GitLab Continues Expanding Its Security Certification and Report Portfolio

Rhea-AI Summary

GitLab strengthens security assurance at the highest international standard

GitLab has enhanced its security certification portfolio, achieving a SOC 2 Type 1 report for GitLab Dedicated and expanding its SOC 2 Type 2 report for GitLab.com to include Availability criteria. The company added GitLab Dedicated to its ISO/IEC 27001:2013 certification scope and expanded certification against ISO/IEC 27017:2015 for cloud security and ISO/IEC 27018:2019 for privacy. This commitment to international compliance aims to enhance customer trust and security for both small businesses and large enterprises. GitLab continues to invest in its security and compliance programs.

Positive

• Achieved SOC 2 Type 1 report for GitLab Dedicated, enhancing security credibility.
• Expanded SOC 2 Type 2 report for GitLab.com to include Availability criteria.
• Included GitLab Dedicated in ISO/IEC 27001:2013 certification scope, reinforcing security standards.
• Expanded ISO certification to include ISO 27017:2015 and ISO 27018:2019, addressing cloud security and privacy.

Negative

• None.

GitLab strengthens security assurance at the highest international standard

• Secured a SOC 2 Type 1 report for GitLab Dedicated to include Security and Confidentiality criterion
• Expanded SOC 2 Type 2 report for GitLab.com to include the Availability Criteria
• Included GitLab Dedicated in its ISO/IEC 27001:2013 certification scope
• Expanded ISO 27001 certification to include ISO 27017:2015 cloud security standards and ISO 27018:2019 privacy standards

SAN FRANCISCO, Jan. 26, 2023 (GLOBE NEWSWIRE) -- ALL REMOTE — GitLab Inc., the most comprehensive DevSecOps platform, today announced the successful expansion of its security certification and report portfolio.

GitLab received a SOC 2 Type 1 report for the recent GitLab Dedicated solution, which includes Security and Confidentiality criterion, and expanded its SOC 2 Type 2 report for GitLab.com to include the Availability Criteria.

GitLab also expanded its ISO/IEC 27001:2013 certification scope to include the GitLab Dedicated solution, and received a certification expansion against the ISO/IEC 27017:2015 for cloud security standards and ISO/IEC 27018:2019 privacy standards¹.

“As a global company, it is our responsibility to ensure that our security program and practices are aligned with the highest international compliance requirements. We are deeply committed to expanding the scope of our security controls to meet these expectations and maintain user trust,” said David DeSanto, Chief Product Officer at GitLab. “Our investment in third-party accreditations helps ensure that our customers, from small businesses to highly regulated enterprises, can adopt GitLab’s DevSecOps platform with full confidence that their data will remain secure.”

In addition, GitLab Dedicated was included in the ISO/IEC 27001:2013 certification scope. GitLab Dedicated offers a new deployment option by making our DevSecOps platform available as a single-tenant SaaS solution. GitLab Dedicated allows organizations to leverage the efficiency of the cloud while further enabling customers to meet their own regulatory expectations in a completely isolated instance.

In 2022, GitLab expanded GitLab.com SOC reports to include the Availability criteria, and achieved certification expansion against the ISO/IEC 27017:2015 and ISO/IEC 27018:2019 standards.

GitLab continues to invest, iterate, and diversify its security and compliance program. Follow GitLab’s Trust Center for updates and more in-depth information about the company’s certifications. For self-serve access to security collateral, visit the GitLab Customer Assurance Package.

About GitLab
GitLab is the most comprehensive DevSecOps platform for software innovation. As the DevSecOps platform, GitLab provides one interface, one data store, one permissions model, one value stream, one set of reports, one spot to secure your code, one location to deploy to any cloud, and one place for everyone to contribute. The platform is the only true cloud-agnostic end-to-end DevSecOps platform that brings together all DevSecOps capabilities in one place.

With GitLab, organizations can create, deliver, and manage code quickly and continuously to translate business vision into reality. GitLab empowers customers and users to innovate faster, scale more easily, and serve and retain customers more effectively. Built on Open Source, GitLab works alongside its growing community, which is composed of thousands of developers and millions of users, to continuously deliver new DevOps innovations.

Media Contact
Kristi Piechnik
press@gitlab.com

---

¹ Issued by Schellman and Company, LLC.

FAQ

What recent security certifications did GitLab achieve?

GitLab achieved a SOC 2 Type 1 report for GitLab Dedicated and expanded its SOC 2 Type 2 report for GitLab.com to include Availability criteria.

What changes were made to GitLab's ISO certifications?

GitLab expanded its ISO/IEC 27001:2013 certification to include GitLab Dedicated and additional standards ISO/IEC 27017:2015 for cloud security and ISO/IEC 27018:2019 for privacy.

How does GitLab's security certification benefit customers?

The certifications ensure that customers, including small businesses and regulated enterprises, can trust that their data is secure while using GitLab's services.

When was the press release about GitLab's security certifications issued?

The press release was issued on January 26, 2023.

What is GitLab Dedicated?

GitLab Dedicated is a single-tenant SaaS solution that offers the DevSecOps platform in an isolated instance, allowing organizations to meet regulatory expectations.