Securing the software factory at machine speed
The foundation for agentic software development must evolve with AI models, continuously shortening the path from detection to verified remediation.
Read PostBrowse articles that include the security tag
Featured post
Recent posts
Security
When to use SAST versus an LLM security scanner
AI-based review and SAST catch different classes of bugs and both have benefits. Here's how to decide which one runs where, and when your team needs both.
Security
GitLab Dedicated: Compliance for a new regulatory era
Streamline compliance with GitLab Dedicated. Gain isolation, control, and audit readiness for DORA, NIS2, and GDPR in a single-tenant SaaS environment.
Security
Prepare for the Cyber Resilience Act's 24-hour reporting deadline
Under the Cyber Resilience Act, manufacturers have 24 hours to report an actively exploited vulnerability in their product. See how GitLab helps you answer fast.
Security Labs
Critical remote code execution in vm2, a widely used Node.js sandbox library
GitLab's Threat Research Group found a critical sandbox escape in vm2 that runs attacker code using the library's own documented configuration.
Security
GitLab compliance frameworks: Adhere to SOC 2 in minutes
Use GitLab custom compliance framework templates to enforce SOC 2 and more, monitor adherence continuously, and cut audit prep from weeks to clicks.
Security
When your backlog outgrows your team, GitLab scales remediation
Clear your existing backlog and drive down risk with bulk false positive detection and vulnerability resolution.
Security Labs
Critical remote code execution in Serena, a popular MCP coding agent
GitLab's Threat Research Group found a critical template injection in Serena that runs attacker code the moment a developer opens a repository.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert