GitLab Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines the application security testing (AST) market as consisting of providers of products that enable organizations to assess applications for the presence and management of risk. These products identify risk by evaluating source code, performing runtime tests and inspecting supply chain components. AST products can be integrated throughout development workflows for continuous assessment or be used to perform ad hoc evaluations. They enable organizations to manage application risks by providing an integrated set of capabilities for risk identification, prioritization and triage, policy evaluation and enforcement, and remediation assistance. Market offerings are available in on-premises, SaaS and hybrid delivery models. Organizations leverage AST products to assess applications for the presence of security vulnerabilities and other risks (e.g., legal and operational) throughout their life cycle. These assessments are used to measure and manage the risks within individual applications, application components or groups of applications in the context of their business criticality and other key attributes (e.g., environment, sensitive data handling, etc.). AST products further enable organizations to evaluate software for compliance with internal policies as well as regulatory requirements established by governments or authoritative industry groups.

Active

Find the top Application Security Testing Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Application Security Testing

GitLab

It Security & Risk Management Associate

GitLab es una plataforma DevSecOps muy completa que centraliza todo el ciclo de vida del desarrollo en una única herramienta. Lo que mejor funciona es la integración nativa entre repositorios, CI/CD, seguridad y gestión de proyectos, lo que reduce la necesidad de múltiples herramientas externas. 

GitLab is a comprehensive DevSecOps platform that centralizes the entire development lifecycle in a single tool. Its greatest strength lies in its native integration of repositories, CI/CD, security, and project management, which reduces the need for multiple external tools.

50M - 250M USD

<50M USD

3B - 10B USD

250M - 500M USD

500M - 1B USD

1B - 3B USD

10B - 30B USD

30B + USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Principal Software Engineer

I will be honest, when we started using GitLab, I had high hopes, but with other tools on the market, I feel like ither solutions are better

IT Security & Risk Management Associate

We use GitLab mainly for source code management, CI/CD pipelines, and collaboration between development teams. Having repository management, pipelines, and issue tracking in one platform helps simplify the development workflow and reduces the need for multiple separate tools.

The CI/CD integration works well and is flexible enough for different deployment scenarios. Merge request and branch management features also help improve collaboration during development. Initial setup was relatively straightforward, although optimizing runners and pipelines required some tuning depending on the environment.

One challenge is that some advanced features have a learning curve, especially for teams that are new to DevOps practices. Pipeline troubleshooting can also become difficult when configurations grow more complex.

GitHub

Veracode

Checkmarx

Rapid7

LevelBlue

JFrog

SonarSource

HCLTech

Snyk

Other...

Contrast Security

Qualys

Black Duck

OpenText (Micro Focus)

ERPScan

CAST

Solar Security

Tenable

Edgescan

CloudDefense

Invicti

Perforce

Data Theorem

Codacy

Sonatype

Symantec (Appthority)

AdaCore

ImmuniWeb

DeepSource

GitLab is a comprehensive AI-powered DevSecOps platform for software innovation. As a software delivery platform for development, security, and operations teams, GitLab brings security and compliance to AI-powered workflows throughout the software delivery lifecycle, helping customers deliver secure software faster. GitLab Duo, the company’s suite of AI capabilities, improves team collaboration and reduces the security and compliance risks of AI adoption by bringing the entire software development lifecycle into a single AI-powered application that is privacy-first.

With GitLab, customers can visualize their end-to-end value streams, boost developer productivity with out-of-the-box analytics, and secure their software supply chain with SAST, DAST, secret detection, container scanning, and API testing. It enables organizations to increase developer productivity, improve operational efficiency, and accelerate cloud transformations to maximize the overall return on software development. 

GitLab is a complete DevOps platform, delivered as a single application, fundamentally changing the way Development, Security, and Ops teams collaborate and build software. From idea to production, GitLab helps teams improve cycle time from weeks to minutes, reduce development costs and time to market while increasing developer productivity.

We're the world's largest all-remote company with team members located in more than 65 countries. As part of the GitLab team, you can work from anywhere with good internet. You'll have the freedom to contribute when and where you do your best work.

Interested in opportunities at GitLab? Join our talent community and share your information with our recruiting team: https://about.gitlab.com/jobs/ 

Reviews

Ratings Overview

Overall experience with

Favorable Review

Flexible DevOps Platform with Strong CI/CD and Security Integration

Critical Review

GitLab is good, but I think they can do better

Likes and dislikes about

likes

dislikes