Build secure software, together.
One place for your team's code, CI/CD pipelines and code-quality checks. Pick an app to sign in.
GitLab
Repositories, merge requests, issues and CI/CD pipelines.
Open GitLab →SonarQube
Code quality, security hotspots and quality gates for every project.
Open SonarQube →Jenkins
Build automation and pipelines for Java and Maven projects.
Open Jenkins →Nexus
Private Maven repository: store builds and cache Maven Central.
Open Nexus →Dependency-Track
Track vulnerable open-source components across every project.
Open Dependency-Track →Security built in
HTTPS everywhere
Private by default
Closed sign-up
SAST · Opengrep
Secrets · Gitleaks
Dependencies · Trivy
Quality gates · SonarQube
Java · Maven · SBOM
Component tracking · Dependency-Track