GitLab Duo Security Review spots logic flaws scanners miss
Jul 16, 2026Mark Settle

Summary
Introduces Security Review Flow, a new AI-powered feature on the GitLab Duo Agent Platform designed to detect logic flaws in code changes that traditional scanners miss. It analyzes code diffs in context (original files, changed lines, MR discussion, related code) to identify vulnerabilities such as broken object-level authorization, information disclosure, mass assignment, business logic errors, and race conditions. Findings are presented as diff threads with severity, tier, explanation, and suggested fixes. The feature complements existing scanners and human review, operating at the point of change for cost-effective fixes. It is available in public beta for GitLab Ultimate customers.