GitLab Extends Partnership with Google Cloud
May 08, 2023

GitLab and Google Cloud announced an extension of its strategic partnership to deliver secure AI offerings to the enterprise.

GitLab is trusted by more than 50% of the Fortune 100 to secure and protect their most valuable assets, and leads with a privacy-first approach to AI. By leveraging Google Cloud's customizable foundation models and open generative AI infrastructure, GitLab will provide customers with AI-assisted features directly within the enterprise DevSecOps platform.

GitLab is working with Google Cloud because of its strong commitment to privacy and enterprise readiness, and its leadership in AI. With generative AI support in Vertex AI, GitLab can tune Google's foundation models with their own data, and leverage these models to deliver new generative AI powered experiences. Google Cloud allows customers to control their data with enterprise-grade capabilities such as data isolation, data protection, sovereignty, and compliance support.

With Vertex AI, and leveraging the Built with Google Cloud AI program, GitLab will be able to leverage Google's foundation models to provide customers with AI-powered offerings within its cloud infrastructure. This allows GitLab to maintain its commitment to protecting user privacy by containing customer intellectual property and source code within GitLab's cloud infrastructure.

GitLab plans to improve its customers' DevSecOps workflow efficiency by 10x, by applying AI-assisted workflows to all users involved in delivering software value. By implementing AI-powered capabilities throughout the software development lifecycle, GitLab delivers value across the enterprise, enabling faster business transformation, without sacrificing security or privacy.

This first experimental feature leveraging Google Cloud's generative AI models is called Explain this Vulnerability. This capability empowers companies to make security a cross-organizational effort, by providing users with a natural language description of vulnerabilities found in their code and a recommendation for how to resolve them at the time of detection. Explain this Vulnerability can be used by developers, as well as security and operations teams, allowing customers to stay secure while remaining efficient and improving speed to delivery.

Explain this Vulnerability joins GitLab's experimental-level features such as Explain this Code, Summarize Issue Comments, and Summarize Merge Request Changes, and its existing AI-enabled features, Code Suggestions, and Suggested Reviewers, which are focused on driving developer productivity beyond code development, and improving workflow automation for all users throughout the software development lifecycle.

"Organizations today are required to deliver software faster than ever before to remain competitive while requiring a stronger security posture in order to maintain customer, investor, and stakeholder trust," said June Yang, VP of Cloud AI and Industry Solutions at Google Cloud. "Together with GitLab, we'll be able to deliver generative AI functionality that empowers our joint customers to increase delivery velocity without sacrificing security."

"GitLab's vision for generative AI is grounded in privacy, security, and transparency. Our partnership with Google Cloud enables GitLab to offer private and secure AI-powered features, while maintaining customer data in our cloud infrastructure," said David DeSanto, Chief Product Officer at GitLab. "This allows us to harness the power of Google Cloud, while continuing GitLab's privacy-first approach to customer data. We look forward to our continued collaboration to deliver enterprise-grade AI-assisted functionalities to joint customers."

Share this

Industry News

May 02, 2024

Parasoft announces the opening of its new office in Northeast Ohio.

May 02, 2024

Postman released v11, a significant update that speeds up development by reducing collaboration friction on APIs.

May 02, 2024

Sysdig announced the launch of the company’s Runtime Insights Partner Ecosystem, recognizing the leading security solutions that combine with Sysdig to help customers prioritize and respond to critical security risks.

May 02, 2024

Nokod Security announced the general availability of the Nokod Security Platform.

May 02, 2024

Drata has acquired oak9, a cloud native security platform, and released a new capability in beta to seamlessly bring continuous compliance into the software development lifecycle.

May 01, 2024

Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.

May 01, 2024

Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.

May 01, 2024

ActiveState unveiled Get Current, Stay Current (GCSC) – a continuous code refactoring service that deals with breaking changes so enterprises can stay current with the pace of open source.

May 01, 2024

Lineaje released Open-Source Manager (OSM), a solution to bring transparency to open-source software components in applications and proactively manage and mitigate associated risks.

May 01, 2024

Synopsys announced the availability of Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform®.

April 30, 2024

Backslash Security announced the findings of its GPT-4 developer simulation exercise, designed and conducted by the Backslash Research Team, to identify security issues associated with LLM-generated code. The Backslash platform offers several core capabilities that address growing security concerns around AI-generated code, including open source code reachability analysis and phantom package visibility capabilities.

April 30, 2024

Azul announced that Azul Intelligence Cloud, Azul’s cloud analytics solution -- which provides actionable intelligence from production Java runtime data to dramatically boost developer productivity -- now supports Oracle JDK and any OpenJDK-based JVM (Java Virtual Machine) from any vendor or distribution.

April 30, 2024

F5 announced new security offerings: F5 Distributed Cloud Services Web Application Scanning, BIG-IP Next Web Application Firewall (WAF), and NGINX App Protect for open source deployments.

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.