GitLab Inc. Due Diligence

Run due diligence on GitLab Inc.: check incident history and compliance and get alerts when suppliers or ownership change.

United States · owned by Independent (United States) · about.gitlab.com · 20 vendors

GitLab Inc. is an AI-powered DevSecOps platform that provides an intelligent orchestration solution covering the entire software development lifecycle, including source code management, CI/CD, application security testing, and compliance. The platform integrates AI agents (GitLab Duo) to automate development, security, and deployment workflows for teams of all sizes. GitLab serves over 50 million users globally, including major enterprises such as NVIDIA, Lockheed Martin, Barclays, and Deutsche Telekom.

Resilience scores

Disruption prediction

GitLab Inc.: 5 critical incidents expected in the next three months, based on its recorded incident history.

Forecast estimates are rounded up to whole numbers.

No active incident reported (StatusGator, as of 2026-11-09 23:45 UTC)

11 of GitLab Inc.'s 20 vendors have incident tracking.

Technology vendors

Services catalogue

15 services in catalogue across 7 categories; runs on 20 sub-vendors.

Insights

Last updated 2026-09-13 · revision 2

20 direct vendors, 243 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

9 in-scope frameworks identified; showing 3.

SOC 2 (source) — Evidence found

Evidence: https://about.gitlab.com/security/, https://trust.gitlab.com/

CSA STAR — Evidence found

Evidence: https://about.gitlab.com/security/, https://cloudsecurityalliance.org/star/registry/gitlab/

NIS2 (source) — No public evidence

Evidence: https://about.gitlab.com/security/, https://handbook.gitlab.com/handbook/security/security-assurance/security-compliance/sec-controls/, https://trust.gitlab.com/

Financials

Three-year financials

Financial Resilience Score: 7/10

GitLab demonstrates strong financial resilience underpinned by approximately $1 billion in cash and short-term investments with minimal debt, providing multi-year runway even under stress scenarios. The company's revenue base is over 95% subscription-based, generating highly predictable ARR, and gross margins are best-in-class SaaS at ~87-89% GAAP and 90%+ non-GAAP. Non-GAAP operating income turned positive in FY2024 and expanded in FY2025, and FY2025 marked the first full year of positive free cash flow. However, GitLab has never posted positive GAAP full-year operating income, with persistent losses driven largely by stock-based compensation exceeding 30% of revenue historically, resulting in ongoing shareholder dilution. Revenue growth has decelerated significantly from 67% (FY23) to 31% (FY25), and the company faces well-resourced competitors including Microsoft/GitHub, Atlassian, and cloud-native CI/CD offerings. AI disruption from tools like Cursor and Copilot presents both opportunity (via GitLab Duo) and competitive risk. Overall, the balance sheet strength and improving margin trajectory support a solid resilience score, though GAAP profitability and growth sustainability remain watch items.

Key strengths: ~$1B in cash and short-term investments with minimal debt, Over 95% recurring subscription revenue, Best-in-class SaaS gross margins (~87-89% GAAP, 90%+ non-GAAP), Non-GAAP operating income positive since FY2024 and expanding, First full year of positive free cash flow in FY2025, Enterprise upmarket motion with 1,200+ customers at >$100K ARR, Dollar-Based Net Retention historically ~120%+, No single customer >10% of revenue

Risk factors: Persistent GAAP operating losses driven by high stock-based compensation (~30%+ of revenue), Ongoing shareholder dilution from SBC, Revenue growth deceleration from 67% to 31% in two years, Intense competition from Microsoft/GitHub, Atlassian, JetBrains, and cloud-native CI/CD, AI-code tooling disruption risk from Cursor, Copilot, Cognition, Enterprise IT budget cyclicality and macro sensitivity, Public-sector procurement and geopolitical exposure

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report