Business Software for GitLab

We are revolutionizing API & MCP management for everyone, from startups to enterprises. - Add authentication, analytics, and developer documentation in minutes with our gitops powered deployment flow - Move Fast: Add protection to your API quickly with built-in policies for API key authentication, OAuth, rate-limiting, and more - Programmable: Zuplo is fully extensible; you can write code for your routing and custom policies directly at the gateway - Global Deployment: Zuplo is built on the edge, and is deployed in 300+ data centers around the world with one git push. This makes multi-cloud deployments a first-class experience. Zuplo allows you to run different workloads on different clouds, while maintaining a uniform set of API policies. - OpenAPI-native: Zuplo is the only gateway that runs OpenAPI directly. Use the OpenAPI ecosystem for your API and deploy it directly to Zuplo. - Developer Portal: Zuplo generates beautiful documentation for your API. You can customize your docs using markdown, and developers can self-serve their API Keys right from your docs. - MCP: You can directly generate hosted MCP servers from your OpenAPI and build custom MCP tools directly into Zuplo. We'll take care of the hosting and security. - Monetization: Turn your services into API products. Zuplo allows you to build a self-service monetization flow for Usage-based or Subscription billing.

ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives. Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities. Our comprehensive security suite covers the application security lifecycle: 1. AI-powered SAST 2. Software Composition Analysis with reachability analysis 3. Secrets detection and validation 4. Infrastructure as Code scanning 5. Automated PR reviews 6. Automated patch generation and more... ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more. Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce. Trusted by 750+ companies and performing 200k+ code scans monthly.

Updraft App Distribution is an online platform that allows for continuous mobile app testing and distribution. Distribute your iOS beta, Android Beta or Windows apps easily to your product managers or testers within your organization to get feedback as soon as possible on your app. To get the best quality, remove bugs and improve your app. Resign your.ipa package with new distribution profiles and provisioning certificates, resign the.aab, connect your App Store, or Play Store. Continuous app distribution and bug report has never been easier. CURL or API can be used to integrate Updraft into your development workflow. You can use Updraft to create an Enterprise app store.

Favro helps organizations transform into agile businesses by empowering all types of teams to work independently and helping leaders align all work towards company goals. Favro teams in marketing and product development, as well as their leaders and executive managers, have one place for planning, documentation and collaboration.

Kualitee, a test management tool, is a complete ALM alternative to agile QA and Dev teams. It allows you to plan, write, execute, and track software tests in a collaborative environment. The tool allows for easy reuse of test cases from repository and tracks testing activities with complete traceability. Teams can manage multiple types of testing from one location, including functional, cross-browser, and automation. Kualitee has many popular features, including a built-in defect management module and on-premise and cloud versions, requirement management, as well as a mobile app. Kualitee can be integrated with many other tools, such as Jira and GitLab.

Craft enhances the entire creative workflow, providing users with an intuitive interface and a fully customizable backend that is designed for effortless interaction. When necessary, users can access various support plans and service level agreements, along with a vibrant community to help them. Seamlessly integrate Craft with marketing platforms such as Salesforce, Mailchimp, HubSpot, and many others. You can easily translate and localize your content for a limitless number of websites, languages, and regions. Craft’s control panel supports 25 languages and accommodates hundreds of locales. By offering a user-friendly authoring experience, Craft allows authors to concentrate on their core strengths. It serves as the backbone for design portfolios, global marketing sites, and everything in between. With Craft’s robust Plugin Store and versatile plugin framework, the possibilities for creation are endless. Engage with a vast network of agencies and thousands of developers worldwide, expanding your collaborative potential. Ultimately, Craft stands out as a comprehensive solution for all your creative needs.

Standuply, your virtual Agile Development Assistant for Slack or Microsoft Teams, facilitates standup meetings and retrospectives as well as 20+ Agile and HR processes for remote teams. Standuply bot can run scrum events on a scheduled basis or asynchronously. It connects your standups to comprehensive integrations (Atlassian Jira and Trello, for example). Keeps agile charts statistics on tasks, checks answers analytics & insights, and many other things. It is simple to get started - no credit card information is required. Get a 30-day free trial of Standuply in Slack and Microsoft Teams. It includes all features, a product demo, and 24/7 customer support.

BugReplay serves as a temporal tool for addressing bugs. This browser extension generates a high-resolution video recording of user interactions while synchronizing it with developer console outputs, network activity, and all necessary environmental data to efficiently identify and resolve issues. It is compatible with various browsers, including Chrome, Firefox, Safari, Edge, and Opera, and additionally offers a mobile application for iOS devices. With its comprehensive features, BugReplay streamlines the debugging process for developers.

Forecast is a comprehensive project and resource management tool that can be expanded to include a wide range of great features. It combines project management, resource planning and team collaboration under one roof. This allows you to use the power of AI for automating administrative tasks. It is a strong alternative to point-based project management solutions in professional service companies. Ideal for companies with 50+ employees who need the entire project portfolio and resource overview in one software. * Project proposals that are more predictable and precise * Improved planning and analysis with Insights and Reporting * AI supports stronger business decisions * Flexible resource management through Task and Project Allocations * Time and Task Management that is efficient * Get actionable insights into project profitability with cost, revenue, and profit updates in real-time

The issue tracker is designed for agile software teams. Project management tool that can be customized to your business processes to help you deliver great products. YouTrack can be used to track tasks and bugs, plan sprints or releases, create workflows and customise it for your business processes. Do not force your process to conform to the limitations of a tool. YouTrack is customizable, unlike other issue trackers. YouTrack allows you to create an Agile Board for any process that you can think of. The Agile boards can be used to support your Scrum, Kanban, or mixed processes. Create boards that include multiple projects and add swimlanes based upon user stories, epics, deadlines or other fields. You can see the changes made to the board and backlog in real-time. The flexible backlog allows you to plan the future of your project development. You can create user stories, feature requests, and tasks. Do not switch tabs. Open the backlog directly from the board. Edit it, and move issues to sprint.

Sentry is a comprehensive application monitoring solution that empowers development teams to maintain reliable, high-performing software throughout the development lifecycle. The platform automatically captures errors, performance bottlenecks, logs, traces, user session data, and infrastructure insights, providing complete context for troubleshooting and optimization. With built-in AI capabilities such as Seer, Sentry helps engineers understand why failures occur, generate code fixes, and identify potential issues during code review. Integrations with popular development tools including GitHub, Slack, Jira, and Linear ensure that teams can monitor, investigate, and resolve issues without disrupting existing workflows.

The interactive Gantt chart allows you to visually assess an individual's availability for new tasks in a straightforward manner. You can monitor the time allocated to various tasks, projects, and client deliveries efficiently. Leverage our AI-driven widgets, or create custom tools tailored to your needs. Embrace the power of Time Intelligence to streamline your processes. Our platform consolidates all communications, decision-making, and documentation into a cost-effective solution, providing you with a reliable single source of truth. Templates for projects and tasks promote consistency and help maintain progress according to schedule. Furthermore, our AI proactively alerts you to potential delays, facilitating timely decision-making. Designed for ease of use and high employee engagement, the system eliminates the need for intricate training, making it accessible for everyone involved. This approach not only increases efficiency but also enhances collaboration among team members.

Domino is a comprehensive enterprise AI platform that enables organizations to transform AI initiatives into scalable, production-ready systems. It supports the full AI lifecycle, including data access, model development, deployment, and ongoing management. The platform provides a self-service environment where data scientists can access tools, datasets, and compute resources with built-in governance and security controls. Domino allows teams to build machine learning models, generative AI applications, and intelligent agents using their preferred development environments. It also includes advanced orchestration capabilities to manage workloads across hybrid, multi-cloud, and on-premises infrastructures. Governance features such as model registries, audit trails, and policy enforcement ensure compliance and reproducibility. The platform enhances collaboration by providing a centralized system of record for all AI assets and experiments. Additionally, it helps organizations optimize costs through resource management and usage tracking. Domino is designed to meet enterprise standards for security and regulatory compliance. Ultimately, it empowers businesses to accelerate AI innovation while maintaining operational control and accountability.

Chat for distributed teams. Zulip combines real-time chat and email threading to provide instant messaging. Zulip allows you to keep up with important conversations and ignore the rest. Zulip is powered by Electron, React Native and has modern apps for every platform. Zulip is 100% open-source software, developed by hundreds of developers from around the globe. Zulip has 120,000 words worth of documentation, a high-quality code base, and a friendly community that makes it easy to modify or extend the software. Zulip has a much larger and more active developer community than modern open-source group chat solutions like Mattermost and Rocket.Chat. Zulip supports more than 90 native integrations. Hubot, Zapier, IFTTT and IFTTT offer hundreds more integrations. You can also create your own integrations using Zulip's powerful API.

Flagship.io is an online platform for feature flagging that allows modern engineers and product teams to eliminate the risk of future releases. It separates code deployments from these releases, which reduces the risk of future releases. Flagship allows you to accelerate development cycles and ship anywhere, anytime, even Friday nights. Flagship takes the concept of feature flags to a new level, giving you complete control over the release process. Flagship allows you to: Remote Configuration: Switch between active and inactive features. - Code deployments can be separated from future releases. This allows engineering teams to deploy code at their own pace and product teams to release these features when it's ready. - Automatically roll out your features gradually to monitor performance and gather feedback from your most important users. - Revert any feature that causes problems while being tested in production, while your team investigates the issue. Segment users by granting them access to a feature

Nucleus is revolutionizing the landscape of vulnerability management software by serving as the definitive source for all asset information, vulnerabilities, and relevant data. We enable you to harness the untapped potential of your current tools, guiding you towards enhanced program maturity through the integration of individuals, processes, and technology in vulnerability management. By utilizing Nucleus, you gain unparalleled insight into your program, along with a collection of tools whose capabilities cannot be replicated elsewhere. This platform acts as the sole shift-left solution that merges development with security operations, allowing you to fully exploit the value that your existing tools fail to provide. With Nucleus, you will experience exceptional integration within your pipeline, efficient tracking, prioritized triage, streamlined automation, and comprehensive reporting features, all delivered through a uniquely functional suite of tools. Ultimately, adopting Nucleus not only enhances your operational efficiency but also significantly strengthens your organization's approach to managing vulnerabilities and code weaknesses.

Xygeni delivers a comprehensive Application Security Posture Management (ASPM) platform that secures software from code to cloud. Designed for enterprise security and DevSecOps teams, it provides full-stack protection across codebases, pipelines, and production environments—all from a single dashboard. Xygeni continuously monitors every layer of the SDLC, including source code, open-source dependencies, secrets, builds, IaC, containers, and CI/CD systems, detecting threats such as vulnerabilities, misconfigurations, and embedded malware in real time. Its AI-driven engine reduces alert fatigue by prioritizing exploitable risks and automating remediation through AI SAST, Auto-Fix, and the intelligent Xygeni Bot. Developers can fix issues instantly within their IDE, ensuring security is embedded from the first line of code. Advanced malware early warning blocks zero-day supply-chain attacks at publication, while smart dependency analysis prevents risky or breaking updates before deployment. With seamless integrations into leading DevOps tools, Xygeni empowers teams to secure modern applications at scale. The result: continuous protection, smarter automation, and faster, safer software delivery.

Implement a sophisticated front-end design system tailored for developers that integrates seamlessly with any workflow. This system fosters effortless collaboration between designers and developers, making the process of launching storefront user interfaces, static websites, or various digital products more efficient than ever before. Our comprehensive front-end design platform enables teams to craft, collaborate, and deploy production-ready code swiftly. With the ability to design, build, and code websites in real time, teams can create stores, design systems, and applications using robust visual building and development tools. Furthermore, specific reusable UI components can be generated for access by any developer on the team, allowing for a consistent component library to be utilized across multiple projects. This approach empowers marketing teams to concentrate on content creation, facilitating rapid adjustments to any design or text while ensuring that all team members remain aligned and informed throughout the process. Ultimately, this fosters a more productive and agile development environment.

Create intricate automations at lightning speed, eliminating the hassle of dealing with APIs. The tedious hours spent navigating through a tangled web of scripts are now behind you. Utilize JavaScript for enhanced flexibility while relying on the intuitive UI for everything else. n8n empowers you to establish adaptable workflows that prioritize comprehensive data integration. Additionally, with shareable templates and an easy-to-navigate interface, team members with less technical expertise can also contribute and collaborate effectively. Unlike many other tools, complexity won’t hinder your creativity, allowing you to construct anything your imagination conjures—without worrying about expenses. Effortlessly connect APIs using no-code solutions for simple task automation, or delve into vanilla JavaScript for sophisticated data manipulation. You can set up multiple triggers, branch out, merge workflows, and even pause processes to await external events. Seamlessly interact with any API or service through custom HTTP requests, and safeguard live workflows by maintaining distinct development and production environments with separate authentication credentials. Embrace the freedom to innovate without limits.

Enhance the speed and efficiency of software development and delivery by leveraging generative AI support, all while ensuring robust enterprise security and privacy safeguards. Gemini Code Assist streamlines your coding process by completing your code as you type and can generate entire code blocks or functions upon request. This powerful code assistance tool is compatible with a variety of popular integrated development environments (IDEs) like Visual Studio Code and JetBrains IDEs (including IntelliJ, PyCharm, GoLand, and WebStorm), as well as Cloud Workstations and Cloud Shell Editor, supporting over 20 programming languages such as Java, JavaScript, Python, C, C++, Go, PHP, and SQL. Utilizing a natural language chat interface, you can easily interact with Gemini Code Assist to obtain solutions to your coding queries or gain insights into coding best practices, with chat functionality accessible across all supported IDEs. Organizations have the flexibility to tailor Gemini Code Assist by integrating their private codebases and knowledge repositories, enabling the tool to provide more personalized assistance that aligns with specific enterprise needs. Furthermore, Gemini Code Assist has the capability to facilitate extensive modifications across entire codebases, thereby optimizing the development workflow significantly. This adaptability not only boosts productivity but also empowers teams to innovate more rapidly in a secure environment.

Amazon Q Developer is an advanced AI assistant built for professional developers, combining coding intelligence with deep AWS expertise. It’s designed to handle every stage of development—from writing and refactoring code to performing upgrades and automating documentation. Integrated with major IDEs and the AWS Management Console, it empowers developers to code faster and operate smarter using secure, context-aware assistance. Its agentic automation can autonomously implement features, test applications, and perform large-scale migrations like .NET to Linux or Java 8 to Java 17 in minutes. Developers can chat directly with Amazon Q inside Slack, Microsoft Teams, GitHub, and GitLab, where it provides architectural recommendations and incident resolution guidance. The tool also supports CLI autocompletions and AWS resource management to streamline workflows from the terminal to the cloud. Offering enterprise-grade access controls and IAM integration, it ensures that organizational data and permissions remain protected. Available on the AWS Free Tier, Amazon Q Developer enables up to 50 monthly AI interactions and 1,000 lines of code transformation at no cost, helping teams start building smarter right away.

Bruno is a developer-first, open-source API client that’s redefining what an API tool should be. Built from the ground up for speed, privacy, and simplicity, Bruno offers everything developers need to explore, test, and document APIs without the cloud lock-in, telemetry, or bloat that’s become standard elsewhere. Instead of chasing “platform” status, Bruno focuses on doing one thing exceptionally well: being a pure API client. It’s completely local... all your requests, environments, and collections stay on your machine. Nothing is uploaded or tracked. The result is a faster, safer, and more transparent workflow that developers actually enjoy using. Bruno is also Git-native, meaning collections live in plain text and can be versioned, diffed, and reviewed just like code. Branching, merging, and pull requests all just work — no proprietary formats or walled gardens. For teams that already use GitHub, GitLab, or Bitbucket, Bruno slots right in with zero friction. Under the hood, Bruno supports Postman and Swagger imports, test scripting in JavaScript, a powerful CLI, VS Code extension, and CI/CD integration for automated API testing. Since its launch in 2022, Bruno has seen explosive community growth: over 2.5 million downloads, 150,000+ daily users, and 37,000+ GitHub stars. Trusted by engineers at Microsoft, Capital One, GitHub, and FedEx, Bruno is proving that developer tools don’t need a cloud backend to scale , they just need to respect how developers actually work. In short: Bruno is what the API client should have been all along ... local, fast, Git-based, and open-source.

Workik's AI code generator is a multifaceted solution that simplifies the software development process by automating tasks such as code generation, debugging, testing, and migration across a range of programming languages and frameworks. It boasts functionalities like rapid code generation, customizable context integration with APIs, libraries, codebases, and database schemas, as well as support for cross-language coding and smooth compatibility with leading EHR systems. Designed with productivity enhancement in mind, Workik seamlessly fits into current workflows, aiming for minimal disruption during implementation. Furthermore, Workik adheres to HIPAA regulations, ensuring that patient information is protected with top-tier security protocols. Users have the ability to pre-define the AI engine's context and behavior, tailoring its responses to align with their unique programming style, database design, and specific project requirements. Additionally, the context-setting capability enables developers to incorporate their existing codebase context, allowing them to continue development without losing momentum. This innovative approach not only increases efficiency but also fosters a more cohesive development environment.

ThinkReview is an innovative code-review solution powered by AI, designed specifically for developers utilizing GitLab and Azure DevOps, providing immediate assessments of merge requests and pull requests directly within the web interface. It eliminates the need for intricate setup or configuration by automatically recognizing when a MR/PR is being viewed, retrieving the relevant code changes, and presenting an AI-generated review panel that features concise summaries, security alerts, quality recommendations, and automatically generated comments. Users can interact in a conversational manner with the code modifications, pose inquiries, regenerate review insights, and get insightful follow-up questions to facilitate deeper discussions. It accommodates both self-hosted and cloud-based environments, operates seamlessly out of the box, and comes as a browser extension with functionalities like automatic MR/PR detection, intelligent summaries, comment creation, and support for multiple languages. Prioritizing efficiency and user-friendliness, ThinkReview aims to enhance code quality and speed up review processes by integrating AI into the developers’ existing workflows, ultimately fostering a more productive coding environment. By streamlining the code review process, it empowers teams to maintain high standards while accelerating development timelines.

Mend.io delivers the first AI native application security platform built for software created by both humans and machines. It empowers organizations to secure AI generated code and embedded AI components like models, agents, MCPs, and RAG pipelines. The unified platform brings together comprehensive capabilities including AI security, SAST, SCA, container scanning, and Mend Renovate providing development and security teams complete visibility into risks across their codebase. With AI powered remediation and prioritization workflows, teams are enabled to quickly resolve issues and reduce risk. With a simple, predictable price model, eliminating per-module costs and minimal reliance on expensive professional services Mend.io is a scalable, proactive, developer-friendly platform for modern AppSec—all in a single platform.