Gitlabi uudised

• Vulnerability risk prioritization made simple with GitLab 12/03/2025
  Development and security teams are often overwhelmed by the number of vulnerabilities they need to remediate. Many organizations remediate less than 16% of their known vulnerabilities monthly. Vulnerability management teams face a constant challenge: which security flaws deserve immediate attention? Three key frameworks help answer this question: Common Vulnerability Scoring System (CVSS), Known Exploited Vulnerabilities […]
  Fernando Diaz
• Beautifying our UI: Enhancing GitLab's deployment experience 06/03/2025
  At GitLab, we’ve implemented an innovative approach to improving our experience called Beautifying our UI. This unique initiative pairs one product designer with a frontend engineer for a milestone or two, and empowers them to make self-directed usability improvements across the platform. Ultimately, this helps build a more polished product experience, as these pairs can […]
  Emily Bauman
• How GitLab measures Red Team impact: The adoption rate metric 05/03/2025
  In early 2024, we started a journey to implement better metrics for our internal Red Team. Our first iteration focused on what we now call the adoption rate metric, which measures how often the recommendations our team makes are accepted and implemented. Choosing this metric was very deliberate. While there are many ways to measure […]
  Chris Moberly
• Introducing GitLab’s Open Source Security Hub 04/03/2025
  Today we’re excited to announce the launch of GitLab’s Open Source Security Hub — a central repository of security-focused projects developed by GitLab’s internal security team. These tools are designed to help developers, security practitioners, and organizations build safer, more secure software, and more resilient security programs. Securing systems is an ongoing challenge for businesses […]
  Joseph Longo
• The GitLab AI Security Framework for security leaders 04/03/2025
  As companies rapidly adopt AI technologies, CISOs face a new frontier of security challenges. Many security leaders find themselves grappling with unfamiliar questions: How do we evaluate AI vendors differently from traditional software vendors? What security controls matter most? Where does vendor responsibility end and customer responsibility begin? How do we evaluate AI security risks […]
  Ayoub Fandi