No more typing reviews! Try our Samantha, our new voice AI agent.

GitLab vs Ox Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab
Ranking in Static Application Security Testing (SAST)
6th
Ranking in Software Composition Analysis (SCA)
6th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
93
Ranking in other categories
Application Security Tools (9th), Build Automation (3rd), Release Automation (2nd), Rapid Application Development Software (15th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
Ox Security
Ranking in Static Application Security Testing (SAST)
21st
Ranking in Software Composition Analysis (SCA)
11th
Average Rating
9.0
Reviews Sentiment
7.8
Number of Reviews
3
Ranking in other categories
Software Supply Chain Security (8th), Application Security Posture Management (ASPM) (7th)
 

Mindshare comparison

As of November 2026, in the Static Application Security Testing (SAST) category, the mindshare of GitLab is 2.6%, up from 2.3% compared to the previous year. The mindshare of Ox Security is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
GitLab2.6%
Ox Security1.2%
Other96.2%
Static Application Security Testing (SAST)
 

Featured Reviews

BasilJiji - PeerSpot reviewer
System engineer at a retailer with 10,001+ employees
Role-based workflows have transformed daily deployments and improve team collaboration
GitLab has role-based access control, so when a team member needs to make a code change, they cannot directly apply it to the environment but must put in a merge request. Once a senior reviews the code and approves it, then it is implemented across the environment, making it safer and allowing everyone to experience the process. The best features GitLab offers are version control and automation, which are the major things that stand out to me. When it comes to access, the login is very smooth, with just one login integrated with our Okta, allowing everyone to log in easily. Deployments become much easier, and that is how GitLab helps. The automation features make my work easier because we use a tool called AWX, which is connected to GitLab. Whenever we run a job on AWX, it directly checks the code and uses it. Since the code is not preserved locally but kept in the cloud, it is safe and nobody can tamper with it. When it comes to safety, that is a major thing. Automation features allow the code to be accessed from any tools we use, so the jobs we run are helping tremendously and doing their work perfectly. For pipeline tasks, we have created a significant amount of pipelines, which are all hosted in GitLab. Running the pipelines has become much easier, and they are doing a perfect job, helping tremendously in our day-to-day activities. GitLab has positively impacted my organization because previously we stored code locally on servers, leading to many risks. Since GitLab came into our environment, our integration and deployments became much easier, helping our work become much smoother. Improvements from GitLab have led to better team collaboration because when several people are working, they can all edit the code and submit it as a merge request, and once approved, it reflects directly to the main branch. Many can work at the same time. When it comes to deployments, deploying has become much faster since we started using GitLab, and even if errors occur, we can spot them easily and troubleshoot, which has helped tremendously.
Ravishankar Prakash - PeerSpot reviewer
Cloud & Devsecops Lead Engineer at Aon Corporation
Integrated workflows have transformed security reviews and provide end-to-end risk visibility
The best features that Ox Security offers include real-time visibility and actionable intelligence. Also, I love the intuitive interface and seamless integrations. Regarding the features of Ox Security, I love the pipeline functionality, which allows the creation of customized workflows based on scan results, making prevention and notification processes highly adaptable. I also love the visibility it provides, which is end-to-end security visibility covering the entire development lifecycle from code writing and storage to security testing, deployment, and infrastructure management. I also love its powerful pipeline system, which enables us to automate notifications to relevant teams based on issue origin and type while also enforcing security policies by blocking new code when prohibited issue types are detected. The intuitive interface makes it easy to pinpoint vulnerabilities early, prioritize critical issues, and streamline remediation processes. The seamless integration with existing DevOps tools ensures that security insights flow naturally into development workflows without creating bottlenecks. I also love the real-time visibility and actionable intelligence. It fosters a security-first mindset, boosting both the confidence of my development team and the overall resilience of our applications. Regarding Ox Security's AI capabilities, I find its governance and security capabilities to be very strong, particularly in helping us identify risks and maintaining visibility across the software development process. I also value the focus on data protection, access control, and responsible use of AI. The AI capabilities are generally accurate and reliable, especially in helping us identify vulnerabilities and highlighting potential risks very easily. They help us reduce manual effort and speed up security reviews.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"GitLab has helped our company save time."
"GitLab's best features are continuous integration and fast deployment."
"Key features allow creation of well-presented Wiki that includes ideas, development, and domains."
"Overall, it's a great product and it does a good job."
"It's a great toolbox where the CI/CD pipeline is the fundamental component, but there are so many other features that you can pull from, which makes it a very powerful tool. My current client is using AWS, and they can, of course, use AWS CodePipeline, but GitLab is much more mature than that, and it also gives you the freedom to decide to go to another platform or have a multi-cloud strategy and things like that. That freedom for me is also very valuable."
"It is very flexible and easy because you can store data on cloud."
"The solution's most valuable feature is that it is compatible with GitHub. The product's integration capabilities are sufficient for our small company of 35 people."
"The most valuable features of Gitlab are integration with CIE and the ability to rapidly deploy solutions, projects, and applications. It is very easy to use, and there are no complaints."
"As a service provider, I believe the biggest advantage of Ox Security is its simplicity and the clarity of the issues, along with a very good dashboard showing the state of the company."
"The seamless integration with existing DevOps tools ensures that security insights flow naturally into development workflows without creating bottlenecks."
"Ox Security has positively impacted my organization by helping to reduce the amount of noise we received from vulnerabilities because of the prioritization scoring it has and all of the context it provides."
 

Cons

"The self-hosted version of GitLab is not very stable when under load. It slows down and requires restarts every few days."
"As GitLab is not perfect, what needs improvement in the solution is the Wiki feature of the groups or the repertories because currently, it's not searchable by default."
"GitLab would be improved with the addition of templates for deployment on local PCs."
"GitLab should enhance its GitOps capability as they are currently using FluxCD, however, Argo CD is better and offers more features. GitLab should work on improving their user interface for GitOps as it is lagging behind."
"It would be better if there weren't any outages. There are occasions where we usually see a lot of outages using GitLab. It happens at least once a week or something like that. Whatever pipelines you're running, to check the logs, you need to have a different set of tools like Argus or something like that. If you have pipelines running on GitLab, you need a separate service deployed to view the logs, which is kind of a pain. If the logs can be used conveniently on GitLab, that would be definitely helpful. I'm not talking about the CI/CD pipelines but the back-end services and microservices deployed over GitLab. To view the logs for those microservices, you need to have separate log viewers, which is kind of a pain."
"I would like more Agile features in the Premium version. The Premium version should have all Agile features that exist in the Ultimate version. IBM AOM has a complete Agile implementation, but in GitLab, you only have these features if you buy the Ultimate version. It would be good if we can use these in the Premium version."
"Technologies are always changing. Nowadays, new things like serverless computing and workload management have emerged. We have noticed a few gap items for faster service delivery. For example, we do user interface testing in the latest team and automate it using some tools. Recently, we integrated a tool with user interface testing, which can simulate a multi-user environment. So, we would like to see more integration with different platforms."
"The only feature I have used in GitLab that I thought could be improved is their code generation feature."
"The main pain point I have with Ox Security as a tool is the user interface, which can feel quite complex when navigating large datasets."
"My overall review rating for Ox Security is zero."
"One area that Ox Security could improve is the dashboard customization and reporting."
 

Pricing and Cost Advice

"The open-source version is very good and the commercial version is reasonably priced."
"I'm not aware of the licensing costs because those were covered by the customer."
"GitLab is an open-source solution."
"We are using the open-source version."
"GitLab's pricing is good compared to others on the market."
"The solution's standard license is paid annually. They have changed the pricing model and it used to be better. There is a free version available."
"The solution is based on a subscription model and is reasonably priced."
"In total, I believe we have more than 300 licenses spread over about 100 users, though I can't comment on the costs involved."
Information not available
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
920,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
11%
Government
8%
Computer Software Company
8%
Financial Services Firm
16%
Manufacturing Company
13%
Educational Organization
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business39
Midsize Enterprise10
Large Enterprise50
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for GitLab?
I was using the free version of GitLab , but I think the price is comparative and not a major differentiator.
What needs improvement with GitLab?
Since GitLab [Private Offer Only] the main part is the Git part. With AI being available, I see one thing happening. For example, Claude Code allows people to connect Jira or ClickUp, and then they...
What is your primary use case for GitLab?
My basic use case for Gitlab was the ticket management, the wiki, the CI/CD pipeline, and the code repository. These four use cases form my core usage.
What needs improvement with Ox Security?
I'm not sure about flexibility because I didn't try it, so I can't comment on that, but as far as I understand, most of Ox Security is not personalized. I think that most of the tool is quite deter...
What is your primary use case for Ox Security?
I worked with Ox Security as a service provider, not as a representative, but as a user. I use it in my employee capacity, providing services to companies in Israel, and one of them is an insurance...
What advice do you have for others considering Ox Security?
Regarding threat detection capability, I think that Ox Security is not used for that matter. The CISO mainly focuses on dev sec ops rather than runtime security or real-time security. I figure that...
 

Comparisons

 

Also Known As

Fuzzit
No data available
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Information Not Available
Find out what your peers are saying about GitLab vs. Ox Security and other solutions. Updated: October 2026.
920,574 professionals have used our research since 2012.