GitLab Orbit: Find vulnerability blast radius without the manual hunt
Exploitation happens at machine speed now. Map every project, owner, and pipeline a critical CVE touches so remediation can keep up.
Read Post
Exploitation happens at machine speed now. Map every project, owner, and pipeline a critical CVE touches so remediation can keep up.
Author: Rebecca CarterRead Post
Your entire software lifecycle in one queryable graph, with permissions intact. In GitLab testing, agents on GitLab Orbit made up to 45x fewer retries.

CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution. Learn which PHP versions fix them and how to check your projects.

See AI agent activity in one place with the GitLab AI Governance Dashboard, across Duo Agent Platform and the externally connected agents your developers use.

Now in early access, Business Logic Security Analyzer reads your repository, infers what each endpoint should enforce, and flags the gaps.

Client-side review helps the author move faster. Repo-side review on Duo Agent Platform certifies every merge request against rules you set once, at a flat $0.25 rate per review.

Run GitLab workflows from your favorite AI application in fewer calls and with leaner context. The GitLab MCP server is now generally available.

GitLab 19.5 recommends the right reviewer for every merge request, so reviews start sooner and route faster, and DevOps teams can ship more changes.
All fields required