GitLab
GitLab logoGitLab · Feature trail

AI-Assisted Features

89 posts · Sep 2018 – Sep 2026

What this trail covers

GitLab Duo Agent Platform is an evolution of Duo Pro/Enterprise, moving from 1:1 developer-AI interactions to many-to-many team-agent collaboration. It embeds multiple intelligent assistants throughout the software development lifecycle, acting as an orchestration layer for asynchronous AI agent collaboration across DevSecOps. Key components include Duo Agentic Chat, Duo CLI, Agents (foundational, custom, external), Flows (multi-step workflows), AI Catalog, AI menu, and Model Context Protocol (MCP). This iteration focuses on integrating third-party models like Claude Code, providing a governed workflow for AI-generated code, and enabling network-restricted deployments for government agencies. The platform emphasizes model-agnosticism, allowing agencies to swap models without rebuilding workflows, and offers self-hosted options for data residency and air-gapped environments. It addresses the challenge of integrating AI-generated code into existing review and testing processes by providing a unified system of record and a governed merge request gate.

All GitLab trails
  1. Why enterprise independence matters more than ever in DevSecOpsThis post emphasizes the importance of enterprise independence and transparency in DevSecOps, particularly with the increasing integration of AI agents. It highlights GitLab Duo Agent Platform's role in providing visibility into agent decision-making, supporting multiple LLMs for vendor independence, and offering enhanced governance controls. Key aspects include the AI Transparency Center for clear data governance, privacy protections, and ethical AI principles, ensuring customer data is not used for training. It also details AI continuity plans for evaluating and switching models within 30 days if provider practices change. The post reiterates GitLab's deployment flexibility (on-premises, SaaS, Dedicated) and cloud neutrality, crucial for regulatory compliance and procurement leverage. Built-in security and compliance features like custom compliance frameworks, DAST, API fuzz testing, and coverage-guided fuzzing are contrasted with fragmented solutions. The commitment to open source and community engagement through the Co-Create program and open issue tracker is also mentioned. Data governance is reinforced with complete control over data processing, encryption standards, and audit capabilities, ensuring customer code is never used for AI model training. The overarching message is the choice between retaining control and vendor lock-in, transparency and uncertainty, and dedication to innovation versus ecosystem whims.