GitLab 18.10 brings AI-native triage and remediation

GitLab 18.10 introduces AI-powered security features aimed at enhancing the efficiency and accuracy of vulnerability management by reducing false positives and automating remediation. The update includes generally available Static Application Security Testing (SAST) false positive detection, which uses a large language model (LLM) to evaluate the likelihood of vulnerabilities being false positives, enabling teams to prioritize critical real threats. The beta release of Agentic SAST vulnerability resolution automatically generates merge requests with proposed fixes for verified vulnerabilities, reducing the need for deep security expertise. Additionally, secret false positive detection, also in beta, applies AI to differentiate between real and dummy secrets, helping teams focus on genuine risks. These new capabilities, available to GitLab Ultimate customers using the GitLab Duo Agent Platform, promise to streamline the remediation process by providing confidence scores, AI-generated explanations, and visual indicators in the Vulnerability Report, while still allowing developers to maintain control and audit the agent's reasoning.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.