As of GitLab 16.4, or DAST 4.0.9, browser-based DAST active scans will search for path traversal vulnerabilities using the GitLab check 22.1 instead of the ZAP alert 6.
Vladislav Nechakhin or @0xn3va, one of our top 10 hacker contributors, joined us for an AMA and details his approach and strategy for bug bounty hunting.
Our security team has identified an increased volume of password attacks against GitLab.com on the OAuth API endpoint since September 22, 2023. Learn more.
GitLab can support your alignment with NSA and CISA CI/CD recommendations and best practices for cloud-based DevSecOps environments.
Learn how to make full use of SAML and SSO security features on the GitLab DevSecOps platform.
Our partnership with Sigstore means that with just a few lines in a yml file, GitLab customers can make their development environment more secure.
As a strategic partner, GitLab's software security features can help support your ISO 27001 compliance.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert