Track market-moving stories before they get noisy

SummaryGitLab is rated a Strong Buy, driven by agentic AI adoption, enterprise demand for sovereignty, and accelerating leading indicators supporting a 2027 inflection.GitLab benefits from mounting reliability problems and strategic distractions at GitHub, with higher win rates, first orders doubling YoY, and significant new-logo ARR growth.GitLab is also gaining a new seat cohort as AI lets non-engineers build software, with management reporting rising customer demand for non-engineering seats.Raised FY27 guidance, robust net cash, and new product launches (Orbit, Artifact Central) create attractive upside scenarios, though risks remain from GitHub recovery, competition, and premium valuation. Kenneth Cheung/iStock Unreleased via Getty Images

Investment Thesis GitLab (GTLB) is initiated as a Strong Buy, based on a number of tailwinds and long-term themes stacking on top of each other. As agentic AI multiplies the amount of code that

333 Followers

Analyst’s Disclosure: I/we have a beneficial long position in the shares of GTLB either through stock ownership, options, or other derivatives. I wrote this article myself, and it expresses my own opinions. I am not receiving compensation for it (other than from Seeking Alpha). I have no business relationship with any company whose stock is mentioned in this article.

Seeking Alpha's Disclosure: Past performance is no guarantee of future results. No recommendation or advice is being given as to whether any investment is suitable for a particular investor. Any views or opinions expressed above may not reflect those of Seeking Alpha as a whole. Seeking Alpha is not a licensed securities dealer, broker or US investment adviser or investment bank. Our analysts are third party authors that include both professional investors and individual investors who may not be licensed or certified by any institute or regulatory body.

SAN FRANCISCO--(BUSINESS WIRE)--All Remote-- GitLab Inc., the intelligent orchestration platform for DevSecOps, today announced new capabilities for the governed software factory, a connected system for moving software from idea to production under an organization's own policy and standards. These new innovations are designed to help organizations ship more AI-generated software to production without taking on more risk or cost.

More than 70 million developers and over 10,000 enterprises innovate on GitLab today. Over the last three months on GitLab, active users of agentic software development grew 200% year over year, while secure repositories grew 100%, user namespaces grew 80%, and CI/CD pipelines grew 40%.

Yet most organizations are running a shadow software factory built from separate tools for coding, issue tracking, source code management, CI/CD pipelines, security, artifact management, and deployment.

These systems have no shared identity, common policy, or a record of how a change was made. That fragmentation slows handoffs, breaks context between stages, and prevents engineering leaders from tracing changes from plan to production or measuring the true impact of their AI investments.

GitLab connects those steps so agents can work within an organization's context, workflows, and guardrails, while creating an evidence chain that records how changes move from intent to production. Together, these capabilities form the foundation of a governed software factory, helping organizations move from intent to production with fewer handoffs, stronger safeguards, and clearer visibility into what AI delivers.

Orchestrating Agentic Workflows Across the Software Lifecycle

Agentic software development can stall after coding when reviews, tests, security checks, approvals, and deployments require handoffs between people, tools, and stages.

Goal-driven flows in GitLab Duo Agent Platform, powered by /goal in Duo CLI, in headless mode and in Duo Agentic Chat, and the GitLab for Slack app, eliminate waits between handoffs across the software lifecycle.

Custom Flows and flow triggers automate multi-step work under the same identity, policy, and evidence chain. Teams can start and follow the same flows from the tools and channels they already use, under the same identity and policy.

Assembling the Right Software at Agent Scale

Most software that organizations ship is assembled from open-source packages, base images, and libraries. Builds fail when pipelines assemble the wrong or missing components, and agents multiply that failure rate by publishing packages at machine speed across vendor and project registries that carry their own rules.

GitLab Artifact Central, now in beta on GitLab.com with availability on GitLab Self-Managed planned for later this month, lets platform teams assemble the right software the first time. It brings containers and packages into one control plane alongside source code management and CI pipelines. With GitLab Artifact Central, teams set policy once at the organization level, instantly answer what was published, and realize up to 50% lower total cost of ownership compared with alternative tooling.

Securing the Software Factory at Machine Speed

As organizations adopt agentic software development, more code, packages, and credentials move through the software supply chain than security teams can review. Agents can pull unvetted packages into a build or reuse credentials stored in local environments, and each vulnerability that stays open increases the risk of exploitation. At machine speed, agents need a foundation they can prove before they earn more autonomy.

To meet the challenge, GitLab is adding security controls to govern what enters a build, to protect credentials each job can reach, to harden the defensive posture for software delivery, and is providing the best practices engineering leaders can use to assess their risk posture for agentic software development.

GitLab Dependency Firewall, available in early access, checks every package against policy before it enters a build. It warns, blocks, or quarantines packages based on rules the organization sets for package age, vulnerability severity, malicious package detection, and license compliance. One control plane spans source, build, and registry, helping teams trace exposure to affected projects and prioritize remediation in minutes instead of weeks.

GitLab Secrets Manager, generally available on GitLab.com and on GitLab Self-Managed in the 19.5 release, secures build-time secrets in one place, and scopes each secret to the job that needs it. It applies existing group and project permissions, and records every event in the GitLab audit trail. With GitLab Secrets Manager, teams can revoke a leaked credential in one click, and realize up to 50% savings compared to hosting a separate vault.

Anthropic’s Claude Mythos 5 and 5.1 will be available within new GitLab Duo Agent Platform security flows next month, helping organizations with approved environments find and fix vulnerabilities faster than attackers can discover and exploit them.

The GitLab Security Standard, available today, gives security and engineering leaders a way to assess their security posture, build trust in autonomous agents through verifiable outcomes, and protect software already in production. The standard sets five controls for the agentic era and uses time from detection to verified remediation as its core metric.

Optimizing Agentic Workflows for Context and Cost

AI investment is difficult to manage when leaders cannot connect credits consumed to outcomes delivered. Without that evidence, prioritizing the next use case and setting spending limits becomes guesswork. Agentic workflows also incur unnecessary cost when they lack the lifecycle context needed to complete a task, leading to more retries and higher token consumption.

GitLab addresses these challenges by giving agents the lifecycle context they need to work more efficiently and leaders clear visibility into AI cost and impact.

Since its beta announcement in June, GitLab Orbit has been used by more than 3,500 organizations and supported over 280,000 queries from their coding agents. It maps the entire software lifecycle into real-time knowledge that agents can act on, enabling them to complete tasks with up to 45x fewer retries and 4.5x fewer tokens. Orbit will reach general availability next month across all GitLab deployment options.

Duo Agent Platform Impact Analytics, now in early access, shows cost and impact of AI investment by team, task, and model. Impact Analytics complements the recently introduced AI usage caps and controls, which allows platform admins to set spending ceilings at the subscription, group, or user level. Teams see their adoption metrics, results of agentic workflows, and credit consumption alongside the real work that reaches production. This level of visibility is made available even when using a mix of AI models with Duo Agent Platform: GitLab-managed frontier and open-weight models, or self-hosted.

To learn more, please read the what's new page.

Supporting Quotes

"GitLab Secrets Manager lets us centralize secrets across CI/CD, Kubernetes, and infrastructure as code without standing up multiple vaults or maintaining separate integration points," said Jeremy Nauta, software architect, OneTrust. "It also strengthens our supply chain security by tightening which users and pipelines can access a given credential." “When defenders have more context than attackers, advanced models change the math in their favor,” said Rajat Pandit, Head of Applied AI at Anthropic. “GitLab’s customers will be able to use Claude Mythos 5 and 5.1 to find vulnerabilities and verify fixes inside the workflows they already run.” "Every enterprise already runs a software factory, but few have intentionally designed the systems and controls that govern it," said Manav Khurana, chief product and marketing officer at GitLab. “GitLab brings together the foundational building blocks for a governed software factory, connecting agentic workflows, security, and AI context and controls so organizations can move software from intent to production with greater speed, governance, and visibility.” About GitLab

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 70 million registered users and approximately 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.

*Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

Forward-Looking Statements

This press release contains “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934. Although we believe that the expectations reflected in the forward-looking statements contained in this release are reasonable, they are subject to known and unknown risks, uncertainties, assumptions and other factors that may cause actual results or outcomes to be materially different from any future results or outcomes expressed or implied by the forward-looking statements.

Further information on risks, uncertainties, and other factors that could cause actual outcomes and results to differ materially from those included in or contemplated by the forward-looking statements contained in this release are included under the caption “Risk Factors” and elsewhere in the filings and reports we make with the Securities and Exchange Commission. We do not undertake any obligation to update or release any revisions to any forward-looking statement or to report any events or circumstances after the date of this press release or to reflect the occurrence of unanticipated events, except as required by law.

More News From GitLab Inc.

Jessica P. Ross, Chief Financial Officer of GitLab Inc. (GTLB -2.07%), reported a disposition of 32,628 shares of Class A Common Stock on September 16, 2026, according to a recent SEC Form 4 filing.

Transaction summaryMetricValueTransaction value~$1.6 millionShares sold (directly held)32,628Post-transaction shares (directly held)~498,000Post-transaction value~$24.3 millionTransaction value based on SEC Form 4 weighted average sale price ($48.77); post-transaction value based on September 16, 2026 market close ($48.77).

Key questionsWhat was the primary driver for this share disposition?
The transaction was executed as a non-discretionary sale to satisfy tax withholding obligations triggered by the vesting of restricted stock units (RSUs).What is the insider's current ownership level in the company?
Jessica Ross maintains a direct ownership stake of 0.29%, holding shares across her equity portfolio that includes both vested and unvested awards.How has the stock performed leading up to this transaction?
The shares were priced at a weighted average of $48.77 per share on September 16, 2026, a period during which the one-year total return for the stock was -3%.Does the insider maintain significant exposure to the firm?
The CFO continues to hold a substantial equity position, and her remaining directly held shares were valued at $24.3 million based on the market close on the transaction date.Company OverviewMetricValueShare Price (as of market close 2026-09-18)$49.23Market Capitalization$8.4 billionRevenue (TTM)$1.1 billionNet Income (TTM)-$52.7 millionCompany SnapshotGitLab Inc. develops and operates a unified DevOps platform that streamlines the entire software development lifecycle, enabling organizations to accelerate development velocity while maintaining comprehensive visibility and control across all DevOps workflows.The company generates revenue through a subscription-based SaaS model, offering tiered pricing across free, premium, and enterprise editions of its GitLab platform, with monetization driven by adoption expansion and customer migration to higher-value tier offerings.GitLab serves a diverse customer base spanning mid-market and enterprise organizations across the United States, Europe, and Asia Pacific regions, with particular strength among development teams and DevOps practitioners seeking integrated software version control and continuous integration capabilities.GitLab operates as a leading provider of DevOps platform solutions, with a global footprint and trailing 12-month revenues of $1.1 billion. The company's competitive advantage derives from its unified platform approach, which consolidates fragmented DevOps toolchains into a single application, reducing complexity and operational overhead for enterprise customers while maintaining a strong open-source community foundation that drives product adoption and brand recognition.

What this transaction means for investorsThe September 16 sale of GitLab stock by CFO Jessica Ross is not a red flag for investors, since it was a non-discretionary transaction executed to fulfill tax withholding obligations in connection with the vesting of RSUs.

An RSU is a form of compensation where a company grants an employee shares of stock at a future date. When that vesting date arrives, as was the case here, a "sell to cover" transaction occurs to pay the related taxes.

Ross' disposal came soon after GitLab stock reached a 52-week high of $55.55 on September 2. Shares rose because of the company's excellent fiscal second quarter, ended July 31.

GitLab delivered 21% year-over-year revenue growth to $286.3 million, and according to Ross, "our strongest gross bookings in company history." The results are a testament to the value of GitLab's platform in the artificial intelligence era, where its focus on the quality of software launches becomes even more important as AI increasingly takes on coding duties.

Shares of GitLab (GTLB +1.05%) skyrocketed in August, gaining 34.9%, according to data supplied by S&P Global Market Intelligence. That's 90-fold higher than the 2.6% gains of the S&P 500.

It turns out the threat of artificial intelligence (AI) to the software sector wasn't as bad as some feared.

Image source: The Motley Fool.

Wall Street (and investors) have a change of heartOver the past few months, enterprise and software-as-a-service (SaaS) stocks have taken a beating, with the phenomenon labeled the "SaaSpocalypse." The main talking point held that AI agents would take over many of the tasks now accomplished by traditional enterprise software, making those offerings obsolete. The ensuing panic took down a large cross-section of software stocks, and GitLab wasn't spared, losing 48% of its value between early January and early April.

More recently, however, investors have been revisiting those dire predictions and concluding that the truth is more nuanced. Sure, AI agents can automate certain tasks, but it's unlikely they will be able to completely replace complex software deeply integrated into existing business systems.

GitLab's DevSecOps (software development, operations, and security) coding platform, for example, provides a secure environment for software creation. The company stands to benefit from the proliferation of AI, as humans increasingly interact with agents to build software.

Following that realization, there was a flurry of activity on Wall Street, as analysts revised their models and their price targets. After careful consideration, many investment banks decided that the end wasn't nye. In August, a host of analysts raised their price targets on GitLab:

BTIG analyst Nick Altman maintained a buy rating and assigned a $52 price target, up from $36. The analyst argued that far from being displaced by AI agents, the trend was a tailwind for GitLab.RBC Capital analyst Matthew Hedberg maintained a hold rating on GitLab while increasing his price target to $46 from $29. The analyst cited recent financial results from other software providers that left him more optimistic about the future.BofA analyst Koji Ikeda maintained a neutral (hold) rating but increased his price target on GitLab to $45 from $38 (the second such increase in August). The analyst cited multiple expansion in the software sector, improving growth, and the easing of AI-disruption fears for his increased optimism.There were many more, but you get the drift.

Premium Feature

Moneyball Superscore

70/100

Today's Change

(

1.05

%) $

0.52

Current Price

$

49.83

PostscriptJust as September dawned, GitLab reported the results of its fiscal 2027 second quarter (ended July 31) and confirmed what Wall Street had predicted. Revenue of $286.3 million rose 21% year over year, the company's adjusted operating margin ticked higher to 15% from 14% in Q1, and adjusted earnings per share (EPS) of $0.25 was flat. This was well ahead of analysts' consensus estimates of revenue of $273.1 million and adjusted EPS of $0.18.

Other metrics were equally robust. Remaining performance obligation (RPO) -- or contractually obligated revenue that hasn't yet been recognized -- climbed 16% to $1.2 billion, while current RPO (which will be recognized within 12 months) jumped 20% to $744.7 million. This was all far from the SaaSpocalypse-related carnage investors had expected.

GitLab's rebound has had a commensurate impact on its valuation. The stock now sells for 57 times forward earnings and 48 times next year's expected earnings -- so it isn't exactly cheap. However, now that the SaaSpocalypse is in the rearview mirror, the future looks bright.

Key Takeaways GitLab made Flex central to growth after 130 customers committed over $20M in its first six weeks.GTLB raised fiscal 2027 revenue guidance to $1.129B-$1.133B after Q2 revenues and EPS topped estimates.GitLab's net ARR rose 42%, retention hit 117%, and $500K-plus deals grew more than 150% year over year. GitLab Inc. (GTLB - Free Report) used its second-quarter fiscal 2027 earnings call to frame Flex as the centerpiece of its next growth phase, linking seat subscriptions with a broader consumption model for AI-era software development.

The quarter also gave management more confidence in the business. Revenues were $286.3 million, beating the Zacks Consensus Estimate of $273.3 million. Non-GAAP earnings were $0.24 per share, above the consensus mark of $0.18.

GTLB Makes Flex Central to GrowthCEO Bill Staples said that more than 130 customers committed over $20 million to Flex in its first six weeks, helping platform-wide paid consumption run rate, or CRR, rise above $40 million.

Staples also mentioned that the model lets customers redirect committed dollars among Premium and Ultimate seats, GitLab credits and eligible usage products without repeated contracting cycles.

CFO Jessica Ross added that management expects Flex to become increasingly important, while stressing that its near-term impact is primarily about revenue timing rather than customer commitments or cash economics.

GitLab Raises Outlook but Normalizes H2Ross raised fiscal 2027 revenue guidance to $1.129-$1.133 billion and projected non-GAAP earnings of $0.85-$0.87 per share.

For the fiscal third quarter, Ross guided revenues of $281-$283 million, non-GAAP operating income of $35 million-$37 million and diluted earnings of $0.19-$0.20 per share.

Ross cautioned that the second-half outlook assumes normalized bookings after unusually strong fiscal second-quarter execution. She said that guidance excludes Flex's potential accounting impact, with a maximum fiscal 2027 revenue-timing effect of approximately $13 million.

GTLB Sees Sales Execution ImproveStaples said that account executive capacity increased about 30% year over year while productivity per representative improved roughly 10%, contributing to GitLab's largest gross bookings quarter.

Ross said that net ARR grew 42% year over year, dollar-based net retention reached 117%, and the company recorded approximately 1,700 first orders, more than double the prior-year level.

Ross also highlighted better public-sector activity and a sharp increase in larger transactions, with deals of at least $500,000 growing more than 150% year over year.

GitLab Builds Around AI-Driven ConsumptionStaples described AI as a driver of more customers, more products and more consumption. Duo Agent Platform paid CRR grew about 50% sequentially.

Staples said that more than 2,200 organizations enabled GitLab Orbit indexing, while about 80% of customer query volume came from customers connecting Orbit to external agents.

In Q&A, a Canaccord Genuity analyst asked about GitLab's next-generation Git strategy. Staples said that the company is rearchitecting Git infrastructure for roughly 100 times the scale required by human workflows and is also advancing artifact management.

GTLB Q&A Tests Flex Economics and MarginsA BofA Securities analyst asked which metric best captures Flex progress. Staples pointed to paid CRR, which includes Flex commitments, credit commitments and paid on-demand usage, with a fiscal year-end target above $100 million.

A UBS analyst asked whether Flex customers were increasing commitments. Ross said that it was too early to quantify that, while Staples stated that Flex can create headroom for new products and reduce contraction tied to unused seat capacity.

A Baird analyst pressed on gross-margin pressure from AI. Ross said that SaaS represented 34% of revenues, while Staples said that recent margin changes were driven more by SaaS mix than early AI adoption.

GitLab Keeps Focus on ExecutionStaples closed with an emphasis on repeating the second-quarter's execution while expanding monetization beyond seats. His growth framework centers on new customers, additional products and consumption.

Ross maintained that the transition to Flex will create reporting noise, particularly in revenue recognition and current RPO, and committed to quantifying those effects each quarter.

GTLB's Zacks Signals Stay MixedGTLB carries a Zacks Rank #3 (Hold). Within the Zacks framework, the Style Scores complement the Rank and grade value, growth and momentum characteristics from A through F. You can see the complete list of today’s Zacks #1 Rank (Strong Buy) stocks here.

GTLB's Growth Score of A is its strongest style signal, while the Value Score of F is the weakest. It has a Momentum Score of C and a VGM Score of C. Higher grades indicate better expected performance within the framework, but the Zacks Rank can change as earnings estimates are revised following the just-reported results.

SAN FRANCISCO--(BUSINESS WIRE)--All-Remote–GitLab Inc. (NASDAQ: GTLB), the intelligent orchestration platform for DevSecOps, today reported financial results for its second quarter fiscal year 2027, ended July 31, 2026.

“Q2 was an exceptional quarter, with record gross bookings and net ARR growth exceeding 40% year over year,” said Bill Staples, GitLab Chief Executive Officer. “As AI drives more software creation and more work through the development lifecycle, the context, security, governance and control GitLab provides become increasingly valuable. We believe this creates a significant opportunity for GitLab as humans and agents increasingly build software together.”

“I am proud of our team’s performance, which delivered revenue growth of 21% and continued improvement across the business,” said Jessica Ross, GitLab Chief Financial Officer. “We saw sequential acceleration in dollar-based net retention and meaningful operating leverage, reflecting the strength of our execution and the increasing scalability of our model. These results demonstrate the durability of our growth opportunity and our ability to create long-term value.”

GitLab posted a letter on the Investor Relations section of its website at https://ir.gitlab.com to capture additional information about the company’s strategic investments that are designed to drive durable revenue growth.

Business Highlights:

Introduced a new commercial model with GitLab Flex to give customers one annual commitment covering platform seats, GitLab Credits, and new eligible capabilities as they become available, with monthly reservations that can be reshaped as needs change without contract amendments. Launched GitLab Secrets Manager, which is now available as a usage-based add-on for Premium and Ultimate customers on GitLab.com, to make credentials easier to rotate and less likely to leak while bringing them under the same permissions and audit trail as the code that uses them. Expanded context for AI agents with GitLab Orbit, available in public beta, by connecting code, work items, pipelines, deployments, and production signals into a unified context graph, helping agents respond up to 11x faster with up to 45x fewer hallucinations in internal testing. Recognized as a Leader in the Gartner® Magic Quadrant™ for DevSecOps Platforms1 for the fourth consecutive year, reinforcing the value of a unified platform that gives enterprises speed with control across the software lifecycle. Quantified the potential business value of GitLab Duo Agent Platform through an independent Forrester Consulting Total Economic Impact™ study, which found organizations can achieve a 400% return on investment and $7.5 million in net present value (NPV) over three years, with payback in under six months. Second Quarter Fiscal Year 2027 Financial Highlights (in millions, except per share data and percentages):

Q2 FY 2027

Q2 FY 2026

Y/Y Change

Revenue

$

286.3

$

236.0

21

%

GAAP Gross margin

84

%

88

%

Non-GAAP Gross margin

86

%

90

%

GAAP Operating margin

(20

)%

(8

)%

Non-GAAP Operating margin

15

%

17

%

GAAP Operating loss

$

(56.9

)

$

(18.4

)

$

(38.5

)

Non-GAAP Operating income

$

42.6

$

39.6

$

3.0

GAAP Net loss attributable to GitLab

$

(36.8

)

$

(9.2

)

$

(27.6

)

Non-GAAP Net income attributable to GitLab

$

42.1

$

40.9

$

1.2

GAAP Net loss per share attributable to GitLab, basic

$

(0.22

)

$

(0.06

)

$

(0.16

)

GAAP Net loss per share attributable to GitLab, diluted

$

(0.22

)

$

(0.06

)

$

(0.16

)

Non-GAAP Net income per share attributable to GitLab, basic

$

0.25

$

0.25

$

—

Non-GAAP Net income per share attributable to GitLab, diluted

$

0.24

$

0.24

$

—

GAAP net cash provided by operating activities

$

(3.1

)

$

49.4

$

(52.5

)

Non-GAAP adjusted free cash flow

$

9.8

$

46.5

$

(36.7

)

A reconciliation between GAAP and non-GAAP financial measures is contained in this release under the section titled “Non-GAAP Financial Measures.”

Additional Second Quarter Fiscal Year 2027 Financial Highlights:

First Order growth of more than 100% year on year. Customers with more than $5,000 of ARR reached 11,114, an increase of 8% year-over-year. Customers with more than $100,000 of ARR reached 1,571, an increase of 17% year-over-year. Dollar-Based Net Retention Rate was 117%. Total RPO grew 16% year-over-year to $1.2 billion, while cRPO grew 20% to $744.7 million. In the quarter, GitLab repurchased approximately 3.5 million shares. Third Quarter and Fiscal Year 2027 Financial Outlook

For the third quarter and fiscal year 2027, GitLab Inc. expects (in millions, except share and per share data):

Q3 FY 2027 Guidance

FY 2027 Guidance

Revenue

$281 - $283

$1,129 - $1,133

Non-GAAP operating income

$35 - $37

$148 - $152

Non-GAAP diluted net income per share assuming approximately 172 million and 172 million weighted average shares outstanding during Q3 FY 2027 and FY 2027, respectively.

$0.19 - $0.20

$0.85 - $0.87

These statements are forward-looking and actual results may differ materially as a result of many factors. Refer to the Forward-Looking Statements safe harbor below for information on the factors that could cause our actual results to differ materially from these forward-looking statements.

A reconciliation of GAAP to non-GAAP financial measures has been provided in the financial statement tables included in this press release. An explanation of these measures is also included below in Non-GAAP Financial Measures. We have not provided the most directly comparable GAAP financial guidance measures because certain items are out of our control or cannot be reasonably predicted. Accordingly, a reconciliation of non-GAAP guidance for operating income (loss) and net income (loss) per share to the corresponding GAAP measures is not available.

Conference Call Information

GitLab will host a conference call today, September 1, 2026, at 1:30 p.m. (PT) / 4:30 p.m. (ET) to discuss its second quarter fiscal year 2027 financial results and its guidance for the third quarter and full fiscal year 2027. Interested parties may register for the call in advance by visiting https://bit.ly/4qpW4tl. A live webcast of this conference call will be available on GitLab’s investor relations website (ir.gitlab.com), and a replay will also be archived on the website for one year.

About GitLab

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and approximately 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.

*Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

Non-GAAP Financial Measures

GitLab believes non-GAAP measures are useful in evaluating its operating performance. GitLab uses this supplemental information to evaluate its ongoing operations and for internal planning and forecasting purposes. GitLab believes that non-GAAP financial information, when taken collectively with its GAAP financial information, may be helpful to investors because it provides consistency and comparability with past financial performance. However, non-GAAP financial information is presented for supplemental informational purposes only, has limitations as an analytical tool, and should not be considered in isolation or as a substitute for financial information presented in accordance with GAAP. Reconciliations of non-GAAP financial measures to the most directly comparable financial results as determined in accordance with GAAP are included at the end of this press release following the accompanying financial data. We define non-GAAP financial measures as GAAP measures, excluding certain items such as stock-based compensation expense, amortization of acquired intangible assets, foreign exchange (gain) loss, acquisition related expenses, charitable donation of common stock, restructuring charges, a non-recurring income tax adjustment related to bilateral advance pricing agreement (“BAPA”) negotiations, non-recurring charges associated with the formation of our GitLab Information Technology (Hubei) Co., LTD Joint Venture in China (“JiHu”), and other expenses that the Company believes are not indicative of its ongoing operations. In addition to these exclusions, effective Q1 FY26 we utilize a fixed long-term projected tax rate in our computation of the non-GAAP income tax provision which reflects the new location of GitLab’s intellectual property in the U.S. following the conclusion of our bilateral advance pricing agreements. For FY26 and FY27, we have determined the projected non-GAAP tax rate to be 22%. Shares used for net income per share on a non-GAAP basis include incremental dilutive shares related to restricted stock units, options, and shares issuable under GitLab Inc.’s 2021 Employee Stock Purchase Plan that are anti-dilutive on a GAAP basis. A reconciliation of non-GAAP guidance measures to corresponding GAAP measures is not available on a forward-looking basis without unreasonable effort due to the uncertainty of expenses that may be incurred in the future. Investors are encouraged to review the related GAAP financial measures and the reconciliation of these non-GAAP financial measures to their most directly comparable GAAP financial measures and not rely on any single financial measure to evaluate our business.

Adjusted Free Cash Flow

Adjusted free cash flow is a non-GAAP financial measure that we calculate as net cash provided by operating activities less cash used for purchases of property and equipment, plus any non-recurring income tax payments related to the BAPA or minus any non-recurring income tax refunds related to the BAPA, plus any non-recurring payments related to the formation of JiHu. We believe that adjusted free cash flow is a useful indicator of liquidity that provides information to management and investors about the amount of cash generated from our operations that, after the investments in property and equipment, any non-recurring income tax payments or refunds related to the BAPA, and any non-recurring payments related to the formation of JiHu, can be used for strategic initiatives, including investing in our business, and strengthening our financial position. One limitation of adjusted free cash flow is that it does not reflect our future contractual commitments. Additionally, adjusted free cash flow does not represent the total increase or decrease in our cash balance for a given period.

Forward-Looking Statements

This press release and the accompanying earnings call contain “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934. Although we believe that the expectations reflected in the forward-looking statements contained in this release and the accompanying earnings call are reasonable, they are subject to known and unknown risks, uncertainties, assumptions and other factors that may cause actual results or outcomes to be materially different from any future results or outcomes expressed or implied by the forward-looking statements. These risks, uncertainties, assumptions, and other factors include, but are not limited to the following:

our ability to effectively manage our growth; our revenue growth rate in the future; our ability to achieve and sustain profitability, our business, financial condition, and operating results; security and privacy breaches; intense competition in our markets and loss of market share to our competitors; our ability to respond to rapid technological changes; the market for our services may not grow; a decline in our customer renewals and expansions; fluctuations in our operating results; our incorporation of artificial intelligence features into our products; our transparency; our publicly available company Handbook; customers staying on our free self-managed or SaaS product offering; our ability to accurately predict the long-term rate of customer subscription renewals or adoption, or the impact of these renewals and adoption; our hiring model; the effects of ongoing armed conflict in different regions of the world on our business; and general economic conditions (including changes in interest rates, inflation, tariffs, regulatory uncertainty (including with respect to the federal budget and potential government shutdowns), volatile capital markets, and actual or perceived instability in the global banking sector) and slow or negative growth of our markets. Further information on these and additional risks, uncertainties, and other factors that could cause actual outcomes and results to differ materially from those included in or contemplated by the forward-looking statements contained in this release are included under the caption “Risk Factors” and elsewhere in the filings and reports we make with the Securities and Exchange Commission. We do not undertake any obligation to update or release any revisions to any forward-looking statement or to report any events or circumstances after the date of this press release or to reflect the occurrence of unanticipated events, except as required by law.

Operating Metrics

Annual Recurring Revenue (“ARR”): We define annual recurring revenue as the annual run-rate revenue of subscription agreements, including our self-managed and SaaS offerings but excluding professional services, from all customers as measured on the last day of a given month. We calculate ARR by taking the monthly recurring revenue (“MRR”) and multiplying it by 12. MRR for each month is calculated by aggregating, for all customers during that month, monthly revenue from committed contractual amounts of subscriptions, including our self-managed license, self-managed subscription, and SaaS subscription offerings but excluding professional services.

Dollar-Based Net Retention Rate: We calculate Dollar-Based Net Retention Rate as of a period end by starting with our customers as of the 12 months prior to such period end (“Prior Period ARR”). We then calculate the ARR from these customers as of the current period end (“Current Period ARR”). The calculation of Current Period ARR includes any upsells, price adjustments, user growth within a customer, contraction, and attrition. We then divide the total Current Period ARR by the total Prior Period ARR to arrive at the Dollar-Based Net Retention Rate.

GitLab Inc.

Condensed Consolidated Balance Sheets

(in thousands, except per share data)

(unaudited)

  July 31, 2026(1)

January 31, 2026(1)

ASSETS

CURRENT ASSETS:

Cash and cash equivalents

$

226,491

$

229,576

Short-term investments

1,030,495

1,030,327

Accounts receivable, net of allowance for doubtful accounts of $1,018 and $967 as of July 31, 2026 and January 31, 2026, respectively

257,343

304,301

Deferred contract acquisition costs, current

39,588

42,676

Prepaid expenses and other current assets

41,138

48,899

Total current assets

1,595,055

1,655,779

Property and equipment, net

11,093

11,815

Goodwill

17,446

17,379

Intangible assets, net

5,744

9,774

Deferred contract acquisition costs, non-current

27,431

23,705

Other non-current assets

5,063

4,295

TOTAL ASSETS

$

1,661,832

$

1,722,747

LIABILITIES AND STOCKHOLDERS’ EQUITY

CURRENT LIABILITIES:

Accounts payable

$

9,955

$

9,205

Accrued expenses and other current liabilities

51,580

58,185

Accrued compensation and benefits

46,932

39,657

Deferred revenue and customer advances, current

553,844

545,096

Total current liabilities

662,311

652,143

Deferred revenue, non-current

20,829

26,994

Other non-current liabilities

7,205

7,362

TOTAL LIABILITIES

690,345

686,499

STOCKHOLDERS’ EQUITY:

Preferred stock, $0.0000025 par value; 50,000 shares authorized; no shares issued and outstanding as of July 31, 2026 and January 31, 2026

—

—

Class A Common stock, $0.0000025 par value; 1,500,000 shares authorized; 166,166 and 153,336 shares issued and outstanding as of July 31, 2026 and January 31, 2026, respectively

—

—

Class B Common stock, $0.0000025 par value; 250,000 shares authorized; 1,115 and 16,732 shares issued and outstanding as of July 31, 2026 and January 31, 2026, respectively

—

—

Additional paid-in capital

2,190,455

2,207,361

Accumulated deficit

(1,265,386

)

(1,223,570

)

Accumulated other comprehensive income

460

6,877

Total GitLab stockholders’ equity

925,529

990,668

Noncontrolling interests

45,958

45,580

TOTAL STOCKHOLDERS’ EQUITY

971,487

1,036,248

TOTAL LIABILITIES AND STOCKHOLDERS’ EQUITY

$

1,661,832

$

1,722,747

  GitLab Inc.

Condensed Consolidated Statements of Operations

(in thousands, except per share data)

(unaudited)

  Three Months Ended July 31,

Six Months Ended July 31,

2026

2025

2026

2025

Revenue:

Subscription—self-managed and SaaS

$

258,311

$

212,684

$

497,617

$

407,165

License—self-managed and other

27,943

23,276

52,795

43,304

Total revenue

286,254

235,960

550,412

450,469

Cost of revenue:

Subscription—self-managed and SaaS

38,258

21,753

68,849

41,021

License—self-managed and other

7,380

6,752

14,277

12,519

Total cost of revenue

45,638

28,505

83,126

53,540

Gross profit

240,616

207,455

467,286

396,929

Operating expenses:

Sales and marketing

134,363

109,583

253,721

217,170

Research and development

94,980

71,488

166,462

136,898

General and administrative

68,208

44,735

119,787

95,822

Total operating expenses

297,551

225,806

539,970

449,890

Loss from operations

(56,935

)

(18,351

)

(72,684

)

(52,961

)

Interest income

12,202

11,511

24,149

22,373

Other income (expense), net

5,406

(911

)

5,661

(10,882

)

Loss before income taxes

(39,327

)

(7,751

)

(42,874

)

(41,470

)

Provision for (benefit from) income taxes

(3,195

)

2,245

(1,163

)

4,784

Net loss

$

(36,132

)

$

(9,996

)

$

(41,711

)

$

(46,254

)

Net income (loss) attributable to noncontrolling interest

712

(788

)

105

(1,171

)

Net loss attributable to GitLab

$

(36,844

)

$

(9,208

)

$

(41,816

)

$

(45,083

)

Net loss per share attributable to GitLab Class A and Class B common stockholders, basic and diluted:

$

(0.22

)

$

(0.06

)

$

(0.25

)

$

(0.27

)

Weighted-average shares used to compute net loss per share attributable to GitLab Class A and Class B common stockholders, basic and diluted:

168,703

165,953

169,313

165,233

  GitLab Inc.

Condensed Consolidated Statements of Cash Flows

(in thousands)

(unaudited)

  Three Months Ended July 31,

Six Months Ended July 31,

2026

2025

2026

2025

CASH FLOWS FROM OPERATING ACTIVITIES:

Net loss, including amounts attributable to noncontrolling interest

$

(36,132

)

$

(9,996

)

$

(41,711

)

$

(46,254

)

Adjustments to reconcile net loss to net cash provided by operating activities:

Stock-based compensation expense, net of amounts capitalized

75,006

54,284

125,067

110,111

Charitable donation of common stock

1,166

1,787

1,987

3,526

Amortization of intangible assets

2,015

2,015

4,030

4,035

Depreciation and amortization

1,345

759

2,640

1,315

Amortization of deferred contract acquisition costs

10,580

13,370

23,504

27,269

Net amortization of premiums or discounts on short-term investments

(364

)

(2,609

)

(688

)

(5,605

)

Unrealized foreign exchange loss (gain), net

(2,249

)

1,069

(3,260

)

10,970

Other non-cash expense, net

451

192

640

400

Changes in assets and liabilities:

Accounts receivable

(57,325

)

3,859

46,031

69,787

Prepaid expenses and other current assets

1,303

1,219

7,690

2,746

Deferred contract acquisition costs

(15,002

)

(12,304

)

(24,747

)

(20,430

)

Other non-current assets

(1,147

)

(198

)

(919

)

181

Accounts payable

1,115

(472

)

762

3,114

Accrued expenses and other current liabilities

(21,419

)

(14,257

)

(6,968

)

(4,278

)

Accrued compensation and benefits

18,575

2,021

7,605

(11,063

)

Deferred revenue and customer advances

18,754

8,284

4,466

9,489

Other non-current liabilities

236

346

(24

)

358

Net cash provided by (used in) operating activities

(3,092

)

49,369

146,105

155,671

CASH FLOWS FROM INVESTING ACTIVITIES:

Purchases of short-term investments

(199,621

)

(237,946

)

(421,817

)

(483,898

)

Proceeds from maturities of short-term investments

139,823

184,280

358,647

347,886

Proceeds from sales of short-term investments

50,476

—

60,398

1,367

Additions to property and equipment

(213

)

(2,904

)

(2,606

)

(3,816

)

Net cash used in investing activities

(9,535

)

(56,570

)

(5,378

)

(138,461

)

CASH FLOWS FROM FINANCING ACTIVITIES:

Proceeds from the issuance of common stock upon exercise of stock options, including early exercises, net of repurchases

2,988

3,947

5,361

7,275

Issuance of common stock under employee stock purchase plan

6,886

8,404

6,886

8,404

Common stock repurchased

(104,637

)

—

(154,685

)

—

Payments for taxes related to net share settlement of equity awards

(748

)

—

(908

)

—

Net cash provided by (used in) financing activities

(95,511

)

12,351

(143,346

)

15,679

Impact of foreign exchange on cash and cash equivalents

(766

)

502

(466

)

833

Net increase (decrease) in cash and cash equivalents

(108,904

)

5,652

(3,085

)

33,722

Cash and cash equivalents at beginning of period

335,395

255,719

229,576

227,649

Cash and cash equivalents at end of period

$

226,491

$

261,371

$

226,491

$

261,371

  GitLab Inc.

Reconciliation of GAAP to Non-GAAP

(in thousands, except per share data)

(unaudited)

  Three Months Ended July 31,

Six Months Ended July 31,

2026

2025

2026

2025

Gross profit on GAAP basis

$

240,616

$

207,455

$

467,286

$

396,929

Gross margin on GAAP basis

84

%

88

%

85

%

88

%

Stock-based compensation expense

3,891

2,261

6,755

4,190

Amortization of acquired intangibles

2,015

2,015

4,030

4,035

Restructuring charges

1,023

—

1,023

—

Gross profit on non-GAAP basis

$

247,545

$

211,731

$

479,094

$

405,154

Gross margin on non-GAAP basis

86

%

90

%

87

%

90

%

Sales and marketing on GAAP basis

$

134,363

$

109,583

$

253,721

$

217,170

Stock-based compensation expense

(25,327

)

(19,950

)

(42,772

)

(42,041

)

Restructuring charges

(5,220

)

—

(5,220

)

—

Sales and marketing on non-GAAP basis

$

103,816

$

89,633

$

205,729

$

175,129

Research and development on GAAP basis

$

94,980

$

71,488

$

166,462

$

136,898

Stock-based compensation expense

(21,803

)

(19,197

)

(35,433

)

(33,469

)

Restructuring charges

(8,011

)

—

(8,011

)

—

Research and development on non-GAAP basis

$

65,166

$

52,291

$

123,018

$

103,429

General and administrative on GAAP basis

$

68,208

$

44,735

$

119,787

$

95,822

Stock-based compensation expense

(23,985

)

(12,876

)

(40,107

)

(30,411

)

Restructuring charges

(5,168

)

—

(5,168

)

—

Charitable donation of common stock

(1,166

)

(1,787

)

(1,987

)

(3,526

)

Acquisition related expenses

(607

)

(157

)

(917

)

(340

)

Other non-recurring charges

(1,285

)

320

(1,361

)

(643

)

General and administrative on non-GAAP basis

$

35,997

$

30,235

$

70,247

$

60,902

Loss from operations on GAAP basis

$

(56,935

)

$

(18,351

)

$

(72,684

)

$

(52,961

)

Stock-based compensation expense

75,006

54,284

125,067

110,111

Amortization of acquired intangibles

2,015

2,015

4,030

4,035

Restructuring charges

19,422

—

19,422

—

Charitable donation of common stock

1,166

1,787

1,987

3,526

Acquisition related expenses

607

157

917

340

Other non-recurring charges

1,285

(320

)

1,361

643

Income from operations on non-GAAP basis

$

42,566

$

39,572

$

80,100

$

65,694

Other income (expense), net on GAAP basis

$

5,406

$

(911

)

$

5,661

$

(10,882

)

Foreign exchange gains (losses), net

(1,817

)

1,117

(2,353

)

11,071

Other non-recurring charges (3)

(3,679

)

172

(3,497

)

342

Other income (expense), net on non-GAAP basis

$

(90

)

$

378

$

(189

)

$

531

Net loss attributable to GitLab common stockholders on GAAP basis

$

(36,844

)

$

(9,208

)

$

(41,816

)

$

(45,083

)

Stock-based compensation expense (2)

75,006

54,284

125,067

110,111

Amortization of acquired intangibles

2,015

2,015

4,030

4,035

Restructuring charges (1)

19,422

—

19,422

—

Charitable donation of common stock

1,166

1,787

1,987

3,526

Acquisition related expenses

607

157

917

340

Foreign exchange gains (losses), net

(1,817

)

1,117

(2,353

)

11,071

Income tax adjustment (4)

(15,068

)

(9,077

)

(24,034

)

(14,708

)

Other non-recurring charges (3)

(2,394

)

(148

)

(2,136

)

985

Net income attributable to GitLab common stockholders on non-GAAP basis

$

42,093

$

40,927

$

81,084

$

70,277

GAAP net loss per share, basic

$

(0.22

)

$

(0.06

)

$

(0.25

)

$

(0.27

)

GAAP net loss per share, diluted

$

(0.22

)

$

(0.06

)

$

(0.25

)

$

(0.27

)

Non-GAAP net income per share, basic

$

0.25

$

0.25

$

0.48

$

0.43

Non-GAAP net income per share, diluted

$

0.24

$

0.24

$

0.47

$

0.41

Shares used in per share calculation - basic on GAAP basis

168,703

165,953

169,313

165,233

Effect of dilutive securities

5,246

4,535

3,151

5,220

Shares used in per share calculation - diluted on non-GAAP basis

173,949

170,488

172,464

170,453

  GitLab Inc.

Reconciliation of GAAP Cash Flow from Operating Activities to Adjusted Free Cash Flow

(in thousands)

(unaudited)

  Three Months Ended July 31,

Six Months Ended July 31,

2026

2025

2026

2025

Computation of adjusted free cash flow

GAAP net cash provided by (used in) operating activities

$

(3,092

)

$

49,369

$

146,105

$

155,671

Less: Additions to property and equipment

(213

)

(2,904

)

(2,606

)

(3,816

)

Add: Non-recurring payments related to the formation of JiHu

14,036

—

14,036

—

Less: Income tax refunds related to BAPA

(981

)

(12

)

(1,058

)

(1,305

)

Non-GAAP adjusted free cash flow

$

9,750

$

46,453

$

156,477

$

150,550

More News From GitLab Inc.

Key Takeaways GitLab expects Q2 revenues of $272-$274 million, with non-GAAP earnings of 17-18 cents per share. Cloud demand is rising, with SaaS revenue up 37% and code pushes across paid customers up 49%. GitLab Duo Agent Platform neared $20 million in paid consumption run rate after its first full quarter GitLab (GTLB - Free Report) is set to release its second-quarter fiscal 2027 results on Sept. 1, 2026.

For the second quarter of fiscal 2027, GitLab expects revenues between $272 million and $274 million. Non-GAAP earnings for the fiscal second quarter are expected to be between 17 cents and 18 cents per share.

The Zacks Consensus Estimate for second-quarter fiscal 2027 revenues is pegged at $273.30 million, representing a 15.82% increase from the year-ago quarter’s reported figure.

The consensus mark for earnings has remained unchanged at 18 cents per share over the past 30 days. GitLab reported earnings of 24 cents per share in the year-ago quarter.

GTLB beat the Zacks Consensus Estimate in each of the last four quarters, delivering an average earnings surprise of 30.11%.

Let us see how things have shaped up for the upcoming announcement.

Key Factors to NoteGitLab’s fiscal second-quarter performance is expected to have benefited from continued strength in its enterprise DevSecOps business, rising customer adoption and expanding demand for AI-enabled software development. In the first quarter of fiscal 2027, revenues rose 23% year over year to $264 million, while customers generating more than $100,000 in annual recurring revenue increased 18% to 1,519. Dollar-based net retention stood at 117%. Gross bookings growth also reached its highest level in four quarters. New-logo growth increased 30% year over year, supported by product-led growth and expanding sales capacity.

Rising demand for GitLab’s cloud offerings is expected to have benefited the GTLB’s to-be-reported quarter’s performance. GitLab Dedicated surpassed $70 million in annual recurring revenue, while SaaS revenues increased 37% year over year in the first quarter of fiscal 2027. Platform activity remained strong, with code pushes across paid SaaS customers increasing 49% year over year and CI pipeline growth accelerating to 38% in April 2026. The company’s cloud-neutral architecture and platform reliability could further help it capture enterprise demand as AI workloads increase infrastructure requirements.

The company is also likely to benefit from increasing adoption of GitLab Duo Agent Platform (DAP). DAP generated nearly $20 million in paid consumption run rate at the end of its first full quarter, while its fiscal first-quarter net ARR contribution exceeded the combined contribution of Duo Pro and Duo Enterprise in any prior quarter. The company expanded collaborations with AWS and Google Cloud so customers can power DAP with Amazon Bedrock or Vertex AI, aligning spend with existing cloud commitments.

However, intense competition, seat contraction in price-sensitive cohorts and execution risk as GitLab reduces headcount and exits certain countries are expected to have affected the company’s to-be-reported quarter’s performance.

What Our Model SaysPer the Zacks model, the combination of a positive Earnings ESP and a Zacks Rank #1 (Strong Buy), 2 (Buy), or 3 (Hold) increases the odds of an earnings beat. But that’s not the case here.

GTLB currently has an Earnings ESP of 0.00% and carries a Zacks Rank of 3. You can uncover the best stocks to buy or sell before they’re reported with our Earnings ESP Filter.

Stocks to ConsiderHere are some companies worth considering, as our model shows that these have the right combination of elements to beat on earnings in their upcoming releases:

Dell Technologies (DELL - Free Report) has an Earnings ESP of +6.20% and a Zacks Rank #1 at present. You can see the complete list of today’s Zacks #1 Rank stocks here.

Dell Technologies shares have gained 275.1% in the year-to-date period. Dell Technologies is set to report second-quarter fiscal 2027 results on Sept. 1.

Docusign (DOCU - Free Report) has an Earnings ESP of +1.73% and a Zacks Rank #2.

Shares of Docusign have plunged 6.8% year to date. Docusign is set to report the second-quarter fiscal 2027 results on Sept. 3.

Hewlett-Packard (HPE - Free Report) has an Earnings ESP of +6.54% and a Zacks Rank #2 at present.

Shares of Hewlett-Packard have rallied 126.5% year to date. Hewlett-Packard is slated to report fiscal third-quarter 2026 results on Sept. 2.

SAN FRANCISCO--(BUSINESS WIRE)--(All Remote)--GitLab Inc., the intelligent orchestration platform for DevSecOps, today released GitLab 19.2. As AI generates more code, dependencies, and change than developers can keep up with, GitLab 19.2 brings agentic automation to clear that load.

Developers can now use GitLab to fix vulnerable dependencies automatically, catch the logic flaws scanners miss, create custom agentic workflows, invoke agents from more surfaces they already use, and always do so under the organization’s existing controls. A Forrester Consulting study commissioned by GitLab found organizations using GitLab Duo Agent Platform can achieve 400% return on investment with payback in under six months.

Dependency Scanning Auto-Remediation, Now in Public Beta, Helps Fix Vulnerable Dependencies Automatically

A growing share of application security risk now comes from dependencies teams never chose directly. A study of the Maven ecosystem found vulnerabilities reaching roughly 63% of latest releases through transitive dependencies, and roughly one in eight dependency updates introduces a breaking change, even as compliance deadlines under PCI DSS and FedRAMP keep running.

Dependency Scanning Auto-Remediation, now in public beta, closes that gap. Security developers can now clear vulnerable dependencies without adding work for developers. When a scan finds a vulnerable package, GitLab opens a merge request with the suggested fix. If an upgrade breaks the build, agents iterate to fix the issue in the same merge request. New configuration controls let developers set the severity thresholds and version scope that remediation applies to. Every change stops at existing approval gates and leaves a full audit trail.

Security Review Flow, Now in Public Beta, Brings Security Judgment to Every Merge Request

Developers can now catch a class of vulnerabilities that pattern-based scanners structurally cannot see, on every merge request, when a fix is cheapest. Static scanners are good at identifying flaws that match a known pattern, but application-logic flaws have needed manual review that cannot scale, or penetration testing that arrives too late.

Security Review Flow, now in public beta, is a foundational flow in GitLab Duo Agent Platform. It reasons about what the code is meant to do rather than matching known patterns, and detects broken object-level and function-level authorization, missing authorization on state-changing operations, information disclosure, mass assignment, business logic errors, and race conditions. Findings include severity and a suggested fix where available. The flow never approves on its own; a person always makes the final call.

GitLab Duo CLI, Now Generally Available, Puts Agents in Every Developer’s Terminal

Developers do much of their work in the terminal, where AI assistance has usually meant reaching for tools that lack context on their GitLab projects, pipelines, and agent configurations. GitLab 19.2 closes that gap.

GitLab Duo CLI, now generally available across GitLab.com, Self-Managed, and Dedicated deployments, brings GitLab Duo Agent Platform's agents to the terminal with full project context. A developer can get oriented in unfamiliar code, diagnose a failed pipeline, or propose a fix without leaving the command line. Administrators control rollout across the organization.

Agentic Flows Extend Automation From the Individual to the Whole Team

GitLab Duo Agent Platform's agentic flows are sequences that chain agents to complete multi-step work, and in 19.2, they advance on two fronts.

Custom Flows, the flows teams build themselves, are now generally available. Build a flow once and it runs automatically on GitLab events. Custom Flows now authenticate to external services with short-lived, job-scoped tokens, so automation reaching cloud providers or internal APIs uses the same keyless pattern GitLab CI/CD pipelines already trust.

The upcoming Flow Creation Agent can turn a natural-language description into a custom flow. GitLab's foundational flows, the ones GitLab ships ready to use, also get more capable. The Fix CI/CD Pipeline Flow, now improved, classifies failures before acting and delivers targeted fixes as inline suggestions or a new merge request. GitLab Duo Agentic Chat can now delegate multi-step work to agents.

Controls That Keep the Automation Trustworthy

The point of automating this work is so that teams can trust it to run autonomously. GitLab 19.2 adds the controls that make that safe at scale. The AI Audit Event Report, now in beta, records AI-assisted actions as dedicated audit events, so compliance and security teams can include AI workflows in audit reporting, access reviews, and incident investigation.

Group-level custom instructions for GitLab Duo Code Review let administrators set review behavior across projects at once, and new MCP access controls govern which agents can run and what they can reach.

To learn more, please read the what's new page.

Supporting Quote

"Coding agents made it possible to generate far more code and moved the bottleneck downstream to reviews and security," said Manav Khurana, chief product and marketing officer at GitLab. "GitLab 19.2 puts agents to work on that bottleneck: fixing vulnerable dependencies, catching the flaws scanners miss, and automating the steps in between with a person still approving what ships."About GitLab

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and approximately 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.

*Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

More News From GitLab Inc.