Published on: April 20, 2026 7 min read Prepare your pipeline for AI-discovered zero-days AI is finding vulnerabilities faster than teams can patch. Learn how pipeline enforcement, automated triage, and AI remediation close the gap. AI/ML security DevSecOps platform Anthropic's…
Published on: April 20, 2026 6 min read GitHub Copilot's new policy for AI training is a governance wake-up call Learn what GitHub's Copilot policy change means for regulated industries, and why GitLab's commitment to customer data privacy matters. AI/ML product GitHub recently…
Published on: April 16, 2026 5 min read GitLab 18.11: CI Expert and Data Analyst AI agents target development gaps Set up CI and query your software development lifecycle data with two new GitLab Duo Agent Platform foundational agents available in GitLab 18.11. AI/ML features pr…
Published on: April 16, 2026 5 min read GitLab 18.11: Automate remediation with ready-to-merge AI code fixes With GitLab 18.11, Agentic SAST Vulnerability Resolution becomes generally available, alleviating security bottlenecks. security AI/ML product features AI is writing code…
Published on: April 16, 2026 3 min read Claude Opus 4.7 is now available in GitLab Duo Agent Platform Anthropic's latest model, available now, for stronger agent work. AI/ML product The GitLab Duo Agent Platform now supports Claude Opus 4.7, Anthropic's latest model, available t…
Published on: April 16, 2026 7 min read GitLab 18.11: Budget guardrails for GitLab Credits Learn how new spending caps and per-user credit limits give organizations the budget guardrails to scale GitLab Duo Agent Platform. product AI/ML news Teams using GitLab Duo Agent Platform…
Published on: April 7, 2026 4 min read GitLab Duo CLI: Agentic AI for the development lifecycle, now in the terminal Developers who work outside the IDE and GitLab UI can access GitLab Duo Agent Platform in the terminal with built-in security controls and headless mode support.…
Published on: March 10, 2026 10 min read Automating detection gap analysis with GitLab Duo Agent Platform Learn how GitLab's Signals Engineering team uses our AI platform to automatically surface detection gaps from security incidents — no manual review required. security securi…
Published on: March 5, 2026 8 min read Extend GitLab Duo Agent Platform: Connect any tool with MCP Learn how to connect external tools to GitLab Duo Agent Platform using MCP. Step-by-step setup with three practical workflow demos. ai-ml product tutorial Managing software develop…
Published on: March 4, 2026 7 min read 10 AI prompts to speed your team’s software delivery Eliminate review backlogs, security delays, and coordination overhead with ready-to-use AI prompts covering every stage of the software lifecycle. AI/ML DevOps platform AI-assisted coding…
Published on: February 27, 2026 4 min read AI can detect vulnerabilities, but who governs risk? AI-assisted vulnerability detection is developing fast, but the harder challenges of enforcement, governance, and supply chain security require a holistic platform. AI/ML security Ant…
Published on: February 26, 2026 5 min read GitLab Duo Agent Platform with Claude accelerates development Learn how to leverage external AI models like Anthropic's Claude to automate everything from code generation to pipeline creation directly within GitLab. product AI/ML featur…
Published on: February 26, 2026 6 min read Secure and fast deployments to Google Agent Engine with GitLab Follow this step-by-step guide to build an AI agent with Google's Agent Development Kit and deploy to Agent Engine using GitLab. AI/ML google CI/CD DevSecOps In this tutoria…
Published on: February 24, 2026 5 min read Agentic SDLC: GitLab and TCS deliver Intelligent Orchestration across the enterprise Scale DevSecOps with AI agents that work alongside developers to automate workflows, enforce compliance, and accelerate delivery. AI/ML product GitLab…
GitLab 18.9 introduces critical updates designed to provide regulated enterprises with governed, agentic AI capabilities through self-hosted infrastructure and model flexibility. By combining the Duo Agent Platform with Bring Your Own Model (BYOM) support, organizations in sectors like finance and government can now automate complex DevSecOps workflows while maintaining total control over data residency. This release transforms GitLab into a high-security AI control plane that balances the need for advanced automation with the rigid sovereignty requirements of high-compliance environments.
## Self-Hosted Duo Agent Platform for Online Cloud Licenses
The Duo Agent Platform allows engineering teams to automate sequences of tasks, such as hardening CI/CD pipelines and triaging vulnerabilities, but was previously difficult to deploy for customers under strict online cloud licensing. This update makes the platform generally available for these environments, bridging the gap between cloud-based licensing and self-hosted security needs.
* **Usage-Based Billing:** The platform now utilizes GitLab Credits to provide transparent, per-request metering, which is essential for internal chargeback and regulatory reporting.
* **Infrastructure Control:** Enterprises can host models on their own internal infrastructure or within approved cloud environments, ensuring that inference traffic is routed according to internal security policies.
* **Deployment Readiness:** By removing the requirement to route data through external AI vendors, the platform is now a viable option for critical infrastructure and government agencies.
## Bring Your Own Model (BYOM) Integration
Recognizing that many enterprises have already invested in domain-tuned LLMs or air-gapped deployments, GitLab now allows customers to integrate their existing models directly into the Duo Agent Platform. This ensures that organizations are not locked into a specific vendor and can leverage models that have already passed internal risk assessments.
* **AI Gateway Connectivity:** Administrators can connect third-party or internal models via the GitLab AI Gateway, allowing these models to function as enterprise-ready options within the GitLab ecosystem.
* **Granular Model Mapping:** The system provides the ability to map specific models to individual Duo Agent Platform flows or features, giving admins fine-grained control over which agent uses which model.
* **Administrative Ownership:** While GitLab provides the orchestration layer, administrators retain full responsibility for model validation, performance tuning, and risk evaluation for the models they choose to bring.
For organizations operating in high-compliance sectors, these updates offer a path to consolidate fragmented AI tools into a single, governed platform. Engineering leaders should evaluate their current model investments and leverage the GitLab AI Gateway to unify their automation workflows under one secure DevSecOps umbrella.