is now in public beta!
Browse articles from Security
Recent posts
Security
How to transform compliance observation management with GitLab
Learn how GitLab's Security Compliance team improved observation management using the DevSecOps platform, enhancing visibility, collaboration, and accountability.
Security
Software supply chain security guide: Why organizations struggle
Part 1 of this new series explores fundamental challenges, practical solutions, and emerging trends, including AI, that every development team needs to understand.
Security
Bridging the visibility gap in software supply chain security
GitLab 18.2 includes support for comprehensive scanner coverage and transitive dependency visualization.
Security
GitLab catches MongoDB Go module supply chain attack
Learn how GitLab detected a supply chain attack targeting Go developers through fake MongoDB drivers that deploy persistent backdoor malware.
Security
Automating role-based access control (RBAC) at scale
This guide details setting up GitLab + Keycloak + OIDC for RBAC, covering planning, Docker configuration, and automated access governance for DevSecOps.
Security
Last year we signed the Secure by Design pledge - here's our progress
Learn about GitLab's CISA-aligned additions and improvements around MFA, default password reduction, patching, and vulnerability disclosure.
Security
Introducing compromised password detection for GitLab.com
GitLab is adding compromised password detection on June 19, 2025. After that date, users logging in with known compromised passwords will be warned. Here is what you need to know.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert