technology software

government public service

documentation technical

corporate

corporate business

English

_gd_svisitor

_cs_c

_sp_id.6b85

_cs_id

_sp_ses.6b85

_ga_ENFH3X7M5Y

_gd_visitor

sa-userid

_gtmeec

_cs_s

_fbp

OptanonAlertBoxClosed

mutiny.user.session_number

mutiny.optIn

_biz_pendingA

optimizelySession

_ga_EVTFNG2S5Z

mutiny.user.session

mutiny.optOut

mutiny.user.token

_an_uid

_biz_flagsA

OptanonConsent

_biz_uid

FPAU

euconsent

__q_state_q2kjzSUxjtgnCEEB

_gd_session

FPGSID

gdpr_consent

consent

cookieconsent_status

_dcid

__cf_bm

_biz_ABTestA

optimizelyEndUserId

_biz_nA

_cfuvid

The domain 'gitlab.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'gitlab' spans 6 characters holding 2 vowels versus four consonants. Tokenizing the label suggests 3 words: g, it, lab. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

html/38/cd/38cd7be3-c692-4772-b466-59727d961674_fallback.html.gz

The most-comprehensive AI-powered DevSecOps platform

email

glm_content

glm_source

html/38/cd/38cd7be3-c692-4772-b466-59727d961674.html.gz

base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' https://gitlab.com/assets/ blob: data:; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com https://analytics.gitlab.com snowplowprd.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-CVMncIYQbWv2UZUoV+6Rvw=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data:

attachment; filename="somrf9zaunk0xlt7ne4x.svg"

attachment; filename="gmofx1mnqszimzpgffnu.svg"

attachment; filename="dzmgtm1qxjeraxwkgovy.svg"

attachment; filename="qapbubhraqsyenuqygju.svg"

attachment; filename="pscatjwyq1h2f5asr1dh.svg"

attachment; filename="co8hnqnxaxpnjoolw4gx.svg"

attachment; filename="zp4fzfvmogvs4fu8tcba.svg"

attachment; filename="fhey3ggb92nalivryoyy.svg"

attachment; filename="g4azpz2nj9aehv6hh5mr.svg"

attachment; filename="ebngmbctcfe0crcvrthl.svg"

attachment; filename="w6cf4suhvpwrajwoscke.svg"

attachment; filename="xte6nesderdxvtl9clwf.svg"

attachment; filename="hkxglo41gbltrwixf2rm.svg"

attachment; filename="ul3vtwvvkozw9ppfstka.svg"

attachment; filename="ix9yrl3a5vr3uyjd8lkg.svg"

attachment; filename="xdvidtc9luf2s7errdte.svg"

attachment; filename="dzl0dbift9xdizyelkk4.svg"

Optimizely Internal Frame

Qualified Messenger

05d37fcd0c44f7577eb8f88821398f131d2791c65c5ac5c61fbfda5331dc30ba

b9edd06c80810cfd2fc156b9bf8b7657488e31c2df31c77a1a352ce935565bd8

1b7ed1e7b275d6b0439a4e3143dfee1aac6e7bd187d27931f6575d4ca44d9fa6

687763bebb6c2decf33cd72d0a86840b34befc76c5a5419631015341f0b161dd

e5b9125d58cb1fe7d1613433fde3897c6cd9435cc4391c4aed96251bc8872145

11a3a468f52ab3eb3aee2b33d3853644a90a441a68e574199dcfc6a61336f921

081ad4206bfeb1950c8382b5bc32aac31c4698598563d87080ee67a8fc5318d0

209060d105a7258ec09c59193515384903d70d9af7205afc957e7464d691cb74

9f75a100f2b3f0b8f375364b18db92f509f42e8c2efefba2a057c5362f12f51b

11c650868931f5827eaff03113a332481b9fa4be81c726a909b41903c5ab4a9f

ce1502b8f1c3fb8bb21bd94a221359c2265547222c904a6f62b46a01bf0aeb5a

a33f05372946c2792f781eabdd7c23c15bdaeadb8a66ee88c20533b16c0d0bcc

cecf12463db07688210aeb365bce6f4b2e625e217adac6e5f1baa9a0f0c0780e

966381574d9015f7695412937d854f5d8a38c44b2d381d6a949049e134a14e9e

e8a48bf95e74d1692528bde951db8980f30a70d9e2f156f7b455ec651c94ff47

2fd7d6e3e044724aabed77ed138797c44bb32707833870f582c475da862052f4

a2761621685b5a20210937a56ef8d77ede013d5899f8f78cf55fdb033abd51d6

30cb91d9d1685433a34ea152c0bdfd1c8cf46234ec53d042a10c95fb8679db6e

c825205ad22b854d5c007bd32b0db431bff99c8db4d4dbc81aeb232c0442caae

7bb53e711cb6c11fed9f16de4af0180ed2d79f54671c9b9e41290ab77313288a

6c649cc3d4aee7683250622541a6045ad4ac3beb93df1fcdd3ec1f7f12a1ff44

e69f29943aa90f84e7c7a6f7c28803fa99bf7b622ebc64660f486f83ddad9937

534a5b796fd7a5b17ac7bb1a8d79ff9e4ca704d6d0b7f01627d37745b0f91b6a

9b33ce4c7dcbaf3da2a110eb77e125b803d2ac58dc6581416ecd0e9869f8df5c

95a302aef47133ff68916131fbd2aafb297038b5c123da38e694b53615da146d

6d22e660ead72f14b0aa8e3dfc8de1da35f17e3559b489e00692f15f50faa1a6

52282d519f6ec6896b0081f5db2f3d84b9f24bd91f5d0af2d2926219829baf19

f12e72c09a587446492c687c4400456d83055779c45c8a4da3869772d45effbb

32fbf5875bef36d5436f355967207489f1bd8428faf7830f85f7711200563c72

71d1a48f4601b5f3cdc4392fb397b889080233cb837551ee58f856fbe53c0083

d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768

01ffea051d9e5f5278dffc0c763c359488f5533e6c6a1d385b128b6050cd9106

f278faebdbc656eabc6385e323bcbb22edd078b82e9b47e5fb5a50f39b9f4cb1

8b9d321803dacb92fadd0eae99381b90ef8dd4901928951f0e6acda414ff9886

viewport


            default-src 'self' https: http:;
            script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.googletagmanager.com *.mutinycdn.com;
            style-src 'self' 'unsafe-inline' https: http:;
            object-src https: http:;
            base-uri 'self';
            connect-src 'self' https: http: wss: ws: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.mutinyhq.com *.mutinyhq.io *.mutinycdn.com;
            frame-src 'self' https: http:;
            img-src 'self' https: http: data: *.google-analytics.com *.googletagmanager.com *.mutinycdn.com;
            manifest-src 'self'; media-src 'self' https: http:;
            child-src 'self' blob: https: http:;
            font-src 'self' https: http: data:;
          

format-detection

twitter:card

twitter:site

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

robots

From planning to production, bring teams together in one application. Ship secure code more efficiently to deliver value faster.

description

https://res.cloudinary.com/about-gitlab-com/image/upload/v1758207578/whxaklh4tf6nonryosrs.png

twitter:title

twitter:image

twitter:description

twitter:creator

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Gandi SAS

GITLAB.COM

GitLab is the most comprehensive AI-powered DevSecOps platform for software innovation. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.

Sid Sijbrandij

Dmitriy Zaporozhets

DevOps

CI/CD

DevSecOps

GitOps

DevOps Platform

DevSecOps Platform

AI Code Assistant

Application Security Testing

Enterprise Agile Planning

Source Code Management

AI-Assisted Software Development

GitLab

window.__NUXT__={};window.__NUXT__.config={public:{projectId:"55044057",previewToken:"glpat-QxwislllIn8kH5xtdt139286MQp1OmhtZndwCw.01.121o7g4ri",mdc:{components:{prose:true,map:{p:"prose-p",a:"prose-a",blockquote:"prose-blockquote","code-inline":"prose-code-inline",code:"ProseCodeInline",em:"prose-em",h1:"prose-h1",h2:"prose-h2",h3:"prose-h3",h4:"prose-h4",h5:"prose-h5",h6:"prose-h6",hr:"prose-hr",img:"prose-img",ul:"prose-ul",ol:"prose-ol",li:"prose-li",strong:"prose-strong",table:"prose-table",thead:"prose-thead",tbody:"prose-tbody",td:"prose-td",th:"prose-th",tr:"prose-tr"}},headings:{anchorLinks:{h1:false,h2:true,h3:true,h4:true,h5:false,h6:false}}},content:{locales:[],defaultLocale:"",integrity:1764622158181,experimental:{stripQueryParameters:false,advanceQuery:false,clientDB:false},respectPathCase:false,api:{baseURL:"/api/_content"},navigation:{fields:[]},tags:{p:"prose-p",a:"prose-a",blockquote:"prose-blockquote","code-inline":"prose-code-inline",code:"ProseCodeInline",em:"prose-em",h1:"prose-h1",h2:"prose-h2",h3:"prose-h3",h4:"prose-h4",h5:"prose-h5",h6:"prose-h6",hr:"prose-hr",img:"prose-img",ul:"prose-ul",ol:"prose-ol",li:"prose-li",strong:"prose-strong",table:"prose-table",thead:"prose-thead",tbody:"prose-tbody",td:"prose-td",th:"prose-th",tr:"prose-tr"},highlight:false,wsUrl:"",documentDriven:false,host:"",trailingSlash:false,search:"",contentHead:true,anchorLinks:{depth:4,exclude:[1]}},"nuxt-scripts":{version:"",defaultScriptOptions:{trigger:"onNuxtReady"}},scripts:{googleTagManager:{id:"GTM-NJXWQL",scriptInput:{referrerpolicy:false}}},"seo-utils":{canonicalQueryWhitelist:["page","sort","filter","search","q","category","tag"],canonicalLowercase:true},i18n:{baseUrl:"",defaultLocale:"en-us",rootRedirect:"",redirectStatusCode:302,skipSettingLocaleOnNavigate:false,locales:[{code:"en-us",language:"en-US",label:"English",langLabel:"Language",_hreflang:"en-US",_sitemap:"en-US"},{code:"de-de",language:"de-DE",label:"Deutsch",langLabel:"Sprache",_hreflang:"de-DE",_sitemap:"de-DE"},{code:"es",language:"es",label:"Español",langLabel:"Idioma",_hreflang:"es",_sitemap:"es"},{code:"fr-fr",language:"fr-FR",label:"Français",langLabel:"Langue",_hreflang:"fr-FR",_sitemap:"fr-FR"},{code:"it-it",language:"it-IT",label:"Italiano",langLabel:"Lingua",_hreflang:"it-IT",_sitemap:"it-IT"},{code:"ja-jp",language:"ja-JP",label:"日本語",langLabel:"言語",_hreflang:"ja-JP",_sitemap:"ja-JP"},{code:"pt-br",language:"pt-BR",label:"Português",langLabel:"Idioma",_hreflang:"pt-BR",_sitemap:"pt-BR"}],detectBrowserLanguage:false,experimental:{localeDetector:"",typedPages:true,typedOptionsAndMessages:false,alternateLinkCanonicalQueries:true,devCache:false,cacheLifetime:"",stripMessagesPayload:false,preload:false,strictSeo:false,nitroContextDetection:true,httpCacheDuration:10},domainLocales:{"en-us":{domain:""},"de-de":{domain:""},es:{domain:""},"fr-fr":{domain:""},"it-it":{domain:""},"ja-jp":{domain:""},"pt-br":{domain:""}}}},app:{baseURL:"/",buildId:"902d4a74-f1c1-422d-adcc-1efa9b3f7eeb",buildAssetsDir:"/_nuxt/",cdnURL:""}}

function checkTabActiveForDuration(a,c){var b=0,d=1E3*a,e=setInterval(function(){document.hidden?b=0:(b+=1E3,b>=d&&(clearInterval(e),c(!0)))},1E3)}checkTabActiveForDuration(15,function(a){if(a)window.dataLayer=window.dataLayer||[],window.dataLayer.push({event:"timerTabActiveFifteenSec"});else return!1});

(function(a,e,f,g,b,c,d){a[b]=a[b]||function(){(a[b].q=a[b].q||[]).push(arguments)};a[b].l=1*new Date;c=e.createElement(f);d=e.getElementsByTagName(f)[0];c.async=1;c.src=g;d.parentNode.insertBefore(c,d)})(window,document,"script","https://app.cdn.lookbookhq.com/production/jukebox/current/jukebox.js","lbhq");lbhq("create","LB-AE0B686E-10519");

(function(a,b){a.QualifiedObject=b;a[b]=a[b]||function(){(a[b].q=a[b].q||[]).push(arguments)}})(window,"qualified");

navattic.onEvent(function(a){dataLayer.push({event:"navattic_event",data:navattic.flatten(a)})});

Requests	IP Address	Location	AS Autonomous System
59	104.16.78.6	United States	AS13335CLOUDFLARENET
53	104.18.43.134	United States	AS13335CLOUDFLARENET
25	23.53.43.58	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
13	34.54.57.52	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
12	104.18.87.42	United States	AS13335CLOUDFLARENET
11	104.18.16.5	United States	AS13335CLOUDFLARENET
9	146.75.121.91	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
6	172.64.147.68	United States	AS13335CLOUDFLARENET
5	52.184.206.197	Boydton, Virginia, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4	23.32.238.139	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
237	118	-	-

Security Scan Report: gitlab.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History