Loading…
Part of GitLab
Data as of Oct 14, 2026Based on 35,588 AI responses
Reviewed by Dimitry Apollonsky
GitLab Detect provides integrated security scanning across your repository, infrastructure, and deployed application by running a suite of scanners (SAST, IaC, secret detection, dependency scanning, DAST, API security, and fuzz testing) to find vulnerabilities in source code, dependencies, and runtime behavior. Scans are triggered automatically on code pushes to branches and can also be scheduled or run manually, with vulnerabilities surfaced in branch-specific and default-branch reports for triage, analysis, and remediation. Scanners are enabled via CI/CD templates or policies and can be applied project-wide or inherited from a group, covering repository content (source code, dependencies, infrastructure) as well as runtime behavioral testing.
Products
Share of answers in CI/CD Application Security Scanning Tools each week · 468 answers since Jul 5
Each engine’s share of its own answers across GitLab Application Security Testing’s markets · since Jul 5
<1%
of 35,588 answers across GitLab Application Security Testing’s markets · since Jul 5
The market map
CI/CD Application Security Scanning ToolsMentioned in
Where GitLab Application Security Testing ranks in AI
