Likelihood to Recommend We started to use GitLab for hosting git source code repositories of our projects only but slowly we started to use it to store container images, packages, dependency proxy as well infrastucture registry and it is now well suited for Continuous Integration in our projects, It wasn't that good in Continuous Deployment before 12.0 version but after 12.0 it is amazingly good for Continuous Deployment as well since it keeps deployment information in a well organized manner which can be configure in ci yaml configuration.
Read full review In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.
Read full review Pros GitLab excels in managing code versions, allowing easy tracking of changes, branch management, and merging contributions. It helps maintain code stability and reliability, saving time and effort in the development or research workflow. Powerful code review features, enabling collaboration and feedback among team members. Robust project management features, including issue tracking, kanban boards, and milestones. Read full review AppScan works well in finding application vulnerabilities such as SQL injection, cross-site scripting and all of the OWASP top 10. Flexible reporting allows us to generate executive reports for application owners as well as separate technical reports for developers and system engineers. Technical reports include remediation information and cross reference CVSS scores Because it maintains data on all repeated assessments it helps us to do trending and metrics on compliance Read full review Cons CI variables management is sometimes hard to use, for example, with File type variables. The scope of each variable is also hard to guess. Access Token: there are too many types (Personal, Project, global..), and it is hard to identify the scope and where it comes from once created. Runners: auto-scaled runners are for the moment hard to put in place, and monitoring is not easy. Read full review It can have a FAQ session in the Application itself. It can recommend the fix for the error that occurred during the scan. Like its storing multiple manuals explore, It should have the capability of storing multiple logins. Read full review Likelihood to Renew Gitlab is the best in its segment. They have a free version, they have open-source software, they provide a good service with their SaaS product, they are a fully-remote company since the beginning (which means they are fully distributed and have forward-thinking IMO). I would certainly recommend them to everyone.
Read full review Usability I find it easy to use, I haven't had to do the integration work, so that's why it is a 9/10, cause I can't speak to how easy that part was or the initial set up, but day to day use is great!
Read full review Support Rating At this point, I do not have much experience with Gitlab support as I have never had to engage them. They have documentation that is helpful, not quite as extensive as other documentation, but helpful nonetheless. They also seem to be relatively responsive on social media platforms (twitter) and really thrived when
GitHub was acquired by Microsoft
Read full review Alternatives Considered GitLab is easily the preferred tool when it comes to versioning and source control. With other tools the UI often feels outdated and clunky leading to inefficiency and confusion. With some of the sleeker tools such as
GitKraken , while the aesthetic is pleasing, the experience is plagued by a lack of support, lack of optional plugins, and a plethora of bugs that cause unnecessary legwork to resolve. GitLab is the best of both aesthetic and functionality
Read full review Both solutions are decent, however, I had team members who had the experience working with HCL AppScan. Also, the product was priced nominally which suited our budget. Further, HCL AppScan's user community was bigger and many learning resources were freely available which helped junior peers learn quickly and eliminate any issues
Read full review Return on Investment We were able to streamline our project's codebase which made us very organised and laid out a proper plan for development. Our deployment and infra pipelines are well structured now making our process 10x faster. We are more focused into project building rather infra, as infra is totally on autopilot mode. Which has enabled us to grow our ROI by records. Read full review There are countless implementations to accomplish the same thing, and so many configurations are required. Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen. Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan. Read full review ScreenShots