• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • No categories available

      Browse All Categories

      Select a category to view markets

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In

Overview

Product Information on GitLab

Updated 22nd November 2023

What is GitLab?

GitLab is a comprehensive AI-powered DevSecOps platform that seamlessly unites security and development teams while helping customers standardize pipelines around security and compliance policies. It provides the visibility and controls necessary to create more secure software and ensure end-to-end software supply chain security. GitLab enables customers to (1) find and fix vulnerabilities in application code and cloud-native environments, (2) have one tool for both developers and security professionals to improve collaboration, (3) create and ingest software bill of materials (SBOMs) and ensure adherence to license compliance, (4) seamlessly integrate security scanners into the CI/CD pipeline out of the box, with no additional licenses to manage, (5) implement a broad range of policies and common controls for compliance, (6) simplify adoption of security and governance capabilities across the SDLC.

GitLab Pricing

GitLab Product Images

Vulnerability Report
Vulnerability Report

Overall experience with GitLab

IT Security & Risk Management Associate
3B - 10B USD, Banking
FAVORABLE

“Flexible DevOps Platform with Strong CI/CD and Security Integration”

4.0
May 14, 2026
We use GitLab mainly for source code management, CI/CD pipelines, and collaboration between development teams. Having repository management, pipelines, and issue tracking in one platform helps simplify the development workflow and reduces the need for multiple separate tools. The CI/CD integration works well and is flexible enough for different deployment scenarios. Merge request and branch management features also help improve collaboration during development. Initial setup was relatively straightforward, although optimizing runners and pipelines required some tuning depending on the environment. One challenge is that some advanced features have a learning curve, especially for teams that are new to DevOps practices. Pipeline troubleshooting can also become difficult when configurations grow more complex.
Principal Software Engineer
<50M USD, IT Services
CRITICAL

“GitLab is good, but I think they can do better”

3.0
Nov 25, 2025
I will be honest, when we started using GitLab, I had high hopes, but with other tools on the market, I feel like ither solutions are better

Badges

Gartner Peer Insights recognizes vendors who meet or exceed both the market average Overall Experience and the market average User Interest and Adoption score through a Customers’ Choice distinction.
2026
For Market:
Application Security Posture Management (ASPM) Tools

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Powered by Google TranslateThis service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.

  1. Home
  2. /
  3. GitLab
Logo of GitLab

GitLab

byGitLab
in
4.4
2026
Market Presence: DevOps Platforms (Transitioning to DevSecOps Platforms), Enterprise Agile Planning Tools

About Company

Company Description

Updated 20th November 2023

GitLab is a comprehensive AI-powered DevSecOps platform for software innovation. As a software delivery platform for development, security, and operations teams, GitLab brings security and compliance to AI-powered workflows throughout the software delivery lifecycle, helping customers deliver secure software faster. GitLab Duo, the company’s suite of AI capabilities, improves team collaboration and reduces the security and compliance risks of AI adoption by bringing the entire software development lifecycle into a single AI-powered application that is privacy-first. With GitLab, customers can visualize their end-to-end value streams, boost developer productivity with out-of-the-box analytics, and secure their software supply chain with SAST, DAST, secret detection, container scanning, and API testing. It enables organizations to increase developer productivity, improve operational efficiency, and accelerate cloud transformations to maximize the overall return on software development.

Company Details

Updated 26th February 2025
Company type
Public
Year Founded
2014
Head office location
United States
Number of employees
1001 - 5000
Website
https://about.gitlab.com/

Do You Manage Peer Insights at GitLab?

Access Vendor Portal to update and manage your profile.

GitLab Likes & Dislikes

Like

- Integrated CI/CD and repository management in a single platform. - Good collaboration features through merge requests and issue tracking. - Flexible pipeline configuration for different deployment workflows.

Like

Community and support, there is so many tools to integrate, and documentation is well placed.

Like

Undoubtedly the all-in-one platform. Highly configurable CI/CD. Native security integration. Self-hosting and flexibility for on-premises or cloud deployment. Complete traceability from commit to production.

Automated Translation from Spanish
Dislike

- Pipeline troubleshooting can become difficult when CI/CD configurations grow more complex. - Some advanced security and compliance features are only available in higher licensing tiers. - Runner management and maintenance still require additional operational effort in some environments.

Dislike

The UI can be changed and optimized, specially if you are new, you will get lost, but once you get familiar, it will be fine

Dislike

The learning curve is steep, especially in CI/CD. Performance in large installations can degrade, and the number of vulnerabilities necessitates constant updates; we've been having to upgrade to a newer version every week for some time now.

Automated Translation from Spanish

Peer Discussions

What Your Peers Are Saying About GitLab

Director of Information Security
Best Practices to create a SBOM with EOS/EOL Timeline to aid vulnerability remediation (currently use GitLab as our pipeline and Nexus repository).
Group Director of Information Security
It's a 5-step process which you will need to correlate for your environment. 1. Integrate dependency scanners (e.g., GitLab's built-in scanner, Trivy, Snyk, OWASP Dependency-Check or your existing Nexus repo) to flag outdated dependencies and use GitLab’s security dashboard to monitor deprecated packages. 2. Set up GitLab CI/CD rules to fail builds if EOL/EOS dependencies are detected and enforce allow/block lists for dependencies using GitLab’s security policies. 3. Configure GitLab to generate reports when a dependency is approaching its EOL and see if you can use GitLab’s webhook integrations to notify security teams via Slack, email, or Jira. 4. Implement dependency auto-updating tools (e.g., Renovate, Dependabot) to replace (identified & manually verified) EOL/EOS components. If no direct upgrade path exists, isolate the outdated component via containerization or sandboxing. 5. Maintain a historical record of all SBOMs and EOL/EOS alerts for compliance audits (ISO 27001, NIST, etc.). Regularly conduct security reviews using GitLab’s security reports.
See Full Discussion
22 Feb 2025471 Views1 Comment
IT Analyst
What has been your experience utilizing GITLAB (not GITHUB) to implement CI/CD for Athena and AWS GLUE, specifically for a process to transfer changes in Athena Views from the development environment to production?
CTO
We have used gitlab CI CD pipelines using terraform for all AWS resources, not athena or glue specifically though.
See Full Discussion
18 May 20231.1k Views1 Comment

Recommended Gartner Insights

  • Critical Capabilities for Application Security Testing
  • Magic Quadrant for Application Security Testing

Top GitLab Alternatives

GitLab Reviews and Ratings

Performance of GitLab Across Market Features
Deciding Factors: GitLab Vs. Market Average
Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
  • IT Security & Risk Management Associate
    1B-10B USD
    Banking
    Review Source

    Flexible DevOps Platform with Strong CI/CD and Security Integration

    4.0
    May 14, 2026
    We use GitLab mainly for source code management, CI/CD pipelines, and collaboration between development teams. Having repository management, pipelines, and issue tracking in one platform helps simplify the development workflow and reduces the need for multiple separate tools. The CI/CD integration works well and is flexible enough for different deployment scenarios. Merge request and branch management features also help improve collaboration during development. Initial setup was relatively straightforward, although optimizing runners and pipelines required some tuning depending on the environment. One challenge is that some advanced features have a learning curve, especially for teams that are new to DevOps practices. Pipeline troubleshooting can also become difficult when configurations grow more complex.
  • It Security & Risk Management Associate
    50M-1B USD
    IT Services
    Review Source

    Native Integration and Full Traceability in an All-in-One DevSecOps Platform

    4.0
    Mar 31, 2026
    GitLab is a comprehensive DevSecOps platform that centralizes the entire development lifecycle in a single tool. Its greatest strength lies in its native integration of repositories, CI/CD, security, and project management, which reduces the need for multiple external tools.
    Automated Translation from Spanish
  • DIRECTOR OF IT SERVICES
    <50M USD
    IT Services
    Review Source

    GitLab's Built-In Security Testing Streamlines CI/CD but Requires Fine-Tuning for Performance and Accuracy

    4.0
    Nov 12, 2025
    GitLab's Application Security Testing features integrate seamlessly into our CI/CD pipelines, making it easy to identify and address vulnerabilities early in the development process. Overall, the platform is stable, reliable and intuitive. However, the security scan configuration process could be more streamlined.
  • IT Manager
    1B-10B USD
    Banking
    Review Source

    Comprehensive Dashboards Provide Process Control Amidst Steep Team Learning Challenges

    5.0
    Mar 9, 2026
    GitLab is an all-in-one DevSecOps platform. It facilitates "shifting left" aproach by embeding security scanners directly into developer's workflow.
  • It Security & Risk Management Lead
    1B-10B USD
    Telecommunication
    Review Source

    A powerful and reliable enterprise security platform

    5.0
    Apr 8, 2026
    Overall, my experience with GITLAB has been highly positive due to its robust end-to-end DevOps capabilities, strong CI/CD integration, and ability to centralize the entire Software Development lifecycle in one Platform.
...
Showing Result 1-5 of 203

Showing data for 196 ratings and reviews for Application Security Testing market. View all 1446 ratings and reviews across markets for a complete picture.

4.4

(196 Ratings)

Rating Distribution

5 Star
47%
4 Star
48%
3 Star
5%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?

Customer Experience

Evaluation & Contracting

4.4

Integration & Deployment

4.5

Service & Support

4.5

Product Capabilities

4.5

Reviewer Insights for: GitLab
Logo of Veracode
1. Veracode
4.6
(407 Ratings)
Logo of Checkmarx SAST
2. Checkmarx SAST
4.6
(401 Ratings)
Logo of Fluid Attacks Continuous Hacking
3. Fluid Attacks Continuous Hacking
4.7
(314 Ratings)
View All Alternatives