PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GitLab's Brian Neel on Secure Software Development and Bug Bounties

hackerone.com | blog | #bug-bounty | #appsec | #gitlab | #devsecops | #secure-development
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

GitLab security lead Brian Neel discusses why traditional security processes (annual audits, periodic scans, pentests) leave gaps, and how secure coding practices plus a bug bounty program close them by embedding security in development.
Published
Collected

Related coverage

blog · about.gitlab.com
Building AI security in the open
GitLab has joined the Open Secure AI Alliance to help advance transparent, adaptable approaches to securing AI systems.
blog · about.gitlab.com
Unblock agentic software delivery with governed code review
Client-side review helps the author move faster. Repo-side review on Duo Agent Platform certifies every merge request against rules you set once, at a flat $0.25 rate per review.
blog · about.gitlab.com
Connect your agents to your software lifecycle with the GitLab MCP server
Run GitLab workflows from your favorite AI application in fewer calls and with leaner context. The GitLab MCP server is now generally available.
blog · about.gitlab.com
GitLab Secrets Manager: Govern secrets like your code
Tighten credential security by scoping build-time secrets to the jobs that need them and serving runtime secrets from the same store.
blog · about.gitlab.com
Scaling Git for the agentic software factory
GitLab is building next-gen source control for agentic workloads, combining machine-scale performance with context, security, and governance to deliver trusted software.
blog · about.gitlab.com
GitLab's agent orchestration eliminates the wait between development stages
GitLab Duo Agent Platform keeps review, tests, security, and approvals moving without a manual task between every handoff.
Back