No more typing reviews! Try our Samantha, our new voice AI agent.

GitLab vs Software Risk Manager ASPM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab
Ranking in Static Application Security Testing (SAST)
6th
Ranking in Software Composition Analysis (SCA)
6th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
93
Ranking in other categories
Application Security Tools (9th), Build Automation (3rd), Release Automation (2nd), Rapid Application Development Software (15th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
Software Risk Manager ASPM
Ranking in Static Application Security Testing (SAST)
30th
Ranking in Software Composition Analysis (SCA)
25th
Average Rating
0.0
Reviews Sentiment
7.0
Number of Reviews
1
Ranking in other categories
Application Security Posture Management (ASPM) (17th)
 

Mindshare comparison

As of November 2026, in the Static Application Security Testing (SAST) category, the mindshare of GitLab is 2.6%, up from 2.3% compared to the previous year. The mindshare of Software Risk Manager ASPM is 1.3%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
GitLab2.6%
Software Risk Manager ASPM1.3%
Other96.1%
Static Application Security Testing (SAST)
 

Featured Reviews

BasilJiji - PeerSpot reviewer
System engineer at a retailer with 10,001+ employees
Role-based workflows have transformed daily deployments and improve team collaboration
GitLab has role-based access control, so when a team member needs to make a code change, they cannot directly apply it to the environment but must put in a merge request. Once a senior reviews the code and approves it, then it is implemented across the environment, making it safer and allowing everyone to experience the process. The best features GitLab offers are version control and automation, which are the major things that stand out to me. When it comes to access, the login is very smooth, with just one login integrated with our Okta, allowing everyone to log in easily. Deployments become much easier, and that is how GitLab helps. The automation features make my work easier because we use a tool called AWX, which is connected to GitLab. Whenever we run a job on AWX, it directly checks the code and uses it. Since the code is not preserved locally but kept in the cloud, it is safe and nobody can tamper with it. When it comes to safety, that is a major thing. Automation features allow the code to be accessed from any tools we use, so the jobs we run are helping tremendously and doing their work perfectly. For pipeline tasks, we have created a significant amount of pipelines, which are all hosted in GitLab. Running the pipelines has become much easier, and they are doing a perfect job, helping tremendously in our day-to-day activities. GitLab has positively impacted my organization because previously we stored code locally on servers, leading to many risks. Since GitLab came into our environment, our integration and deployments became much easier, helping our work become much smoother. Improvements from GitLab have led to better team collaboration because when several people are working, they can all edit the code and submit it as a merge request, and once approved, it reflects directly to the main branch. Many can work at the same time. When it comes to deployments, deploying has become much faster since we started using GitLab, and even if errors occur, we can spot them easily and troubleshoot, which has helped tremendously.
Saravanan_Radhakrishnan - PeerSpot reviewer
Senior Manager at Happiest Minds Technologies
Facilitates continuous assessment of applications, covering both static and dynamic security aspects
Code Dx lacks one aspect, the dynamic security part, known as DAST. It's not an on-premise solution; it's in the cloud now. There are compliance standards and data standards where the customer might need to have the data on-premises for dynamic security testing. So that is one shortfall. An area of improvement could be developing an on-premise DAST solution. The current one is a complete cloud-based solution, and that can be one of the areas of improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of GitLab is the automatic merging of code."
"I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently."
"The best thing is that as the developers work on separate tasks, all of the code goes there and the other team members don't have to wait on each other to finish."
"We also found the straightforward setup, stability, and scalability of GitLab valuable."
"The stability is good."
"GitLab is used for pipeline development, automation, and deployment."
"Key features allow creation of well-presented Wiki that includes ideas, development, and domains."
"It is a speedy platform compared to the others I have used, and I have also enjoyed using the platform as this solution offers a good user experience."
"The customers were looking for something around static security and dynamic security, and in all those areas, they were looking for an industry leader with a proven solution. Synopsys is a Gartner leader, so I position this particular technology for the technical pre-sales part of it."
 

Cons

"It would be really good if they integrated more features in application security."
"Based on what I know so far, its integration with Kubernetes is not so good. We have to develop many things to make it work. We have to acquire third-party components to work with Kubernetes."
"There is room for improvement in GitLab Agents."
"The price of GitLab could improve, it is high."
"Currently, GitLab is not easy to scale because GitLab has specific deployment instructions. We deploy it on one of the VMs."
"The solution does not have many built-in functions or variables so scripting is required and that is a drawback."
"I believe there's room for improvement in the advanced features, particularly in enhancing the pipeline functionalities."
"<p>Regarding improvements, making task management is something that GitLab can potentially make easier, similar to what DevOps or Jira does.</p>"
"The initial setup is a bit challenging because things are not easy. It needs a lot of technology adaptability plus the customer's environment-specific use cases."
 

Pricing and Cost Advice

"The price is okay."
"The solution's pricing is acceptable."
"We are currently using the open-source version."
"The solution's standard license is paid annually. They have changed the pricing model and it used to be better. There is a free version available."
"This is an open-source solution."
"The solution is based on a licensing model that includes technical support and is paid annually."
"The initial setup cost is excellent and you can add the premium features later."
"Its price is fine. It is on the cheaper side and not expensive. You have to pay additionally for GitLab CI/CD minutes. Initially, we used the free version. When we ran out of GitLab minutes, we migrated to the paid version."
"It is more of an enterprise solution for budget-conscious customers. So, it's moderately priced. It's not for everybody."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
11%
Government
8%
Computer Software Company
8%
Manufacturing Company
15%
Comms Service Provider
13%
Financial Services Firm
12%
University
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business39
Midsize Enterprise10
Large Enterprise50
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for GitLab?
I was using the free version of GitLab , but I think the price is comparative and not a major differentiator.
What needs improvement with GitLab?
Since GitLab [Private Offer Only] the main part is the Git part. With AI being available, I see one thing happening. For example, Claude Code allows people to connect Jira or ClickUp, and then they...
What is your primary use case for GitLab?
My basic use case for Gitlab was the ticket management, the wiki, the CI/CD pipeline, and the code repository. These four use cases form my core usage.
Ask a question
Earn 20 points
 

Also Known As

Fuzzit
Code Dx
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Discover why companies like: CGI said, "Synopsys and Software Risk Manager have provided the results we’re looking for".
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: October 2026.
920,769 professionals have used our research since 2012.