What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2026-03-17 compared with 2025-03-21 · 221 added, 288 removed, 139 unchanged (79% of the section changed)

In today’s world, software defines the speed of innovation.

Every industry, business, and function within a company is dependent on software.

To remain competitive and survive, nearly all companies must digitally transform and become experts at developing, delivering, and securing software.

To meet these market needs, GitLab created the DevSecOps platform, a fundamentally new approach to software development and delivery.

Built with a unified data model, our platform brings together all stakeholders in the software delivery lifecycle – from development teams to operations teams to security teams.

With GitLab, all stakeholders can build better, more secure software, faster.

GitLab is the solution for significant business transformation needs.

Across every industry – and across companies of every size – technology leaders want to make developers more productive so they can deliver better products faster;

they want to measure productivity so they can increase operational efficiency;

they want to secure the software supply chain so they can reduce security and compliance risk;

and, they want to accelerate secure cloud migration, so they can unlock digital transformation results.

These technology leaders need a platform that enables a value stream-driven mindset that shortens the time from idea to customer value and establishes a powerful flywheel for data collection and aggregation.

They are looking for a platform approach that unifies the entire development experience, so that customers can outpace and out-innovate their competition.

We believe GitLab offers the shortest path to unlock technology transformation and business value.

GitLab accelerates our customers’ ability to innovate by accelerating their software development from weeks to minutes.

It removes the need for point tools and delivers enhanced operational efficiency by eliminating manual work, increasing productivity, and creating a culture of innovation and velocity.

Embedding security earlier in the development process, GitLab enables customers to improve software security, quality, and overall compliance.

GitLab is available to any team, regardless of the size, scope, and complexity of their deployment.

GitLab is the intelligent orchestration platform for DevSecOps, where software teams and their Artificial Intelligence (“AI”) agents stay in flow to ship software faster.

Built with a unified data model, our platform brings together development, operations, Information Technology (“IT”), security, and business teams across the entire software development lifecycle to deliver better, more secure software faster.

AI has accelerated individual coding, but teams lose momentum coordinating across planning, testing, security, deployment, and operations.

Fragmented toolchains and tool-specific AI agents create bottlenecks that slow software delivery.

GitLab's intelligent orchestration helps solve this by enabling teams to orchestrate AI agents to execute tasks autonomously across the software lifecycle while maintaining quality, security, and speed.

GitLab accelerates customer innovation by reducing software development cycles from weeks to minutes.

The platform eliminates the need for point tools, increases productivity, and embeds security into development workflows with automated enforcement to improve software security, quality, and compliance while enabling faster delivery.

We serve teams of all sizes, scopes, and complexities.

As a result, we have more than 50 million registered users, and more than 50% of the Fortune 100 companies are GitLab customers 1 .

For purposes of determining the number of our active customers, we look at our customers with more than $5,000 of Annual Recurring Revenue, or ARR, in a given period, who we refer to as our Base Customers.

For purposes of determining our Base Customers, a single organization with separate subsidiaries, segments, or divisions that use The DevSecOps platform is considered a single customer for determining each organization’s ARR.

GitLab is the only DevSecOps platform built on an open-core business model.

We enable any customer and contributor to add functionality to our platform.

In calendar year 2024, nearly 900 people contributed more than 3,000 merge requests back to the core product, extending GitLab’s in-house R&D efforts and empowering our most passionate users to make improvements to the DevSecOps solution they use every day.

Our open-core approach engenders trust with our customers and enables us to maintain our high velocity of innovation.

Our transparent business value also helps us grow the open source community.

We make our strategy, direction, and product roadmap available to the wider community in order to encourage and solicit their feedback.

Through responsible transparency, we create a deeper level of trust with our customers and make it easier to solicit contributions and collaboration from our users and customers.

GitLab offers a flexible deployment model for our customers.

For our self-managed offering, the customer installs GitLab in their own on-premise or hybrid cloud environment.

For our SaaS offering, the platform is managed by GitLab and hosted either in our public cloud or in our private cloud based on the

customer’s preference.

We also offer GitLab Dedicated, our single tenant SaaS solution, ideally suited for organizations with complex security and compliance requirements.

GitLab and the Evolution of DevSecOps

DevOps is the set of practices that combines software development (dev) and IT operations (ops).

It allows teams to collaborate and work together to shorten the development lifecycle and evolve software delivery from a slow, periodic basis to rapid, continuous updates.

The DevSecOps platform – pioneered by GitLab – replaces a “Do it yourself (or DIY)” DevOps approach where organizations stitch together complex toolchains.

GitLab enables teams to realize the full potential of DevSecOps so that they can fully become a software-led business.

It spans all stages of the DevSecOps lifecycle, from project planning (Plan), to source code management (Create), to continuous integration (Verify), to application security testing (Secure), to packaging artifacts (Package), to continuous delivery and deployment (Release) to configuring infrastructure for optimal deployment (Configure), to monitoring it for incidents (Monitor), to protecting the production deployment (Protect), and managing the whole cycle with value stream analytics (Manage).

It also allows customers to manage and secure their applications across any cloud through a single platform.

GitLab’s DevSecOps platform has broad use across teams.

It helps product and business teams work with developers to introduce new features and drive successful business outcomes.

It helps Chief Technology Officers, or CTOs, modernize their software development and delivery environment and drive developer productivity.

It helps Chief Information Officers, or CIOs, adopt microservices and cloud native development to improve their software architecture’s efficiency, scale, and performance.

It helps Chief Information Security Officers, or CISOs, reduce security vulnerabilities without compromising speed to market.

It helps teams attract and retain top talent by creating a superior developer experience that allows people to focus more time on their jobs and less time managing tools.

The majority of our customers begin their GitLab journey by using our Source Code Management (SCM), Continuous Integration (CI) and Continuous Delivery (CD) solutions, referred to as Create and Verify.

Developers use these solutions to collaborate on the same code base without conflicting or accidentally overwriting each other's changes.

Create also maintains a running history of software contributions from each developer to allow for version control.

Teams use Verify to ensure changes to code go through defined quality standards with automatic testing and reporting.

Our position in SCM, CI, and CD – coupled with our strong engagement with developers, managers, and executives – gives us a competitive edge in achieving our unified platform vision.

Specifically, this creates connections between different software development stages and, as users adopt more of these interconnected stages within our single application, the overall value of our DevSecOps platform increases.

GitLab’s innovation strategy is another area of differentiation.

We have a dual flywheel innovation strategy that leverages both development efforts from our research and development team members as well as community contributions via our open-core business model.

By leveraging the power of each, we create a virtuous cycle where more contributions lead to more features, leading to more users and more contributions.

We emphasize iteration to drive rapid innovation in our development strategy.

This iterative approach has enabled us to release a new version of our software every month f or 160 months in a row as of January 31, 2025.

This is also due in part to over 4,800 contributors in our global open source community as of January 31, 2025.

GitLab team members also use The DevSecOps platform to power our own DevSecOps lifecycle.

By doing so, we benefit from the inherent advantages of using a single application.

We leverage these learnings to establish a feedback loop to continually and rapidly improve our platform.

GitLab’s DevSecOps platform is used globally by teams of all sizes across a broad range of industries.

To reach, engage, and help drive success broadly, we have strong partnerships with cloud hyperscalers, including Google Cloud and Amazon Web Services, or AWS, who offer GitLab on their marketplaces.

In the fourth quarter of fiscal year 2025, we announced a promising partnership with AWS

to bring together a new, jointly developed artificial intelligence, or AI, solution named GitLab Duo with Amazon Q.

This solution combines the power of AWS’ agentic AI capabilities with GitLab’s comprehensive DevSecOps platform.

We also benefit from strategic alliance partnerships which resell GitLab to large enterprise customers, and our strong channel partnerships ranging from large global systems integrators to regional digital transformation specialists and volume resellers.

We have a multi-faceted land-and-expand bottom-up and top-down sales strategy.

Our customer journey can begin with developers and then expand to more teams and up to senior executive buyers.

Equally so, the customer journey can start with executive-level buying decision-makers looking for a solution to their business and technology challenges, such as developer productivity, efficiency, security and compliance, and cloud migration.

As of January 31, 2025 and 2024, our Dollar-Based Net Retention Rate was 123% and 130%, respectively.

Our Base Customers grew to 9,893 as of January 31, 2025 from 8,602 as of January 31, 2024.

Our cohort of customers generating $100,000 or more in ARR grew to 1,229 as of January 31, 2025 from 955 as of January 31, 2024.

Our cohort of customers generating $1.0 million or more in ARR grew to 123 as of January 31, 2025 from 96 as of January 31, 2024.

We define our active customers as those with more than $5,000 of Annual Recurring Revenue, or ARR, in a given period, who we refer to as our Base Customers.

A single organization with separate subsidiaries, segments, or divisions that uses our platform is considered a single customer for determining ARR.

GitLab is the only intelligent orchestration platform for DevSecOps built on an open-core business model.

Any customer or contributor can add or enhance functionality by contributing code to the core product or extending our Continuous Integration (“CI”)/Continuous Delivery (“CD”) Catalog and AI Catalog.

In calendar year 2025, users contributed more than 6,500 merge requests, extending our in-house research and development (“R&D”) and empowering our users to improve the DevSecOps solution they use daily.

Our open-core approach builds trust with our customers and enables us to maintain our high velocity of innovation.

We make our strategy, direction, and product roadmap publicly available.

GitLab offers flexible deployment options.

Customers can install self-managed GitLab instances in their own on-premises or hybrid cloud environments , use our fully managed SaaS offering in public or private clouds, or deploy GitLab Dedicated, our single - tenant SaaS solution for organizations with complex security and compliance requirements.

Our business has experienced rapid growth.

4 unchanged sentences

Our gross profit margin was 87% and 89% for fiscal year 2026 and fiscal year 2025, respectively.

The DevSecOps Platform

GitLab’s DevSecOps platform brings together development, operations, IT, security, and business teams to deliver better, more secure software faster.

It represents a step change in how teams plan, develop, secure and deploy software.

GitLab is built on a single codebase, unified data model, and user interface.

GitLab offers customers flexible deployment options, including a self-managed offering, as well as multi-tenant and single tenant (GitLab Dedicated) SaaS solutions.

GitLab is designed to enable our customers to move their software development and delivery workflows across any hybrid or multi-cloud environment while maintaining full feature parity and a single application experience.

GitLab’s platform is purpose-built to address the entire software development lifecycle, with AI offered at every stage:

GitLab enables all stakeholders – from executives to practitioners – to get visibility and insights into their value stream delivery in order to measure the flow of work, from idea to customer value.

With capabilities such as Value Streams Dashboard and Value Stream Analytics, GitLab is uniquely positioned to be the tool of choice for data-driven organizations – enabling teams to understand software delivery performance and value to the business without complex configurations or data scientists.

GitLab helps teams organize multiple projects into a single collaborative portfolio and track important events across the DevSecOps lifecycle.

It also allows organizations to measure using key performance indicators - like adoption and performance metrics - as well as audit activity and permissions to ensure compliance while simplifying and optimizing the flow of work through the full DevSecOps value stream.

To create software, teams require collaborative planning from disparate groups, each with shared and unique objectives.

GitLab enables this collaboration with portfolio planning and management through epics, groups (programs), and milestones that organize and track progress.

GitLab helps teams organize, plan, align, and track project work to ensure teams are working on

the right things at the right time and maintain end-to-end visibility and traceability of issues throughout the delivery lifecycle from idea to production.

GitLab helps teams design, develop, and securely manage code and project data from a single distributed version control system to enable rapid iteration and delivery of business value.

GitLab repositories provide a scalable single source of truth for collaborating on projects and code, enabling teams to be productive without disrupting their workflows.

GitLab helps software engineering teams fully embrace Continuous Integration, or CI, to automate the builds, integration, and verification of their code.

GitLab’s secure CI capabilities enable automated accessibility, usability, performance testing, and code quality analysis to provide fast feedback to developers and testers about the quality of their code.

With pipelines that enable concurrent testing and parallel execution, teams quickly get insight about every commit, allowing them to deliver higher quality code faster.

GitLab enables teams to package their applications and dependencies, manage containers, and build artifacts with ease.

The private, secure, container, and package registries are built-in and preconfigured out-of-the-box to work seamlessly with GitLab Source Code Management, or SCM, security scanners, and Continuous Integration/Continuous Delivery, or CI/CD, pipelines.

GitLab’s offering is differentiated with built in, end-to-end security capabilities.

GitLab provides Advanced Static Application Security Testing, or SAST, Dynamic Application Security Testing, or DAST, Fuzz Testing, Container Scanning, and Dependency Scanning to help customers deliver secure applications along with license compliance.

GitLab helps automate the release and delivery of applications, shortening the delivery lifecycle, streamlining manual processes, and accelerating team velocity.

With zero-touch CD built right into the pipeline, deployments can be automated to multiple environments like staging and production, and the system executes without additional manual intervention - even for more advanced patterns like canary deployments.

With feature flags, built-in auditing/traceability, on-demand environments, and GitLab Pages for static content delivery, users can deliver faster and more confidently than ever before.

GitLab helps software development and delivery teams to configure and manage their application environments.

Strong integration to Kubernetes reduces the effort needed to define and configure the infrastructure required to support an application.

GitLab helps protect access to key infrastructure configuration details such as passwords and login information by using ‘secret variables’ to limit access to only authorized users and processes.

GitLab provides feedback in the form of errors, traces, metrics, logs, and alerts to help reduce the severity and frequency of incidents so that users can release software frequently with confidence.

GitLab extends an organization’s existing operations practices to help teams manage their security vulnerabilities, project dependencies, and compliance policies to reduce overall risk.

This enables teams to identify risks by providing them with a high degree of visibility into their projects' dependencies, security findings, and user activities.

This visibility is then coupled with management tools to respond to those risks.

Lastly, policies can be used to automate compliance and to help secure the software supply chain.

Key Benefits Delivered to our Customers

• Reduce costs through toolchain consolidation.

GitLab’s unique DevSecOps platform approach provides the capabilities of multiple point products, enabling teams to consolidate the number of tools they use.

Further, The DevSecOps platform also delivers cost savings to our

customers by eliminating the hidden costs and time it takes to integrate these point products manually and drives greater efficiency gains and productivity.

1 Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license.

Claim based on GitLab data.

Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025.

Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

Table of Conte n t s

GitLab and the Evolution of Software Development for the AI Era

From DevOps to DevSecOps to Intelligent Orchestration

DevOps combines software development and IT operations to shorten development cycles and enable rapid, continuous software delivery.

GitLab pioneered the DevSecOps platform, replacing "do it yourself" with a single platform spanning the entire software development lifecycle.

Today, GitLab is an intelligent orchestration platform built on three foundational pillars, where software teams and their AI agents work together seamlessly:

Teams and AI agents working together.

GitLab enables teams to orchestrate multiple AI agents that work in parallel across teams and projects on complex tasks spanning the entire software development lifecycle, with teams defining the rules and guardrails that guide agent behavior.

Unified data and intelligence across the lifecycle.

GitLab's unified data model provides complete context across the entire software lifecycle—code, project requirements, change history, security implications, deployment constraints, and operational feedback—with our knowledge graph, GitLab Orbit, indexing repositories and metadata to enable workflows that span multiple stages without context switching or integration overhead.

• Guardrails:

Governance and Compliance Built Into Flow .

GitLab embeds security and compliance directly into agent workflows with policy-driven enforcement, automatic audit trails through Agent Sessions that capture agent reasoning and actions, and complete artifact traceability, enabling organizations to maintain compliance without sacrificing development velocity.

The GitLab Platform

GitLab's intelligent orchestration platform for DevSecOps is built on a single codebase with a unified data model and user interface.

The platform provides a comprehensive understanding of everything required to deliver software, project plans, code, security scans, compliance checks, and deployment configurations.

GitLab is purpose-built to address the entire software development lifecycle.

Platform Capabilities and Benefits

Our platform offers the following capabilities and benefits:

• Unified data model provides complete lifecycle context.

GitLab’s unified data model, enhanced by GitLab Orbit, provides complete context across projects, code, dependencies, security, compliance, testing, and deployment, enabling workflows to span multiple stages without context switching or integration overhead.

• Built-in security and compliance.

GitLab embeds security directly into workflows with comprehensive security testing running continuously throughout workflow execution, enabling organizations to shift security earlier in development without sacrificing velocity and to meet enterprise compliance requirements with granular permissions, auditing, and policy controls.

• Flexible deployment with enterprise guardrails.

Organizations can deploy GitLab in any environment that meets their security, compliance, and infrastructure requirements.

Our platform runs seamlessly whether fully managed as SaaS, self-managed in cloud or on-premises environments, or as single-tenant dedicated instances, enabling customers to maintain full control over their data, workflows, and security policies.

• GitLab Service Level Agreement (“SLA”) for SaaS Deployments.

GitLab commits to a Monthly Uptime Percentage of at least 99.9% during each calendar month.

GitLab features and services covered under this SLA include Issues and Merge Requests, Git Operations (push, pull,

Table of Conte n t s

clone via HTTPS and SSH), Container Registry operations, Package Registry operations, and API Requests (limited to the features and services otherwise available under the SLA).

• Open Core Platform for Ecosystem Innovation.

GitLab’s open-core model allows customers and contributors to extend platform functionality, accelerating innovation velocity beyond internal R&D team capabilities while building trust through transparency and enabling customization for specific needs.

• Innovation Through Iteration and Community Engagement.

GitLab has released a new version of our software every month f or 172 months in a row as of January 31, 2026, supported by over 5,200 contributors in our global open source community.

GitLab team members also use the platform to power our own DevSecOps lifecycle, creating a feedback loop that continuously improves the platform.

GitLab Duo Agent Platform

GitLab Duo Agent Platform enables intelligent orchestration of teams and AI agents across the software lifecycle.

With Duo Agent Platform, teams orchestrate AI agents that execute tasks autonomously across planning, development, security, and deployment.

This eliminates the need for manual handoffs between software lifecycle stages that slow delivery in fragmented toolchains.

Teams maintain control and visibility while AI agents handle repetitive tasks, enabling continuous execution across multiple projects and releases simultaneously.

GitLab Duo Agent Platform embodies our three-pillar architecture for intelligent orchestration, combining collaborative workflows between teams and agents, comprehensive lifecycle context, and enterprise governance to transform how organizations deliver software.

Generally available in January 2026, GitLab Duo Agent Platform combines conversational AI assistance, purpose-built agents for specialized tasks, workflow automation, and enterprise controls, giving organizations the flexibility to deploy and govern AI across their development lifecycle.

GitLab Plans, Pricing, and Deployment Options

GitLab is used globally by teams of all sizes across a broad range of industries, including financial services, technology, healthcare, government, telecommunications, and manufacturing.

Organizations in highly regulated sectors, in particular, value our built-in security, compliance controls, and flexible deployment options that meet strict data residency and governance requirements.

We offer three subscription tiers that serve organizations from individual developers to large enterprises:

• Free tier eliminates barriers to entry for individual developers and offers trials of advanced features.

• Premium tier serves scaling organizations seeking enhanced productivity and collaboration.

• Ultimate tier includes all Premium capabilities, plus advanced application and supply chain security, centralized compliance reporting, and policy controls.

GitLab's pricing model is designed to meet the needs of organizations at different stages of their DevSecOps maturity and scale.

We offer both seat-based and usage-based pricing to align costs with customer value realization and deployment patterns.

Seat-based pricing applies to our core DevSecOps platform capabilities and scales predictably as teams grow.

This model provides unlimited access to platform features within each tier (Free, Premium, Ultimate) based on the number of licensed users.

Table of Conte n t s

Usage-based pricing (GitLab Credits) applies specifically to GitLab Duo Agent Platform capabilities.

As AI agent activity varies significantly based on project complexity, team workflows, and automation levels, customers can choose between on-demand credits that align costs directly with consumption, or monthly commitment pools with shared credit allocation across teams.

Credits provide transparency into AI costs and enable teams to scale agent usage aligned with business value.

This multi-model approach allows customers to adopt GitLab incrementally, starting with platform capabilities that scale with headcount, then adding AI capabilities that match their specific usage patterns and automation maturity.

• AI Add-on Subscriptions are available for customers seeking predictable, seat-based access to AI-powered developer productivity tools:

◦ GitLab Duo Pro includes AI-powered code completion, generation, chat, explanation, refactoring, and test generation.

Available for Premium and Ultimate customers as a seat-based pricing model.

◦ GitLab Duo Enterprise includes all Duo Pro capabilities plus security vulnerability analysis, pipeline root cause analysis, summarization tools, and self-hosted model options.

Available for Premium and Ultimate customers as a seat-based pricing model.

• Enterprise Agile Planning Add-On available to Ultimate customers.

Deployment Options

• GitLab.com (Cloud-Hosted):

Cloud-hosted by GitLab with instant setup, fully managed infrastructure with automatic updates and maintenance.

Ideal for teams that want to focus on development without infrastructure management.

• Self-Managed:

Customers deploy GitLab on their own infrastructure for maximum control and customization, with full control over data, security policies, and infrastructure configuration.

Ideal for organizations with specific compliance, security, or infrastructure requirements.

Fully managed by GitLab with data isolation, residency, and protection.

Includes Dedicated for Government with FedRAMP compliance.

Ideal for enterprises and organizations in highly regulated industries requiring data isolation, specific geographic requirements, or government compliance.

Customer Outcomes and Business Impact

• Lower total cost of ownership for software delivery.

GitLab’s unique DevSecOps platform approach enables customers to consolidate multiple point solutions into a single platform, reducing licensing, integration, and operational overhead.

Based on a 2024 study conducted by Forrester Consulting, commissioned by GitLab, the cost savings and business benefits achievable by deploying GitLab to revenue-generating applications can enable customers to deliver a 483% return on investment within three years of deployment, and a potential payback period of under six months 2 .

• Accelerate software delivery.

We believe is the most comprehensive AI-powered DevSecOps platform.

With GitLab, customers benefit from delivering better, more secure software faster.

GitLab customers see up to 15x faster time to first release, enabling them to meet the growing business demand to deliver new capabilities and increase responsiveness to change.

With GitLab, our customers can often increase the number of their software releases from the tens to thousands and reduce the time it takes to release new software from months to days, helping them generate more revenue.

• Reduce software vulnerabilities.

GitLab allows organizations to adopt a ‘shift left’ security strategy, embedding security protections and guardrails earlier in the development process, without sacrificing developer speed.

It also eliminates the need for multiple data repositories and multiple security tools and reduces the number of hand-offs between development, operations, and security teams.

GitLab provides a single consolidated view of vulnerabilities across software, increasing the efficiency of vulnerability management and remediation.

This enables our customers to find and correct security vulnerabilities in their software earlier or eliminate inefficiencies in the software development process altogether.

• Enable automated audit and compliance.

GitLab eliminates fragmented tools and point integrations that create blind spots and poor visibility across work streams.

This allows compliance and audit teams to more easily log, track, and trace different steps across the software delivery lifecycle, better understand governance, and improve their compliance posture.

• Adopt AI throughout the software development lifecycle.

GitLab is differentiated by offering AI-powered workflows throughout the software development lifecycle.

Our suite of AI capabilities, known as GitLab Duo, helps improve every step of software development and delivery – from planning and code generation to vulnerability detection and value stream measurement.

GitLab Duo is privacy and transparency first and is model agnostic, we choose the right model for the right job, and can quickly evolve, replace, and change models as needed.

We do not use customer content to train models.

• Improve developer experience and productivity.

GitLab enables our customers to spend more time building, deploying, and securing software and less time managing, integrating, and triaging across different tools.

In a single application, each team member can follow the entire lifecycle from beginning to end with contextual history and understanding of each process.

This helps to deliver outsized productivity gains, helping our customers increase their revenue and generate greater profits.

• Embrace the benefits of a multi-cloud strategy.

The DevSecOps platform enables application portability by helping customers to seamlessly secure and manage their applications across clouds.

This allows our customers to provide full value stream analytics on their DevSecOps workflow and helps simplify their application security and compliance across clouds.

It also helps them to optimize their cloud costs and embrace the best services across each cloud without becoming overly reliant on a single public cloud provider.

Competitive Strengths

Our business benefits from the following competitive strengths:

• Secure, unified DevSecOps workflows – GitLab is a single, unified workflow across the software development lifecycle, eliminating tool sprawl and context switching.

• Built-in security and compliance – GitLab’s platform is differentiated by offering enterprise-grade, integrated security and compliance, all without adding friction to developer workflows.

This enables security and compliance teams to establish enterprise-wide policies so that they can shift security earlier in the development process without sacrificing developer velocity and experience.

• Context-aware AI throughout the software development lifecycle – GitLab offers AI throughout the software development and deployment experience, helping accelerate and improve every step of the software delivery lifecycle.

In addition, GitLab offers a privacy-first and model-agnostic approach, enabling organizations to adopt AI in their software practices safely and responsibly.

• Collaboration and Visibility – As a platform that unifies the entire development lifecycle, we enable technology teams and organizations with the collaboration, visibility, and measurement they need to develop, secure, and deploy software at scale.

Finally, we meet customers where they are with:

• Flexible deployment options, so they pick the option that works for their business strategy.

• Extensibility, so they can integrate with their existing tools and processes, starting with core features, and expand from there.

• An Open Core platform, so they can build the capabilities they need into our platform.

• Faster time to market at enterprise scale.

GitLab customers see up to 15x faster time to first release, accelerating release cycles from months to days and enabling faster response to customer and market demands.

• Improved security and risk posture without slowing development.

GitLab’s integrated security and policy enforcement enables customers to identify and remediate vulnerabilities earlier in the lifecycle, reducing downstream risk and operational disruption.

Table of Conte n t s

• Audit-ready governance across the software development lifecycle.

GitLab’s intelligent orchestration helps eliminate fragmented tools that create blind spots.

Teams can automatically log, track, and trace work across planning, development, security, and operations, giving audit and compliance teams the visibility they need while reducing manual effort across the organization.

• Measurable productivity gains from AI-assisted workflows.

GitLab customers apply AI across planning, development, security, and operations to reduce manual effort, improve consistency, and increase organizational capacity for software development.

• Improved developer experience and productivity.

Customers spend more time building, deploying, and securing software with our single platform and less time managing, integrating, and triaging across different tools.

• Infrastructure and cloud flexibility without vendor lock-in.

Customers deploy across cloud, hybrid, and on-premises environments, supporting multi-cloud strategies and long-term architectural choices.

2 Forrester Total Economic Impact™, commissioned by GitLab, July 2024.

The Total Economic Impact™ study conducted by Forrester Consulting evaluates the cost savings and business benefits enabled by GitLab Ultimate over three years.

The results are based on a composite organization constructed from interviewed customers.

This information is intended for informational purposes only and should be evaluated within the full context of the study document.

Our Growth Strategy

We intend to invest in our business to advance the adoption of The DevSecOps platform.

Our growth strategies include:

• Advance our feature maturity across more stages of the DevSecOps lifecycle.

We intend to continue making strategic investments in research and development and hiring top technical talent to mature our features in more stages of the DevSecOps lifecycle.

For example, we recently acquired two security companies – Oxeye and Rezilion – which rapidly led to our introduction of a differentiated Advanced SAST solution in the market.

We will continue to make many of our features open source or source code available to encourage contributions, which, in turn, accelerates our ability to innovate and provide a better platform to our customers.

• Drive growth through enhanced sales and marketing.

We believe that nearly all teams will modernize from DIY DevOps into DevSecOps platforms and that the opportunity to continue growing our customer base is substantial.

To drive new customer growth, we intend to continue investing in sales and marketing, with a focus on replacing DIY DevOps within larger teams.

We also continue to focus on acquiring users with our free product and converting free users to paying customers, with a special emphasis on improving the self-service purchasing experience.

We intend to continue investing in our business to advance the adoption of our DevSecOps platform and support long-term growth.

Our growth strategy is focused on expanding platform adoption, increasing customer value, and addressing the evolving needs of organizations delivering enterprise software at scale:

• Advance feature maturity across more stages of the DevSecOps lifecycle.

We plan to continue investing in research and development to mature capabilities across additional stages of the DevSecOps lifecycle.

As software development becomes increasingly complex and AI-assisted, organizations require platforms that unify planning, development, security, and operations with consistent governance and context.

We believe continued investment in platform capabilities that span the full software development life cycle, strengthen our differentiation, and support broader enterprise adoption.

• Drive growth through go-to-market expansion.

We believe demand for integrated DevSecOps platforms remains substantial as organizations modernize from fragmented toolchains and seek to improve productivity, security, and operational efficiency.

Our go-to-market approach supports both bottom-up adoption by developers and top-down enterprise buying motions driven by executive decision-makers addressing broader business and technology needs.

We plan to continue investing in sales and marketing initiatives that increase awareness, educate customers on platform value, and support adoption across these entry points, while also expanding our global partner ecosystem of cloud providers, system integrators, resellers, and technology partners to extend market reach and support customer deployment and expansion.

We believe this combined direct and partner-led model enables us to efficiently serve organizations of varying sizes, maturity, and regulatory requirements, while accelerating time to value and supporting long-term customer growth.

• Drive increased expansion within our existing customer base.

As customers realize the benefits of a single application, they typically increase their spend with us by adding more users or purchasing higher-tiered plans.

As customers realize the benefits of a single platform approach, they often expand their usage by adding users, adopting additional capabilities, or upgrading subscription tiers.

We also expect to drive expansion through GitLab Credits as customers scale their adoption of GitLab Duo Agent Platform and AI agent capabilities.

As a result, for fiscal year 2026 and fiscal year 2025, our Dollar-Based Net Retention Rate was 118% and 123%, respectively.

We plan to continue investing in sales and marketing, with a focus on driving the expansion of The DevSecOps platform within existing customers, particularly for our larger customers.

• Further grow adoption of our SaaS offering.

As teams move more workloads to the cloud a nd consume technology as a service, we believe our SaaS offering will continue to grow at a faster rate than our self-managed offering.

We intend to continue making investments in research and development to enhance new SaaS features, as well as in sales and marketing, to drive further adoption of our SaaS offering.

For example, we offer a differentiated single tenant SaaS solution, called GitLab Dedicated, suited for organizations that want the benefits of SaaS and are in highly regulated verticals with complex security and compliance requirements.

We intend to continue focusing on customer success

Table of Conte n t s

and expansion initiatives to increase adoption within existing customers, particularly among larger enterprises with complex development, security, and compliance requirements.

• Further grow adoption of our SaaS and usage-based offerings .

We expect continued growth in demand for SaaS-based solutions as customers seek to reduce infrastructure management overhead while maintaining enterprise-grade security and compliance.

As customers scale their use of GitLab Duo Agent Platform capabilities, we expect growing revenue contributions through GitLab Credits, which align costs with AI agent activity and organizational value realization.

We plan to continue investing in our SaaS offering, including differentiated deployment options designed for highly regulated industries, to support customers with varying operational and compliance requirements.

• Grow and invest in our partner network.

We have been investing in our global partner ecosystem, composed of hyperscalers and cloud providers, including Google Cloud and AWS, technology and independent software vendor partners, global resellers, and system integrators.

For example, in the fourth quarter of fiscal year 2025, we announced a promising partnership with AWS to jointly develop a new AI solution called GitLab Duo with Amazon Q, which brings together AWS’ agentic AI capabilities with GitLab’s comprehensive AI-powered DevSecOps platform.

We plan to continue investing in building out our partner program to expand our distribution footprint, broaden the awareness of The DevSecOps platform, and more efficiently add new customers.

We will also continue to invest in building out our partnerships to deliver transformation services to help our enterprise customers accelerate the deployment of The DevSecOps platform.

• Expand our global footprint.

We believe there is a significant opportunity to continue to expand internationally.

We grew our international revenue to $140.6 million for fiscal year 2025 from $106.9 million for fiscal year 2024, representing an increase of 32%.

We intend to grow our international revenue by strategically increasing our investments in internatio nal sales and marketing operations, including headcount in the EMEA and APAC regions.

Our partner strategy is designed to complement direct sales efforts and provide customers with implementation, migration, and advisory services that accelerate platform value realization.

Sales and Marketing

We sell GitLab through a direct sales organization, a self-service web purchasing experience, and a global partner ecosystem including systems integrators, cloud platform partners, independent software vendors, managed service providers, and resellers.

Our sales organization is structured by region and customer size, with vertical specialization in regulated industries including public sector, financial services, and telecommunications.

Our customer success organization manages relationships throughout the customer lifecycle to drive platform adoption and expansion.

Our marketing programs generate awareness through digital demand generation, account-based marketing, virtual and field events, and integrated campaigns targeting developers, customers, and prospects.

We offer free tier access and trials to enable prospects to experience platform value before purchasing.

Human Capital

5 unchanged sentences

To facilitate hiring and retention, we strive to make GitLab an inclusive workplace where every team member feels they belong and have the opportunity to grow and develop their career.

We remained Great Place to Work certified with 93% of US team members agreeing that GitLab is a great place to work and 96% of US team members saying they are proud to work here.

We have a 92% CEO approval rating and a 4.1 overall workplace approval rating on Glassdoor.com, as of January 31, 2025.

We remained Great Place to Work certified with 92% of US team members agreeing that GitLab is a great place to work and 94% of US team members saying they are pr oud to work here.

In fiscal year 2026, we earned recognition as a Fortune Best Workplace in Technology, a Fortune Best Workplace in the Bay Area, and a Built In Best Remote Place to Work.

As a result, we trust that our values have led and will continue to lead to results that distinguish us from other companies.

Our values include:

• Our mission is to empower customers to deliver secure software, faster.

This mission guides our path, and we live our values along that path.

Our values are a living document, and we encourage our team members to make suggestions to improve our company values constantly.

We have established six core C.R.E.D.I.T.

◦ C ollaboration - Helping others is a priority;

2 unchanged sentences

◦ E fficiency - We are about working on the right things to achieve more progress faster;

Table of Conte n t s

◦ D iversity, Inclusion & Belonging - We aim to foster an environment where everyone can thrive;

5 unchanged sentences

• We seek to be transparent in everything we do .

We publicly share non-sensitive information, including our long-term strategy and product roadmap, in written form to encourage innovation and trust amongst our team members, customers, and the wider open source community.

We publicly share non-sensitive information, including our product roadmap, in written form to share best practices and build trust amongst our team members, customers, and the wider open source community.

Transparency creates awareness for GitLab, allows us to recruit people who care about our values, gets us more and faster feedback from people outside GitLab, and makes it easier to collaborate.

We believe that our transparency creates more value than it captures, and our ability to execute our strategy far exceeds the abilities of our competitors.

• We do the smallest thing possible and get it out as quickly as we can.

We aim to take an iterative approach in everything we do, including our day-to-day work and building The DevSecOps platform.

Our process is centered on dividing work into small increments, and pursuing each stage with speed and efficiency, whilst building with the end rsults in mind.

We aim to take an iterative approach in everything we do.

Our process is centered on dividing work into small increments, and pursuing each stage with speed and efficiency, whilst building with the end results in mind.

Approaching work this way, we are able to rapidly get input from end-users who are actively using our platform, continuously revisit what we are doing with a fresher perspective, and gradually gain a greater sense of visibility into what the end picture should look like.

By adopting this approach, we are able to work with a greater sense of speed and efficiency, getting more done in less time.

Our mission is to empower customers to deliver secure software, faster.

When everyone can contribute, consumers become contributors, and we greatly increase the rate of human progress through changing creative work from unilateral read-only to collective collaboration and innovation.

Our mission is to enable everyone to contribute to and co-create the software that powers our world.

When everyone can contribute, consumers become contributors, and we greatly increase the rate of innovation.

This mission is integral to our culture, and how we hire, build products, and lead our industry.

The DevSecOps platform brings together developers, operations, and security professionals and elevates their innovation to new levels, making it faster, safer, and more accessible.

We are an all-remote company, and we pride ourselves in how we work through enabling our team members with the individualized flexibility to reach their business results.

GitLab’s unified DevSecOps platform brings together developers, operations, and security professionals and elevates the output of their work to new levels, making it faster, safer, and more accessible.

We enable our team members to achieve that mission with individualized flexibility to reach shared business results.

We believe this leads to a team that is continually engaged and passionate about the positive impact of GitLab.

As of January 31, 2025, we had approxi mate ly 2,375 team members in 60 countrie s.

As of January 31, 2026, we had appr oximately 2,580 team members in 60 countrie s.

We engage our team members in various ways, including through direct employment, Professional Employer Organizations (“PEOs”), and as independent contractors.

7 unchanged sentences

We believe we have a strong and open relationship with our team members and our unique mission, culture and values differentiate us and continue to be key drivers of our business success.

Table of Conte n t s

Diversity, Inclusion and Belonging

Diversity, Inclusion & Belonging is a part of our CREDIT values.

We strive for a transparent environment where all globally dispersed voices are heard and welcomed.

We strive for an environment where people can show up as their full selves each day and contribute to their best ability.

With more than 50 million registered users utilizing GitLab across the globe, we strive to create a team that understands our global user base.

We strive to create a transparent environment where all globally dispersed voices are heard and welcomed, where people can show up as their full selves each day, and where everyone can contribute to their best ability.

Compensation, Benefits, and Perks

8 unchanged sentences

To determine what is available in our free tier and what is available only in our paid tiers, we first assess who cares the most about the feature.

Individual contributors rarely purchase The DevSecOps platform, and thus, if the feature is something primarily individuals care about, it will be open source.

Individual contributors rarely purchase the GitLab platform, and thus, if the feature is something primarily individuals care about, it will be open source.

If the features are something primarily managers, directors, or executives care about, then it will be source-available.

When considering buyers as part of product tiering decisions, we use the following guidance:

• Premium is for team(s) usage, with the purchasing decision led by one or more managers or directors

• Ultimate is for strategic organizational usage, with the purchasing decision led by one or more executives

We want to be good stewards of our open source solution, so we aim to ensure all stages of the DevSecOps lifecycle (plan, create, verify, package, release, configure, monitor) will have some open source features.

3 unchanged sentences

Our open source approach is intended to increase our development velocity as the developer pool who contributes to our codebase is greater than the size of any single engineering team.

As of January 31, 2025, more than 4,800 individuals have contributed to The DevSecOps platform and since January 1, 2021, code contributions have averaged more than 285 per month.

As of January 31, 2026, more than 5,200 individuals have contri buted to the GitLab platform and since January 1, 2021, code contributions have averaged more than 275 per month.

Because people outside of our organization can read our code, users can contribute to identifying and solving issues, which accelerates the time we can release new software to market.

2 unchanged sentences

Our customers benefit from the advanced innovation that comes from distributed development, the documentation, best practices, knowledge sharing across our community, and the possibility to extend or enhance our platform with unique capabilities through their own contributions back to our codebase.

The DevSecOps Platform and Plans

We offer GitLab in three different subscription tiers:

Free, Premium and Ultimate.

• Our Free tier caters to capabilities needed by individual contributors.

• Our Premium tier is intended specifically for managers and directors to help teams enhance collaboration between development and operations teams, manage projects and portfolios, and accelerate the deployment of code.

• Our Ultimate tier enables organization-wide change by facilitating better collaboration between development, operations, and security teams, instilling organizational-wide security, compliance, and planning practices, and implementing full value stream measurement, analytics, and reporting, across the DevSecOps lifecycle.

Our subscription plans are available as a self-managed offering that customers download to run in their own on-premise environment or hybrid cloud environments, and also a SaaS offering, which is offered as either multi-tenant or single-tenant (called GitLab Dedicated).

Research and Development Strategy

We ship features and components of features at a high velocity in the smallest possible increments to optimize for code quality, efficiency, and speed.

As each feature is typically similar in size, we are able to measure and track our development team's efficacy by counting the number of merge requests or a request to merge one branch of code into another.

We believe that our development approach, using The DevSecOps platform, is a key competitive advantage.

As each feature is typically similar in size, we are able to measure and track our development team's efficacy by counting the number of merge requests or a

Table of Conte n t s

request to merge one branch of code into another.

We believe that our development approach, using the GitLab platform, is a key competitive advantage.

We make product investment decisions based upon our DevSecOps platform capabilities contribution to revenue, monthly active usage, and served addressable market size.

3 unchanged sentences

Our research and development team consists of our architects, software engineers, security experts, DevSecOps engineers, product management, user experience, quality assurance, and data collection teams.

We intend to continue to invest in our research and development capabilities to extend The DevSecOps platform and products.

Our Technology

Our single application strategy means that we have one codebase to author, test, secure, package, and distribute.

This also means that we are able to give users the most choice.

Our customers can use a SaaS subscription or run The DevSecOps platform themselves in a self-managed way in their own cloud environments.

For self-managed users, GitLab is the only truly public-cloud-agnostic solution.

Customers can also run The DevSecOps platform in their own data centers if they wish.

They can further choose to run GitLab on traditional servers or use containers and an orchestration system like Kubernetes.

From an end-user standpoint, our single application strategy provides one consistent user interface across all stages of the DevSecOps lifecycle.

We see this result in a manifold reduction in lifecycle time for software development teams.

For integrators, GitLab has a single application programming interface (“API”) to write integrations against instead of a fragmented toolchain.

For IT system administrators and

internal security teams this also means they have one application environment and authentication system to inspect and certify according to their team’s standards.

We intend to continue to invest in our research and development capabilities to extend the GitLab platform and capabilities.

Our Customers

6 unchanged sentences

Further, during the same period, we grew our $1.0 million ARR customers to 155 from 123, an increase of 26%.

We have key reference customers across a breadth of industry verticals that we believe validate The DevSecOps platform, and our customers range from small and medium-sized teams to Fortune 500 companies.

There were no individual customers whose revenue represented more than 10% of total revenue in fiscal 2025 or fiscal 2024.

Sales and Marketing

Our go-to-market strategy spans a dedicated enterprise sales motion, a self-service buying experience, ecosystem partners, professional services, and a customer success organization.

We organize our sales organization by region and size, with an additional vertical focus on regulated industries such as the public sector, financial services, and telecommunications.

Our sales organization’s success is centered around our customers’ success, ensuring they achieve platform value through GitLab.

Our customer success organization manages our relationships with customers, both pre-sale and post-sale.

Customer success helps customers achieve platform value and productivity with GitLab by building awareness, adoption, usage, and performance around modern DevSecOps capabilities.

We believe that this focus on platform value and partnership engagement maximizes long-term expansion with our existing customer base.

Our professional services organization is also focused on helping customers accelerate adoption with GitLab through implementation, migration, advisory, acceleration, and education services.

Through our commitment to open collaboration, we also have select hyperscaler and channel partners who increase efficient access to new and existing customers, and support the existing customer growth through trusted relationships, existing contracts, service delivery capability and capacity, and collaboration on large digital transformations.

These partners include systems integrators, cloud platform partners, independent software vendors, managed service providers, resellers, distributors, and ecosystem partners.

Our partnership program rewards partners who commit to and invest in a deeper GitLab relationship, and lean into services for implementation and expansion success.

Our marketing department is focused on accelerating the buyer journey, from awareness, consideration, and conversion to expansion and advocacy.

We focus on reaching both the executive buyer audience and the individual developer audience among potential and existing customers.

We utilize diverse strategies such as digital demand generation, account-based marketing, nurture programs, sales development, virtual and field events, sponsored webinars, gated content downloads, whitepapers, display advertising and integrated campaigns to connect with prospective customers.

We also host and present at regional, national and global industry events.

We offer our free tier and/or a free trial to prospective customers.

We then engage with these users to encourage them to upgrade to a paid version.

Once a customer is onboarded with GitLab, our teams work to identify additional business units and parent/child/subsidiary prospects that would benefit from The DevSecOps platform.

Finally, as engaged members of the open-source community, our contributors

often serve as subject matter experts at market-leading developer events, and The DevSecOps platform is presented on the cutting edge of innovation.

We have key reference customers across a breadth of industry verticals that we believe validate the GitLab platform, and our customers range from small and medium-sized teams to Fortune 500 companies.

There were no individual customers whose balance represented more than 10% of accounts receivable as of January 31, 2026 and January 31, 2025.

The markets we serve are highly competitive and rapidly evolving.

With the introduction of new technologies and innovations, we expect the competitive environment to remain intense.

We operate in two primary competitive landscapes:

DevSecOps point solutions and DevSecOps platforms.

In terms of point solutions that are stitched together, GitLab’s offering is substantially different in that it is one platform, one codebase, one interface, and a unified data model that spans the entire DevSecOps lifecycle.

In terms of DevSecOps platforms, our principal competitor is Microsoft Corporation, which owns GitHub.

We view GitLab as differentiated from GitHub in several areas, including value delivery to all personas in the software delivery lifecycle (not limited to developers), integrated security and compliance, AI throughout the software delivery process, cloud agnosticism, open core business model, and ability to scale to meet enterprise-level workloads.

With the introduction of new technologies and innovations, particularly in AI-assisted development, we expect the competitive environment to remain intense.

We compete primarily with DevSecOps platforms, product collections, and point solutions.

Our principal competitor is Microsoft Corporation, which owns GitHub.

We also compete with DevOps product collections and point solutions from vendors such as Atlassian, JFrog, and Harness.

We differentiate from GitHub through flexible deployment options that work within enterprise security and compliance requirements, LLM neutrality with self-hosted gateway support, hyperscaler infrastructure flexibility, and our open core business model.

We differentiate from product collections and point solutions through our single platform with a unified data model.

Furthermore, we believe we can compete favorably based on the following factors:

• ability to provide a single application that is purpose-built to span the entire DevSecOps lifecycle;

• ability to rapidly innovate and consistently ship and release more features and versions of our software;

• maturity of features in the Create (Source Code Management) and Verify (Continuous Integration) stages;

• ability to run natively across any public cloud, private cloud, hybrid cloud, or on-premises environment;

• ability to include AI features across the DevSecOps lifecycle:

• ability to enable collaboration between developers, IT operations, and security teams;

• ability to reduce handoffs, friction, and switching costs across different stages of the DevSecOps lifecycle;

• ability to reduce software development times to release better software faster;

• ability to consolidate multiple tools into a single platform;

• ability to eliminate manual integrations that are costly and time-effective to maintain;

• ability to provide a seamless, consistent, and single user experience through one user interface;

• ability to deliver a large, engaging community of open source contributors;

• performance, scalability, and reliability;

• ability to implement more differentiated security and governance;

• quality of service and overall customer satisfaction;

• strong documentation and transparency of information.

• Intelligent orchestration across teams and AI agents for the entire software lifecycle;

• A unified data model providing complete context across all stages of software development planning, development, security, deployment, and operations;

• Integrated team and agent workflows spanning multiple projects and releases simultaneously;

• Elimination of manual handoffs between software lifecycle stages through continuous execution;

Table of Conte n t s

• AI capabilities embedded across all software development lifecycle stages;

• Security and compliance built directly into software development workflows, not as separate checkpoints;

• Feature parity across any public cloud, private cloud, hybrid cloud, or on-premises environment;

• Flexible deployment options including self-managed (on-premise or hybrid cloud), fully managed SaaS (public or private cloud), and single-tenant GitLab Dedicated instances, all within enterprise security and compliance requirements;

• LLM neutrality and support for self-hosted AI gateways, including air-gapped environments;

• Rapid innovation and consistent feature delivery through our open-core model;

• Collaboration between developers, IT operations, and security teams;

• Consolidation of multiple tools into a single platform;

• A large, engaging community of open source contributors;

• Quality of service and customer satisfaction;

• Comprehensive documentation and transparency of information.

Corporate Philanthropy

As part of our mission – we empower organizations to ship secure software faster – we believe that it is important to support teams that can further this goal at local and global levels.

To further this mission, in September 2021, our board of directors approved the reservation o f up to 1,635,545 shares of Class A common stock for the issuance to charitable organizations, to be further designated by our board of directors.

During the year ended January 31, 2025 , we donated 221,195 shares of Class A common stock at fair value to the GitLab Foundation (the “Foundation”), a California nonprofit public benefit corporation.

The Foundation is also a related party as certain of our officers serve as directors of the Foundation.

The fair value of the common stock was determined based on the quoted market price on the grant date.

This equity donation was provided in equal quarterly distributions throughout fiscal year 2025.

Donations are anticipated in fiscal year 2026.

Additionally, as part of GitLab’s Sustainability objectives, GitLab purchased $0.14 million in high-quality carbon removal reforestation credits in fiscal year 2025 to cover 4,820 tonnes of CO2e of the company's emissions.

To further this mission, in September 2021, our board of directors approved the reservation of up to 1,635,545 shares of Class A common stock for the issuance to charitable organizations, to be further designated by our board of directors.

We currently donate shares on a quarterly basis.

Equity” to our consolidated financial statements included elsewhere in this Annual Report for more information regarding donated shares.

Additionally, as part of GitLab’s Sustainability objecti ves, GitLab purchased $0.23 million in high-quality carbon removal reforestation credits in fiscal year 2026 to cover 21,086 tonnes of CO2e of th e company's emissions.

Government Regulation

5 unchanged sentences

We believe that we are in material compliance with such laws and regulations and do not expect continued compliance to have a material impact on our capital expenditures, earnings, or competitive position.

We continue to monitor existing and pending laws and regulations and while the impact of regulatory changes cannot be predicted with certainty, we do not expect compliance to have a material adverse effect on our business.

We continue to monitor existing and pending laws and regulations and while the impact of regulatory changes cannot be predicted with certainty, we do not expect compliance to have a

Table of Conte n t s

material adverse effect on our business.

See Part I, Item 1A, “Risk Factors” in this Annual Report on Form 10-K for a more comprehensive description of risks related to government regulation affecting our business.

3 unchanged sentences

We generally enter into confidentiality agreements and invention or work product assignment agreements with our officers, team members, agents, contractors, and business partners to control access to, and clarify ownership of, our proprietary information.

As of January 31, 2025 , we had twelve issued patents and nineteen pending patent applications in the United States and abroad.

As of January 31, 2026, we had 16 issued patents and 25 pending patent applications in the United States and abroad.

These patents and patent applications seek to protect proprietary inventions relevant to our business.

10 unchanged sentences

GitLab et al., Case No.

5:24-cv-06244-EKL, naming GitLab and certain of our officers.

The complaint purports to assert claims under Section 10(b) of the Securities Exchange Act of 1934 (“1934 Act”), SEC Rule 10b-5, and Section 20(a) of the 1934 Act, on behalf of persons and entities who acquired our common stock between June 5, 2023 and June 3, 2024 (the “Class Period”).

Plaintiff alleges that, during the Class Period, defendants made material misrepresentations or omissions regarding our use of AI features and ability to monetize our AI capabilities that artificially inflated our stock price.

Plaintiff seeks, among other things, damages in an unspecified amount, as well as fees and costs.

Plaintiff amended his complaint on February 5, 2025 and March 7, 2025, and we will move to dismiss the second amended complaint in April 2025.

Two putative shareholder derivative cases have been filed containing allegations based on or similar to those in the securities class action.

24-cv-06244-EKL (“Dolly”), naming GitLab and certain of our officers.

The complaint purported to assert claims under Section 10(b) of the Securities Exchange Act of 1934 (“1934 Act”), SEC Rule 10b-5, and Section 20(a) of the 1934 Act, on behalf of persons and entities who acquired our common stock between June 5, 2023 and June 3, 2024 (the “Class Period”).

Plaintiff allege d that, during the Class Period, defendants made material misrepresentations or omissions regarding, among other things, our use of AI features and ability to monetize our AI capabilities that artificially inflated our stock price.

Plaintiff sought , among other things, damages in an unspecified amount, as well as fees and costs.

Plaintiff amended his complaint on February 5, 2025 and March 7, 2025, and we moved to dismiss the second amended complaint in April 2025.

On August 14, 2025, the court granted our motion to dismiss with leave for the plaintiff to amend and refile a third amended complaint.

On September 8, 2025, the plaintiff filed a stipulation stating that he had decided not to file an amended complaint or to appeal the motion to dismiss order.

The case was dismissed with prej udice and final judgment was entered on behalf of GitLab on January 26, 2026.

Three putative shareholder derivative cases were filed containing allegations based on or similar to those in the securities class action.

The cases were filed on February 14, 2025, in the United States District Court for the Northern District of California, captioned Preciado v.

1 unchanged sentence

25-cv-01597 (“Preciado”);

and on February 19, 2025 in United States District Court for the Northern District of California, captioned Jones v.

on February 19, 2025 in the United States District Court for the Northern District of California, captioned Jones v.

Sijbrandij et al., Case No.

25-cv-01735 (“Jones”);

Both cases are allegedly brought on our behalf.

Each of the lawsuits name us as a nominal defendant, and also certain of our officers and current and former members of our board of directors.

The Jones complaint purports to assert claims under Section 14(a) of the Exchange Act as well as breach of fiduciary duty, while the Preciado complaint purports to assert those claims as well as unjust enrichment and related corporate torts.

The complaints seek to recover unspecified damages and other relief on our behalf.

Based on the preliminary nature of the proceedings in these actions, the outcomes remain uncertain and the Company cannot estimate the potential impact, if any, on its business or financial statements at this time.

In addition to the shareholder matters described above, we are, and from time to time may become, involved in legal proceedings or be subject to claims arising in the ordinary course of our business.

and on March 28, 2025 in the United States District Court for the Northern District of California, captioned Lianto v.

Sijbrandij et al., Case No.

25-cv-02924 (“Lianto”).

Each of the three cases was allegedly brought on our behalf.

Each of the lawsuits named us as a nominal defendant, and also certain of our officers and current and former members of our board of directors.

The Jones complaint purport ed to assert claims under Section 14(a) of the Exchange Act as well as breach of fiduciary duty, while the Preciado and Lianto complaints purported

Table of Conte n t s

to assert those claims as well as unjust enrichment and related corporate torts.

The complaints sought to recover unspecified damages and other relief on our behalf.

In January 2026, the plaintiffs in each of these three putative shareholder derivative cases agreed to voluntarily dismiss their respective claims.

All three cases were dismissed on January 26, 2026.

In addition to the now-dismissed shareholder matters described above, we are, and from time to time may become, involved in legal proceedings or be subject to claims arising in the ordinary course of our business.

We are not presently a party to any legal proceedings that in the opinion of management, if determined adversely to us, would individually or taken together have a material adverse effect on our business, financial condition or operating results.

7 unchanged sentences

Our website address is https://about.gitlab.com.

The information contained on, or

that can be accessed through, our website is not a part of this Annual Report on Form 10-K.

The information contained on, or that can be accessed through, our website is not a part of this Annual Report on Form 10-K.

Investors should not rely on any such information in deciding whether to conduct any transactions involving our Class A common stock.

Unless otherwise indicated, the terms “GitLab,” the “Company,” “we,” “us,” and “our” refer to GitLab Inc., our subsidiaries, and our consolidated variable interest entity, “JiHu”.

Unless otherwise indicated, the terms “GitLab,” the “Company,” “we,” “us,” and “our” refer to GitLab Inc., our subsidiaries, and our consolidated variable interest entity GitLab Information Technology (Hubei) Co., LTD (“JiHu”).

References to our “common stock” include our Class A common stock and Class B common stock.

9 unchanged sentences

Further, our references to the URLs for these websites are intended to be inactive textual references only.

Table of Conte n t s

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business