Skip to main content

GitLab Acquires Oxeye to Advance Application Security & Governance Capabilities

Already recognized as the only Leader in Integrated Software Delivery Platforms by an independent research firm, GitLab’s DevSecOps platform combines best-in-class, robust security, governance, and AI/ML across the software development lifecycle

SAN FRANCISCO, March 20, 2024 (GLOBE NEWSWIRE) — All Remote – GitLab Inc., ​​the most comprehensive AI-powered DevSecOps platform, today announced it has acquired Oxeye, the provider of an award-winning, cloud-native application security and risk management solution. With the acquisition of Oxeye, GitLab will accelerate its Static Application Security Testing (SAST) roadmap. Oxeye’s capabilities will also augment GitLab’s software composition analysis and compliance tools.

Oxeye offers an automated cloud-native application security testing solution to help customers identify and resolve application-layer risks across the software development lifecycle. Its capabilities beyond SAST include the ability to trace vulnerabilities from “code to cloud” by providing runtime context via different types of data collection and analysis.

Following the acquisition, GitLab’s security capabilities will include enhanced SAST scanning technology to reduce false positives and deliver highly accurate results and actionable insights. These capabilities will provide developers and security professionals with the information needed to streamline vulnerability management and remediation, making it even easier for customers to build secure applications.

Recently, Forrester recognized GitLab as the only Leader in The Forrester Wave™: Integrated Software Delivery Platforms, Q2 2023. The report included a customer’s comment on the platform, noting that “The CI/CD experience using secrets, environments, runners, and SAST/DAST/license scans/etc. is unparalleled.” The acquisition announced today marks GitLab’s continued commitment to deliver best-in-class performance to customers.

Financial terms of the transaction were not disclosed. For more information, read the blog.

Supporting Quotes

“We’re excited to welcome Oxeye as the team shares our vision for delivering value throughout the entire software development lifecycle,” said David DeSanto, chief product officer, GitLab. “This acquisition will accelerate GitLab’s SAST category roadmap and expand GitLab’s risk management capabilities. By combining Oxeye’s cloud-native application security solution with GitLab’s industry-leading DevSecOps platform, customers benefit from the ability to secure new and emerging technologies while increasing developer velocity and expanding governance risk visibility.”

“Our goal with building Oxeye was to enable development and security teams to identify application-layer risks quickly, focus on the most exploitable ones, and promptly resolve these as an integral part of the software development lifecycle,” said Dean Agron, co-founder and CEO of Oxeye. “We look forward to joining the GitLab team, which is at the cutting edge of technology and culture for developers. Together, we will provide value to GitLab customers by helping organizations to reduce security and compliance risks as they accelerate digital transformation.”

About GitLab

GitLab is the most comprehensive AI-powered DevSecOps platform for software innovation. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 30 million registered users and more than 50% of the Fortune 100 trust GitLab to ship better, more secure software faster.

Media Contact
Kristen Butler
GitLab Inc.
press@gitlab.com

Disclaimer & Cookie Notice

Welcome to GOLDEA services for Professionals

Before you continue, please confirm the following:

Professional advisers only

I am a professional adviser and would like to visit the GOLDEA CAPITAL for Professionals website.

Important Notice for Investors:

The services and products offered by Goldalea Capital Ltd. are intended exclusively for professional market participants as defined by applicable laws and regulations. This typically includes institutional investors, qualified investors, and high-net-worth individuals who have sufficient knowledge, experience, resources, and independence to assess the risks of trading on their own.

No Investment Advice:

The information, analyses, and market data provided are for general information purposes only and do not constitute individual investment advice. They should not be construed as a basis for investment decisions and do not take into account the specific investment objectives, financial situation, or individual needs of any recipient.

High Risks:

Trading in financial instruments is associated with significant risks and may result in the complete loss of the invested capital. Goldalea Capital Ltd. accepts no liability for losses incurred as a result of the use of the information provided or the execution of transactions.

Sole Responsibility:

The decision to invest or not to invest is solely the responsibility of the investor. Investors should obtain comprehensive information about the risks involved before making any investment decision and, if necessary, seek independent advice.

No Guarantees:

Goldalea Capital Ltd. makes no warranties or representations as to the accuracy, completeness, or timeliness of the information provided. Markets are subject to constant change, and past performance is not a reliable indicator of future results.

Regional Restrictions:

The services offered by Goldalea Capital Ltd. may not be available to all persons or in all countries. It is the responsibility of the investor to ensure that they are authorized to use the services offered.

Please note: This disclaimer is for general information purposes only and does not replace individual legal or tax advice.