AI-powered vulnerability triaging with GitLab Duo Security Agent
Jan 6, 2026Fernando Diaz

Summary
Introduces the GitLab Duo Security Analyst Agent, a foundational agent for automating vulnerability analysis and triaging. Details how to enable integrated security scanners (SAST, Dependency Scanning, Container Scanning, DAST, Secret Detection, IaC Scanning, API Security Testing, API Fuzzing) and use the Vulnerability Report. Explains the agent's capabilities in evaluating exploitability, reachability, risk prioritization, and recommending remediation steps. Outlines prerequisites (Ultimate subscription, Duo Agent Platform enabled, scanners configured) and how to access the agent via the AI Catalog.