GitLab Security Labs Blog Category
The goal of our new Security Labs blog category is to showcase our security team’s technical security expertise and GitLab’s thought leadership to the broader security community.
This category will be distinct from topics in our existing Security category, which will continue to focus on the security of the GitLab Platform and GitLab’s security products and features. Your topic should live in the Security category if it is focused on benefits to the GitLab platform and product over third-party intelligence or general technical thought leadership.
Some topics may be relevant for both the Security and Security Labs categories. If you are unsure where it fits or have general questions about a topic, please reach out via the #security_discuss channel.
Core Principles
Any content for this category must follow three core principles:
- Educational Focus: Research should be presented as knowledge-sharing that strengthens the security community’s collective defense.
- Neutral Analysis: You should maintain objectivity when analyzing third-party vulnerabilities, focusing on technical merit rather than vendor criticism or editorializing.
- Responsible Research: The write-up should signal ethical research practices and respect for affected vendors and users in all content. Transparency should be weighed against potential harm reduction.
Topic Examples
✅ What to submit
- Third-party threat intelligence
- Experimental tools or techniques
- Third-party vulnerability analysis (responsibly disclosed)
- Use of GitLab as an offensive tool framed for red teams (requires e-group approval)
- Experiments or security team “lessons learned”
- GitLab vulnerabilities (mitigated/non-active; requires e-group approval)
❌ Topics that are not covered
- Non-public GitLab product or feature details
- Topics that fit the Security category (GL platform or product “how-tos”, product news etc.)
- Topics that communicate urgent security updates about GitLab and should be Security Releases or Advisories
Topic Submission Process
Open an issue using this template, which will walk you through the process and approvals.
8a23973d)
