Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

GitLab
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
8.6
Number of Reviews
70
Ranking in other categories
Application Security Tools (6th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (10th), Software Composition Analysis (SCA) (6th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (3rd)
NowSecure
Ranking in Static Application Security Testing (SAST)
34th
Average Rating
7.0
Number of Reviews
1
Ranking in other categories
Mobile App Testing Tools (16th)
 

Mindshare comparison

As of June 2024, in the Static Application Security Testing (SAST) category, the mindshare of GitLab is 2.8%, up from 2.4% compared to the previous year. The mindshare of NowSecure is 0.1%, down from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
Unique Categories:
Application Security Tools
3.7%
Build Automation
24.4%
 

Featured Reviews

SP
Mar 12, 2024
Improved our CI/CD processes in software dependency management
GitLab has improved our CI/CD processes in software dependency management. It handles conflicts between versions seamlessly, such as when merging different features into the main branch. With GitLab, there are no conflicts in the code itself. Versioning is also efficiently managed within GitLab, allowing us to easily track the latest main branches, previous branches, and releases. For example, if a software depends on specific versions, it's easily traceable using GitLab. One of the most significant advantages is the built-in DTS, which supports ample file storage. This capability allows us to store 30-40 gigabytes of repository sizes. The code diffs available in GitLab show the differences between the older version and the current one, indicating what has been added, deleted, or modified across the codebase. This helps you understand which portions of the code have changed within a particular file, such as a Python script, aiding in traceability and version management. The merge request feature is standard and available even in GitHub, making it accessible on most Git platforms. It is one of the fundamental features of GitLab, a free product. Overall, I rate the solution a seven out of ten.
AN
Jun 15, 2021
Scalable and reliable, but dynamic analysis needs improvement
We use this solution for application security testing The most valuable feature is the ability to download an application without actually putting in the APK. It gives us an option to put the APK in if we want to but we can download it from the App Store and Play Store. In this solution, there…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have had no problem with the stability of the solution."
"GitLab's best features are continuous integration and fast deployment."
"We have seen a couple of merge requests or pull requests raised in GitLab. I see the interface, the way it shows the difference between the two source codes, that it is easy for anyone to do the review and then accept the request; the pull request is the valuable feature."
"The solution is stable."
"I like GitLab from the CI/CD perspective. It is much easier to set up CI/CD and then integrate with other tools."
"The important feature is the entire process of versioning source code maintenance and easy deployment. It is a necessity for the CI/CD pipeline."
"The most valuable feature of GitLab is the ability to upload scripts and make changes when needed and then reupload them. Additionally, the solution is user-friendly."
"This product is always evolving, and they listen to the customers."
"The most valuable feature is the ability to download an application without actually putting in the APK. It gives us an option to put the APK in if we want to but we can download it from the App Store and Play Store."
 

Cons

"It can be free for commercial use."
"The integration and storage capabilities could be better."
"The tool should include a feature that helps to edit the code directly."
"The solution does not have many built-in functions or variables so scripting is required."
"GitLab could improve by having more plugins and better user-friendliness."
"There is a need to improve or adopt AI into the ecosystem like a co-pilot, which Microsoft has done with GitHub."
"The initial setup was quite challenging because it takes some time to understand how to pull out or push the code."
"GitLab could add a plugin to integrate with Kubernetes stuff."
"In this solution, there are two kinds of testing, static analysis, and dynamic analysis. There needs some improvement in testing with dynamic analysis because I have found it is not accurate"
 

Pricing and Cost Advice

"In total, I believe we have more than 300 licenses spread over about 100 users, though I can't comment on the costs involved."
"I think that we pay approximately $100 USD per month."
"In terms of the pricing for GitLab, on a scale of one to five, with one being expensive and five being cheap, I'm rating pricing for the solution a four. It could still be cheaper because right now, my company has a small team, and sometimes it's difficult to use a paid product for a small team. You'd hope the team will grow and scale, but currently, you're paying a high license fee for a small team. I'm referring to the GitLab license that has premium features and will give you all features. This can be a problem for management to approve the high price of the license for a team this small."
"On a scale of one to ten, where one is cheap, and ten is expensive, I rate the pricing a five out of ten."
"I don't mind the price because I use the free version."
"We are using the open-source version."
"I'm not aware of the licensing costs because those were covered by the customer."
"This product is not very expensive but the price can be better."
Information not available
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
787,779 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
26%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Financial Services Firm
20%
Computer Software Company
16%
Hospitality Company
8%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
For small-scale usage, GitLab offers a free tier. For enterprise pricing, GitLab is more expensive than GitHub, as it's not as widely adopted. GitLab is the preferred choice for many developers des...
What needs improvement with GitLab?
I believe there's room for improvement in the advanced features, particularly in enhancing the pipeline functionalities. Better integration and usability within the pipeline could make a significan...
Ask a question
Earn 20 points
 

Comparisons

 

Also Known As

Fuzzit
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Vaporstream, FIS, MEA Financial, Silent Circle, Capital One, Citi, EY, EMC, Emerson, Kaiser Permanente, The Home Depot, Humana, Shell, Kellogg's, TD Bank, VMware
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: June 2024.
787,779 professionals have used our research since 2012.