GitLab vs ImmuniWeb comparison

GitLab and ImmuniWeb are both solutions in the Static Application Security Testing (SAST) category. GitLab is ranked #7 with an average rating of 8.3, while ImmuniWeb is ranked #23 with an average rating of 8.7. GitLab holds a 2.3% mindshare in SAST, compared to ImmuniWeb’s 0.5% mindshare. Additionally, 97% of GitLab users are willing to recommend the solution, compared to 85% of ImmuniWeb users who would recommend it.

GitLab

Read 87 GitLab reviews

18,203 Views
2,912 Comparison Views

97% willing to recommend

ImmuniWeb

Read 7 ImmuniWeb reviews

1,185 Views
889 Comparison Views

85% willing to recommend

GitLab

ImmuniWeb

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

ImmuniWeb and GitLab offer solutions in cybersecurity and development platforms. ImmuniWeb has an advantage in pricing and support, while GitLab leads with comprehensive features.

Features: ImmuniWeb offers powerful threat detection, intuitive risk management, and strategic integrations. GitLab provides extensive CI/CD pipeline integration, collaborative tools, and a full suite of features for development teams seeking end-to-end solutions.

Room for Improvement: ImmuniWeb users suggest enhancements in reporting, expanding integration options, and refining strategic integrations. GitLab could improve performance speed, decrease system downtime, and enhance reliability.

Ease of Deployment and Customer Service: ImmuniWeb has straightforward deployment and responsive customer service. GitLab offers flexible deployment options but presents mixed reviews regarding customer service.

Pricing and ROI: ImmuniWeb is noted for strong ROI and cost-effective pricing. GitLab, despite higher costs, is valued for feature richness and productivity gains justifying the investment.

To learn more, read our detailed GitLab vs. ImmuniWeb Report (Updated: September 2025).

Buyer's Guide

GitLab vs. ImmuniWeb

September 2025

Download the complete report

Helped 871,829 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

GitLab

Ranking in Static Application Security Testing (SAST)

7th

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (3rd), DevSecOps (1st)

ImmuniWeb

Ranking in Static Application Security Testing (SAST)

23rd

Average Rating

8.2

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Attack Surface Management (ASM) (19th)

Mindshare comparison

As of October 2025, in the Static Application Security Testing (SAST) category, the mindshare of GitLab is 2.3%, down from 2.5% compared to the previous year. The mindshare of ImmuniWeb is 0.5%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Market Share Distribution
Product	Market Share (%)
GitLab	2.3%
ImmuniWeb	0.5%
Other	97.2%

Static Application Security Testing (SAST)

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven

Improved agility and time to market with CI/CD enhancements

The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.

Read full review

Vivek Ashvinbhai Pancholi

Senior Cybersecurity Consultant at a tech consulting company with 1,001-5,000 employees

Commendable Solution with Robust Vulnerability Detection Mechanism Suitable for Global Market

The solution helped us with one of our clients in the New York area contacted us about a data breach. In response, we swiftly organized a case meeting involving our client, internal, and email customer support teams. Together, we conducted an incident response, facilitating offline assistance for proper planning and risk management processes. We delved into the details of the data breach, identified how it occurred, and collaborated to rectify the issue. The client expressed satisfaction with the resolution process.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I have found the most valuable feature is security control. I also like the branching and cloning software."

"Git merging allows us to track the details of how and who has done what; this is the best feature which is useful for all companies."

"By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects."

"GitLab is very well-organized and easy to use. Also, it offers most features that customers need."

"This product is always evolving, and they listen to the customers."

"They incorporate new features every September, and they have introduced their own code editor and AI features."

"It is a speedy platform compared to the others I have used. I have also enjoyed using the platform as this solution offers a good user experience."

"I recommend GitLab for DevOps engineers."

More GitLab pros

"I like the fully automated continuous discovery run by ImmuniWeb in the background. We do not need to rerun the same tests or the same scanning against our resources. We need to supply our IP addresses, domain names, and significant resources with special domain names and URLs, and we need to do it only once. Then we always have an up-to-date picture. I also like the integration with our single sign-on system. We do not need to maintain a separate set of usernames or user accounts. We can plug this ImmuniWeb service into our authentication technology, enabling two-factor authentication. We have secure authentication right out of the box. The other important feature I like is the executive view. You can easily switch from a technical view to an executive view and have a helicopter view of the compliance status. We can see how much effort is required and our current status."

"ImmuniWeb is stable."

"The initial setup process is user-friendly."

"ImmuniWeb boasts a robust vulnerability detection mechanism, formidable threat mitigation, and an efficient remediation process, incorporating automation techniques and ALM strategies. The solution is highly stable. The solution is scalable. Editing Key Points for Review "Review about ImmuniWeb" What is our primary use case? We use the solution when we face challenges and urgent attention is needed for complex cases from our clients. To address this, we collaborate with the middleware, internal, and client teams to analyze and sort through intricate logs concerning our business cybersecurity program. How has it helped my organization? The solution helped us with one of our clients in the New York area contacted us about a data breach. In response, we swiftly organized a case meeting involving our client, internal, and email customer support teams. Together, we conducted an incident response, facilitating offline assistance for proper planning and risk management processes. We delved into the details of the data breach, identified how it occurred, and collaborated to rectify the issue. The client expressed satisfaction with the resolution process. What is most valuable? ImmuniWeb boasts a robust vulnerability detection mechanism, formidable threat mitigation, and an efficient remediation process, incorporating automation techniques and ALM strategies. It also focuses on consumer satisfaction and operates in English-speaking markets, primarily required by the UAE, the United States, Canada, and Australia, among other developed countries. For how long have I used the solution? We have been using this product for the past one and half years. What do I think about the stability of the solution? The solution is highly stable. I rate it a perfect ten. What do I think about the scalability of the solution? The solution is scalable. I rate it a nine out of ten. How are customer service and support? Support is generally excellent"

"The most valuable features are the SLA of Zero false-positives, less time of service development, validation of unlimited patched vulnerabilities, and several others."

"The solution's most valuable feature is reporting."

"After the assessment, you clearly know which assets require penetration testing."

Cons

"Some of the scripts that we encountered in GitLab were not fully functional and threw up errors."

"You need to have a good knowledge of the product in order to use it."

"It's more related to the supporting layer of features, such as issue management and issue tracking. We tend to always use, for example, Jira next to it. That doesn't mean that GitLab should build something similar to Jira because that will always have its place, but they could grow a bit in those kinds of supporting features. I see some, for example, covering ITSM on a DevOps team level, and that's one of the things that I and my current client would find really helpful. It's understandably not going to be their main focus and their core, and whenever you are with a company that needs a bit more advanced features on that specific topic, you're probably still going to integrate with another tool like Jira Service Management, for example. However, some basic features on things like that could be really helpful."

"I would like to see AI support in GitLab."

"We'd always like to see better pricing on the product."

"GitLab should work on improving their user interface for GitOps as it is lagging behind."

"As a partner, sometimes it's difficult to get support. They have a really complicated procedure for their support."

"I would like to see static analysis also embedded in GitLab. That would also help us. If there's something that it does internally by GitLab and then that is already tied up with your pipeline and then it can tell you that you're coding is good or your code is not great. Based on that, it would pass or fail. That should be streamlined. I would think that would help to a greater extent, in terms of having one solution rather than depending on multiple vendors."

More GitLab cons

"ImmuniWeb sometimes shows previous scans instead of running tests."

"The product’s interface for the web applications could be similar to Android and iOS versions."

"A great idea would be to support using Discovery on the internal network, allowing delivery of all the features of the current Discovery to internal network resources."

"The deployment process on the cloud is straightforward, while on-premise can be complex. Support is generally excellent, although there can be delays in ticket resolution."

"Its technical support could be better."

"A great idea would be to make a mobile application for the ImmuniWeb portal so that all information would be available on the go and from a mobile phone as well. It would be much more convenient."

"It would be better if they had an automated tagging feature. The tagging functionality currently requires manual tagging, and that's probably the most needed feature from my standpoint. We also do not have enough tools, enough features, or options to display different resources in the way we need. There are basic grouping and some filtering features, but we still cannot fully separate some flavors of our resources. However, we may not be aware of the latest features."

Pricing and Cost Advice

"The price is okay."

"Regarding pricing, I would rate GitLab as moderately priced, maybe around a seven or eight out of ten. It could be more flexible for clients but generally offers good value."

"The solution is based on a subscription model and is reasonably priced."

"I don't mind the price because I use the free version."

"We are using its free version, and we are evaluating its Premium version. Its Ultimate version is very expensive."

"GitLab is highly priced for smaller teams, but it's okay if considering a user base of thousands."

"The price of GitLab could be better, it is expensive."

"This is an open-source solution."

More GitLab pricing and cost advice

"It is pretty expensive."

"There should be the flexibility to change or add pricing, especially for pay-per-use cases."

"The platform is expensive if a large development is involved. However, it is less expensive for scheduled-based testing, quarterly or in a year."

"ImmuniWeb is relatively cheap. It's a competitive price compared to other products in the marketplace. It's worth the money we are paying for it."

"I use the product's free version. The tool costs around 229 dollars."

"It is pretty expensive."

"The values of ImmuniWeb are currently significantly below what is valued in the Chilean market for these services and solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

871,829 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

13%

Government

11%

Manufacturing Company

10%

Financial Services Firm

18%

Computer Software Company

10%

Comms Service Provider

Media Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	9
Large Enterprise	42

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	2

Questions from the Community

What do you like most about GitLab?

I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.

See all answers

What is your experience regarding pricing and costs for GitLab?

We are currently using general GitLab, not GitLab Premium.

See all answers

What needs improvement with GitLab?

GitLab needs to improve the CI/CD functionality because it is not compatible with Jenkins and other tools, as it is not that efficient. Security-wise, we have security features enabled in GitLab fo...

See all answers

What do you recommend for a securing Web Application?

In addition to Sitelock and Immuniweb, another option to consider for a 24/7 automated vulnerability monitoring tool to protect web applications is Modshield SB Modshield SB is a web application fi...

See all answers

What do you like most about ImmuniWeb?

ImmuniWeb is stable.

See all answers

What is your experience regarding pricing and costs for ImmuniWeb?

I use the product's free version. The tool costs around 229 dollars.

See all answers

Comparisons

Microsoft Azure DevOps vs GitLab

Compared 39% of the time

GitHub CoPilot vs GitLab

Compared 11% of the time

TeamCity vs GitLab

Compared 4% of the time

Tekton vs GitLab

Compared 4% of the time

SonarQube Server (formerly SonarQube) vs GitLab

Compared 3% of the time

More GitLab Competitors

Acunetix vs ImmuniWeb

Compared 39% of the time

OpenText Core Application Security vs ImmuniWeb

Compared 29% of the time

Qualys Web Application Scanning vs ImmuniWeb

Compared 16% of the time

OWASP Zap vs ImmuniWeb

Compared 16% of the time

More ImmuniWeb Competitors

Product Reports

Buyer's Guide

GitLab

October 2025

Download GitLab product report

Buyer's Guide

ImmuniWeb

October 2025

Download ImmuniWeb product report

Also Known As

Fuzzit

No data available

Overview

GitLab offers a secure and user-friendly platform for CI/CD pipeline management, code repository control, and collaboration, enhancing development speed and efficiency. It facilitates automation with extensive customization and tool integration, ideal for DevOps processes.

GitLab supports source code management, version control, and collaborative development. It's frequently used in CI/CD processes to automate builds and deployments while integrating DevOps practices. GitLab allows companies to manage repositories, automate pipelines, conduct code reviews, and maintain development lifecycles. The platform supports infrastructure and configuration management, enabling efficient code collaboration, deployment automation, and comprehensive repository handling. Many organizations commit and deploy developed code using GitLab's capabilities.

What are GitLab's most valuable features?

CI/CD Pipeline Management: Streamlines development through automated testing and deployment.
User-Friendly Interface: Ensures ease of collaboration and task automation.
Code Merging and Branching: Facilitates smooth code integration and version control.
Security Platform: Provides strong security features for safe development.
Tool Integration: Enhances functionality with diverse tool integration.

What benefits should users evaluate?

Development Speed: Accelerates processes through automation.
Collaboration Ease: Simplifies team interactions and workflow.
Customization Options: Offers extensive personalization for specific needs.
Comprehensive Documentation: Provides detailed guidance for users.
Secure Platform: Maintains integrity with robust security features.

In specific industries, GitLab serves as a backbone for source code management and CI/CD implementation. Companies leverage its capabilities for infrastructure management and deployment automation, thus streamlining project delivery timelines. Its ability to handle configuration management and code repositories effectively aids in maintaining development lifecycles, making it a preferred choice for organizations committed to enhancing their DevOps practices.

GitLab

ImmuniWeb is a global application security company operating in over 50 countries, headquartered in Geneva, Switzerland. Most of ImmuniWeb's customers come from regulated industries, such as banking, healthcare, and e-commerce.

ImmuniWeb® AI Platform leverages award-winning AI and Machine Learning technology for acceleration and intelligent automation of Attack Surface Management and Dark Web Monitoring. The data is later leveraged for threat-aware and risk-based Application Penetration Testing for web, mobile, and API security testing. ImmuniWeb is the only company that offers a contractual zero false-positives SLA with a money-back guarantee. ImmuniWeb’s AI technology is a recipient of numerous awards and recognitions, including Gartner Cool Vendor, IDC Innovator, and the winner of “SC Award Europe” in the “Best Usage of Machine Learning and AI” category.

ImmuniWeb® Community Edition runs over 100,000 daily tests, being one of the largest application security communities. ImmuniWeb SA is an ISO 27001 certified and CREST-accredited company.

https://www.immuniweb.com.

ImmuniWeb

Sample Customers

1. NASA 2. IBM 3. Sony 4. Alibaba 5. CERN 6. Siemens 7. Volkswagen 8. ING 9. Ticketmaster 10. SpaceX 11. Adobe 12. Intuit 13. Autodesk 14. Rakuten 15. Unity Technologies 16. Pandora 17. Electronic Arts 18. Nordstrom 19. Verizon 20. Comcast 21. Philips 22. Deutsche Telekom 23. Orange 24. Fujitsu 25. Ericsson 26. Nokia 27. General Electric 28. Cisco 29. Accenture 30. Deloitte 31. PwC 32. KPMG

Ebay, United Nations, Next Bank Credit Agricole, Geneva Swiss Bank, Banca Stato, Celgene, SIM University, Heymarket, Swissquote, more...

Buyer's Guide

GitLab vs. ImmuniWeb

September 2025

Free Report: GitLab vs. ImmuniWeb

Find out what your peers are saying about GitLab vs. ImmuniWeb and other solutions. Updated: September 2025.

DOWNLOAD NOW

871,829 professionals have used our research since 2012.

See our GitLab vs. ImmuniWeb report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.