816,"dataGaLocation":641},"/install/","install",{"text":818,"config":819},"Quick start guides",{"href":820,"dataGaName":821,"dataGaLocation":641},"/get-started/","quick setup checklists",{"text":406,"config":823},{"href":408,"dataGaName":409,"dataGaLocation":641},{"text":411,"config":825},{"href":413,"dataGaName":414,"dataGaLocation":641},{"text":416,"config":827},{"href":418,"dataGaName":419,"dataGaLocation":641},{"text":421,"config":829},{"href":423,"dataGaName":424,"dataGaLocation":641},{"text":426,"config":831},{"href":428,"dataGaName":429,"dataGaLocation":641},{"text":434,"config":833},{"href":436,"dataGaName":437,"dataGaLocation":641},{"text":439,"config":835},{"href":441,"dataGaName":442,"dataGaLocation":641},{"text":444,"config":837},{"href":446,"dataGaName":447,"dataGaLocation":641},{"text":449,"config":839},{"href":451,"dataGaName":452,"dataGaLocation":641},{"text":454,"config":841},{"href":456,"dataGaName":457,"dataGaLocation":641},{"text":517,"config":843},{"href":519,"dataGaName":520,"dataGaLocation":641},{"text":845,"config":846},"What's new",{"href":465,"dataGaName":466,"dataGaLocation":641},{"text":848,"config":849},"All resources",{"href":400,"dataGaName":850,"dataGaLocation":641},"all resources",{"title":468,"links":852},[853,855,857,859,861,863,865,867,869,873,878],{"text":476,"config":854},{"href":478,"dataGaName":470,"dataGaLocation":641},{"text":481,"config":856},{"href":483,"dataGaName":484,"dataGaLocation":641},{"text":487,"config":858},{"href":489,"dataGaName":490,"dataGaLocation":641},{"text":492,"config":860},{"href":494,"dataGaName":495,"dataGaLocation":641},{"text":497,"config":862},{"href":499,"dataGaName":500,"dataGaLocation":641},{"text":502,"config":864},{"href":504,"dataGaName":505,"dataGaLocation":641},{"text":507,"config":866},{"href":509,"dataGaName":510,"dataGaLocation":641},{"text":512,"config":868},{"href":514,"dataGaName":515,"dataGaLocation":641},{"text":870,"config":871},"Sustainability",{"href":872,"dataGaName":870,"dataGaLocation":641},"/sustainability/",{"text":874,"config":875},"Diversity, inclusion and belonging (DIB)",{"href":876,"dataGaName":877,"dataGaLocation":641},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":879,"config":880},"Modern Slavery Transparency Statement",{"href":881,"dataGaName":882,"dataGaLocation":641},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":884},[885,888,891],{"text":886,"config":887},"Terms",{"href":693,"dataGaName":694,"dataGaLocation":641},{"text":889,"config":890},"Cookies",{"dataGaName":703,"dataGaLocation":641,"id":704,"isOneTrustButton":180},{"text":892,"config":893},"Privacy",{"href":698,"dataGaName":699,"dataGaLocation":641},[895],{"id":896,"title":7,"body":176,"config":897,"content":899,"description":176,"extension":902,"meta":903,"navigation":180,"path":904,"seo":905,"stem":906,"__hash__":907},"blogAuthors/en-us/blog/authors/alisa-ho.yml",{"template":898},"BlogAuthor",{"name":7,"config":900},{"headshot":901},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1771440109/xcnydlisb91u4qiwdyw2.jpg","yml",{},"/en-us/blog/authors/alisa-ho",{},"en-us/blog/authors/alisa-ho","WU4QiU5Np9PQ8aLtvZXnH41_rF4JeUvaD9lOvDqkzYw",[909,917,925],{"title":910,"description":911,"heroImage":912,"category":172,"date":913,"authors":914,"slug":916,"externalUrl":176},"Dependency Firewall: Block risky packages before the build","GitLab Dependency Firewall helps keep malicious and vulnerable packages out of your build automatically, so teams and their agents ship fast with trusted dependencies.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198675/kmajkudog4fj3xc6qfyb.png","2026-10-06",[7,915],"Amit Shalem","transcend-dependency-firewall",{"title":918,"description":919,"heroImage":920,"category":172,"date":921,"authors":922,"slug":924,"externalUrl":176},"Securing the software factory at machine speed","The foundation for agentic software development must evolve with AI models, continuously shortening the path from detection to verified remediation.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-09-18",[923],"Chaim Mazal","securing-the-software-factory-at-machine-speed",{"title":926,"description":927,"heroImage":928,"category":172,"date":929,"authors":930,"slug":933,"externalUrl":176},"When to use SAST versus an LLM security scanner","AI-based review and SAST catch different classes of bugs and both have benefits. Here's how to decide which one runs where, and when your team needs both. ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756989645/fojzxakmfdea6jfqjkrl.png","2026-09-16",[931,932],"Meir Benayoun","Chris Widstrom","sast-vs-llm-security-scanner",{"header":935,"text":936,"button":940,"disclaimer":943},"Start your free\n\n30-day GitLab trial\n",[937,938,939],"GitLab Duo Agent Platform access","Try our most advanced features","Automate complex tasks with AI",{"text":198,"config":941},{"href":942,"dataGaName":201,"dataGaLocation":437},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/blog/","No credit card required.",{"header":945,"blurb":946,"button":947,"secondaryButton":952},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":948,"config":949},"Get your free trial",{"href":950,"dataGaName":201,"dataGaLocation":951},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":679,"config":953},{"href":531,"dataGaName":206,"dataGaLocation":951},1791483298945]