Oxeye
2024
Why
GitLab acquired Oxeye, an Israeli cloud-native application security startup, in March 2024 to improve its static application security testing (SAST) with reachability analysis that helps prioritize exploitable vulnerabilities.
GitLab Inc.
DevOps and Software Development Lifecycle PlatformsFounded 2011- HQ today: San Francisco, California
Reviewed by Swet Parvadiya
Company data updated: October 2026
Acquisitions
GitLab Acquisitions
6
Major Deals Covered
What are GitLab's biggest acquisitions?
This page covers 6 major deals from 2015 to 2024, each with its price where disclosed and the reason behind it.
- Major deals covered
- 6
- First deal
- 2015
- Most recent
- 2024
| Company | Year | Price | Purpose |
|---|---|---|---|
| Oxeye | 2024 | Undisclosed | GitLab acquired Oxeye, an Israeli cloud-native application security startup, in March 2024 to improve its static application security testing (SAST) with reachability analysis that helps prioritize exploitable vulnerabilities. |
| Opstrace | 2021 | Undisclosed | GitLab acquired Opstrace, an open-source observability project, in late 2021 to add monitoring and observability capabilities to its platform. |
| Gitorious | 2015 | Undisclosed | GitLab acquired rival Git hosting service Gitorious in 2015 and offered its users a migration path to GitLab. |
| Gemnasium | 2018 | Undisclosed | GitLab acquired Gemnasium in 2018 to add dependency scanning for known vulnerabilities in open-source libraries. |
| Peach Tech and Fuzzit | 2020 | Undisclosed | GitLab acquired fuzz-testing companies Peach Tech and Fuzzit in 2020 to add API and coverage-guided fuzz testing to GitLab Ultimate. |
| UnReview | 2021 | Undisclosed | GitLab acquired UnReview in 2021 to use machine learning to recommend code reviewers for merge requests. |
- What companies has GitLab bought?
- Major acquisitions by GitLab documented here include Oxeye (2024), Opstrace (2021), UnReview (2021), Peach Tech and Fuzzit (2020) and Gemnasium (2018).
- What is GitLab's most recent acquisition?
- The most recent GitLab acquisition documented here is Oxeye, in 2024.
Opstrace
2021
Why
GitLab acquired Opstrace, an open-source observability project, in late 2021 to add monitoring and observability capabilities to its platform.
UnReview
2021
Why
GitLab acquired UnReview in 2021 to use machine learning to recommend code reviewers for merge requests.
Peach Tech and Fuzzit
2020
Why
GitLab acquired fuzz-testing companies Peach Tech and Fuzzit in 2020 to add API and coverage-guided fuzz testing to GitLab Ultimate.
Gemnasium
2018
Why
GitLab acquired Gemnasium in 2018 to add dependency scanning for known vulnerabilities in open-source libraries.
Gitorious
2015
Why
GitLab acquired rival Git hosting service Gitorious in 2015 and offered its users a migration path to GitLab.
GitLab Inc.'s Growth & Acquisition Strategy
GitLab's growth strategy is to move existing customers from Premium to Ultimate, sell AI usage on top of seats, and win platform consolidation deals in large enterprises and the public sector. In 2025-2026 it shipped the Duo Agent Platform, GitLab Credits, GitLab Flex, GitLab Secrets Manager (a usage-based add-on) and the Orbit context graph. It also sells through Google Cloud and AWS marketplaces so customers can apply committed cloud spend to GitLab subscriptions.
How GitLab Inc. Makes Money
GitLab makes money mainly by selling per-seat subscriptions to its Premium and Ultimate tiers, delivered either as SaaS on GitLab.com, as single-tenant GitLab Dedicated, or as self-managed software installed on a customer's own servers. The core Community Edition is open source and the Free tier drives bottom-up adoption; paying customers upgrade for enterprise controls, security testing (SAST, DAST, dependency and container scanning), compliance and planning features that sit mostly in Ultimate. AI capabilities are sold through GitLab Duo add-ons, GitLab Credits and the Duo Agent Platform, and in Q2 FY2027 the company introduced GitLab Flex, a single annual commitment covering seats, credits and new usage-based capabilities. Revenue is recognized ratably for most subscriptions, which made $1.14 billion of remaining performance obligations available at January 31, 2026.
GitLab Acquisitions FAQ
What are the most notable technology acquisitions completed by GitLab?
GitLab's acquisitions include Gitorious (2015), Gemnasium (2018), Peach Tech and Fuzzit (2020), UnReview and Opstrace (2021) and Oxeye (2024).
Why was the 2015 acquisition of Gitorious significant for GitLab's community growth?
Acquiring Gitorious (a major open-source Git hosting competitor) allowed GitLab to migrate tens of thousands of developer projects and users onto GitLab.com, consolidating the open-source Git hosting ecosystem and providing an immediate boost to community adoption.
How did the acquisition of Gemnasium in 2018 enhance GitLab's security testing capabilities?
Acquiring Gemnasium brought advanced software composition analysis (SCA) and automated dependency vulnerability databases into GitLab, enabling the platform to automatically alert developers to known CVE security vulnerabilities in third-party software libraries.
What was the strategic objective of acquiring Peach Tech and Fuzzit in 2020?
GitLab acquired Peach Tech and Fuzzit to integrate advanced automated fuzz testing (API and coverage-guided fuzzing) natively into GitLab Ultimate, allowing developers to detect software crashes, memory leaks, and zero-day vulnerabilities early in the CI/CD pipeline.
How did the acquisition of UnReview in 2021 advance GitLab's AI and machine learning roadmap?
GitLab acquired UnReview to integrate machine-learning algorithms that analyze developer expertise, repository history, and reviewer workload to automatically assign the most qualified code reviewers to pull requests, reducing review latency.
What is GitLab's M&A philosophy regarding team and technology integration?
GitLab prioritizes 'acqui-hires' and tuck-in technology acquisitions where incoming engineering teams smoothly integrate their software directly into GitLab's single codebase rather than maintaining disconnected standalone applications.
How does GitLab integrate acquired security capabilities into its tiered pricing structure?
Acquired technologies, such as fuzz testing, dependency scanning, and compliance tracking, are packaged into GitLab Ultimate, reinforcing the premium tier's value proposition for enterprise CISOs and driving multi-year ARR upgrades.
How does GitLab evaluate potential future acquisition targets in AI and observability?
GitLab evaluates acquisition targets based on native code compatibility (Ruby on Rails, Go, Vue.js), strong engineering talent, AI model integration potential, and the ability to enhance developer velocity across its single-platform architecture.
What companies has GitLab acquired?
To aggressively fulfill their vision of replacing every other DevOps tool, they buy specialized startups and immediately fold the tech directly into the GitLab app. In 2020, they executed highly strategic acquisitions of Peach Tech and Fuzzit to instantly add massive "fuzz testing" security capabilities to their enterprise tier.
Related M&A Histories
Compare corporate acquisition records, deal values, and strategic targets
Explore GitLab
Core profile pages, founders and related research hubs for this company.