~/d/gitlab.com

> dossier for gitlab.com

an at-a-glance snapshot. each section streams in independently.

## dns[ok]

open standalone →

A: ttl=61 172.65.251.78
AAAA: ttl=295 2606:4700:90:0:f22e:fbec:5bed:a9b9
NS: ttl=86400 diva.ns.cloudflare.com.
ttl=86400 jermaine.ns.cloudflare.com.
SOA: ttl=1800 diva.ns.cloudflare.com. dns.cloudflare.com. 2402353640 10000 2400 604800 1800
CAA: ttl=300 \# 33 00 05 69 6f 64 65 66 6d 61 69 6c 74 6f 3a 73 65 63 75 72 69 74 79 40 67 69 74 6c 61 62 2e 63 6f 6d
ttl=300 \# 17 00 05 69 73 73 75 65 61 6d 61 7a 6f 6e 2e 63 6f 6d
ttl=300 \# 20 00 05 69 73 73 75 65 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d
ttl=300 \# 22 00 05 69 73 73 75 65 61 6d 61 7a 6f 6e 74 72 75 73 74 2e 63 6f 6d
ttl=300 \# 19 00 05 69 73 73 75 65 61 77 73 74 72 75 73 74 2e 63 6f 6d
ttl=300 \# 19 00 05 69 73 73 75 65 63 6f 6d 6f 64 6f 63 61 2e 63 6f 6d
ttl=300 \# 45 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73
ttl=300 \# 21 00 05 69 73 73 75 65 67 6c 6f 62 61 6c 73 69 67 6e 2e 63 6f 6d
ttl=300 \# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67
ttl=300 \# 41 00 05 69 73 73 75 65 70 6b 69 2e 67 6f 6f 67 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73
ttl=300 \# 18 00 05 69 73 73 75 65 73 65 63 74 69 67 6f 2e 63 6f 6d
ttl=300 \# 14 00 05 69 73 73 75 65 73 73 6c 2e 63 6f 6d
ttl=300 \# 23 00 09 69 73 73 75 65 77 69 6c 64 63 6f 6d 6f 64 6f 63 61 2e 63 6f 6d
ttl=300 \# 49 00 09 69 73 73 75 65 77 69 6c 64 64 69 67 69 63 65 72 74 2e 63 6f 6d 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73
ttl=300 \# 26 00 09 69 73 73 75 65 77 69 6c 64 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67
ttl=300 \# 45 00 09 69 73 73 75 65 77 69 6c 64 70 6b 69 2e 67 6f 6f 67 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73
ttl=300 \# 18 00 09 69 73 73 75 65 77 69 6c 64 73 73 6c 2e 63 6f 6d
TXT: ttl=300 "MS=ms60196128"
ttl=300 "MS=ms83893381"
ttl=300 "_globalsign-domain-verification=4azHJ7gL04Dr8r2VR0txu7OrWg7uZpU6v7LOHVP1b3"
ttl=300 "adobe-idp-site-verification=5a5e001556a2c0595ed571d2a1f7b5f8a749a00742853e035eb909bdd31622b8"
ttl=300 "apple-domain-verification=UNUD9vY0Jp9z5TjO"
ttl=300 "asv=3f763643512ad5bdcc0d42caea1b3951"
ttl=300 "docusign=1a7d6818-2cf5-4956-a9fb-c3d2e9a578dd"
ttl=300 "drift-domain-verification=fa583cfff88c496bcc62651057550656a98ab3e689c314255a1a6ae848e3e56d"
ttl=300 "gitlab-pages-verification-code=5228e61c992af7e65f5f5160f0587fb4"
ttl=300 "google-site-verification=6Cb3PPpoMp6-xRavXf2HZz03s7pplQeG5MiUaPGIu_Q"
ttl=300 "google-site-verification=QiG7NTIWpedorFi71mMN7OVe2Fo_yA6RclsxO8stOa8"
ttl=300 "google-site-verification=XDRo7LEOqv6OV0RfGDFh7G2XgpzdycygGJBqde334q4"
ttl=300 "google-site-verification=iWR2UGQb3MvVY83zY47ZFrGFVFLG6ADfpjqchlQjnok"
ttl=300 "google-site-verification=lnPjOx5EAxmESH8FSn4colWVMAxe18K4ZIopDB1IEDY"
ttl=300 "google-site-verification=uT9dAMjaTlnkbC0VnN5flFWp0Bsze7zHObWjZwkd2p8"
"google-site-verification=vPPg6DGiVgf5vhzQg5zGISLao6-07-lVzzpqvmCFe5Y"

fetched 2026-04-24T07:56:16.284Z

## dns[not_applicable]

open standalone →

resolving…

## mx[ok]

open standalone →

pri=1 aspmx.l.google.com.
pri=5 alt1.aspmx.l.google.com.
pri=5 alt2.aspmx.l.google.com.
pri=10 alt3.aspmx.l.google.com.
pri=10 alt4.aspmx.l.google.com.

fetched 2026-04-24T07:56:16.279Z

## mx[not_applicable]

open standalone →

resolving mx…

## spf[ok]

open standalone →

v=spf1 include:mail.zendesk.com include:_spf.google.com include:mktomail.com include:_spf.salesforce.com include:_spf-ip.gitlab.com a:zgateway.zuora.com include:mailgun.org include:_spf.sendergen.com ip4:35.80.141.6/32 ip4:44.229.121.55/32 -all

v=spf1
include:mail.zendesk.com
include:_spf.google.com
include:mktomail.com
include:_spf.salesforce.com
include:_spf-ip.gitlab.com
a:zgateway.zuora.com
include:mailgun.org
include:_spf.sendergen.com
ip4:35.80.141.6/32
ip4:44.229.121.55/32
-all

fetched 2026-04-24T07:56:16.286Z

## spf[not_applicable]

open standalone →

resolving spf…

## dmarc[ok]

open standalone →

v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_agg@vali.email;

v=: DMARC1
p=: reject
pct=: 100
rua=: mailto:dmarc_agg@vali.email

fetched 2026-04-24T07:56:16.280Z

## dmarc[not_applicable]

open standalone →

resolving dmarc…

## dkim[ok]

open standalone →

default:: —
google:: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCA5+ebKcaMAURa2i9I+RHKoGlcO+/bd3trpTFqPEHBFSD0zfVfoROmECeAcOr1QEVJl0EPhMg/I8TbRK8DbV4+d+rHNaIKCuM1SFPC9t9AobgTq2G1TXLEzgYeSH7bQmOk3H9aw1bVbzuMqsIuTKTRcfbrGghiIjxmRrNBV4l8KQIDAQAB
k1:: —
selector1:: —
selector2:: —
mxvault:: —

fetched 2026-04-24T07:56:16.293Z

## dkim[not_applicable]

open standalone →

probing dkim selectors…

## tls[ok]

open standalone →

subject cn:: gitlab.com
issuer:: Sectigo RSA Domain Validation Secure Server CA / Sectigo Limited
valid:: Apr 12 00:00:00 2025 GMT → May 11 23:59:59 2026 GMT
authorized:: yes
sha256:: A7:5D:CF:6B:0C:30:6A:A0:4C:C8:51:68:88:64:64:A3:20:73:59:86:E0:D4:C3:57:5F:EA:05:29:E3:D3:58:27
sans: gitlab.com
auth.gitlab.com
customers.gitlab.com
email.customers.gitlab.com
gprd.gitlab.com
www.gitlab.com

fetched 2026-04-24T07:56:16.306Z

## tls[not_applicable]

open standalone →

fetching tls cert…

## redirects[ok]

open standalone →

final status: 200 · 2 hops

[301] https://gitlab.com/
[200] https://about.gitlab.com/

fetched 2026-04-24T07:56:16.444Z

## redirects[not_applicable]

open standalone →

tracing redirects…

## headers[ok]

open standalone →

final url: https://about.gitlab.com/

security headers

strict-transport-security: max-age=31536000
content-security-policy: —
x-frame-options: —
x-content-type-options: —
referrer-policy: —
permissions-policy: —

other headers

age: 49
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=14400
cf-cache-status: HIT
cf-ray: 9f138cea789c7411-IAD
connection: keep-alive
content-encoding: br
content-type: text/html
date: Fri, 24 Apr 2026 07:56:16 GMT
etag: W/"1879bd2a7a8b14e14cd00e6aedd605cb"
expires: Fri, 24 Apr 2026 11:56:16 GMT
last-modified: Fri, 24 Apr 2026 00:53:10 GMT
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding, Origin
x-goog-generation: 1776991989818283
x-goog-hash: crc32c=6GIcDg==, md5=GHm9KnqLFOFM0A5q7dYFyw==
x-goog-metageneration: 1
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 207747
x-guploader-uploadid: AMNfjG1ZZ_1dnNIfuwqqHUvHHgROs3Kq7__effMRha-YwrMRKILNBOVDhgsr-PQpdiyBtTmOm--fwD034BnnXQ

fetched 2026-04-24T07:56:16.424Z

## headers[not_applicable]

open standalone →

fetching headers…

## cors[ok]

open standalone →

origin: https://drwho.me
method: GET
preflight status: 200

access-control-* headers

access-control-allow-origin: —
access-control-allow-methods: —
access-control-allow-headers: —
access-control-allow-credentials: —
access-control-max-age: —
access-control-expose-headers: —

no access-control-* headers returned — site does not advertise CORS to this origin

fetched 2026-04-24T07:56:16.354Z

## cors[not_applicable]

open standalone →

sending preflight…

## web-surface[ok]

open standalone →

robots.txt

present

# See http://www.robotstxt.org/robotstxt.html for documentation on how to use the robots.txt file
#
# To ban all spiders from the entire site uncomment the next two lines:
# User-Agent: *
# Disallow: /

# Add a 1 second delay between successive requests to the same server, limits resources used by crawler
# Only some crawlers respect this setting, e.g. Googlebot does not
# Crawl-delay: 1

# Based on details in https://gitlab.com/gitlab-org/gitlab/blob/master/config/routes.rb,
# https://gitlab.com/gitlab-org/gitlab/blob/master/spec/routing, and using application

# Global routes
User-Agent: *
Disallow: /autocomplete/users
Disallow: /autocomplete/projects
Disallow: /search
Disallow: /admin
Disallow: /profile
Disallow: /dashboard
Disallow: /users
Disallow: /api/v*
Disallow: /help
Disallow: /s/
Disallow: /-/profile
Disallow: /-/profile/
Disallow: /-/user_settings/
Disallow: /-/ide/
Disallow: /-/experiment
# Restrict allowed routes to avoid very ugly search results
Allow: /users/sign_in
Allow: /users/sign_up
Allow: /users/*/snippets

# Generic resource routes like new, edit, raw
# This will block routes like:
# - /projects/new
# - /gitlab-org/gitlab-foss/issues/123/-/edit
User-Agent: *
Disallow: /*/new
Disallow: /*/edit
Disallow: /*/raw
Disallow: /*/realtime_changes

# Group details
User-Agent: *
Disallow: /groups/*/-/analytics
Disallow: /groups/*/-/analytics/
Disallow: /groups/*/-/insights/
Disallow: /groups/*/-/issues_analytics
Disallow: /groups/*/-/contribution_analytics
Disallow: /groups/*/-/group_members
Disallow: /groups/*/-/saml/
Disallow: /groups/*/-/saml_group_links
Disallow: /groups/*/-/settings/
Disallow: /groups/*/-/billings
Disallow: /groups/*/-/hooks
Disallow: /groups/*/-/projects

# Project details
User-Agent: *
Disallow: /*/*.git$
Disallow: /*/*.git/*
Disallow: /*/archive/
Disallow: /*/repository/archive*
Disallow: /*/activity
Disallow: /*/-/project_members
Disallow: /*/-/blame/
Disallow: /*/-/branches
Disallow: /*/-/commits/
Disallow: /*/-/commit
Disallow: /*/commit/*.patch
Disallow: /*/commit/*.diff
Disallow: /*/-/compare/
Disallow: /*/-/network/
Disallow: /*/path_locks
Disallow: /*/merge_requests/*.patch
Disallow: /*/merge_requests/*.diff
Disallow: /*/merge_requests/*/diffs
Disallow: /*/services
Disallow: /*/uploads/
Disallow: /*/-/import
Disallow: /*/-/requirements_management/
Disallow: /*/-/pipelines
Disallow: /*/-/pipeline_schedules
Disallow: /*/-/jobs
Disallow: /*/-/ci/
Disallow: /*/-/quality/
Disallow: /*/-/licenses
Disallow: /*/-/security/
Disallow: /*/-/dependencies
Disallow: /*/-/audit_events
Disallow: /*/-/on_demand_scans
Disallow: /*/-/feature_flags
Disallow: /*/-/ml/
Disallow: /*/-/environments
Disallow: /*/-/clusters
Disallow: /*/-/terraform
Disallow: /*/-/terraform_module_registry
Disallow: /*/-/*/configuration
Disallow: /*/-/error_tracking
Disallow: /*/-/metrics
Disallow: /*/-/alert_management
Disallow: /*/-/incidents
Disallow: /*/-/oncall_schedules
Disallow: /*/-/escalation_policies
Disallow: /*/-/*/service_desk
Disallow: /*/-/analytics
Disallow: /*/-/analytics/
Disallow: /*/-/value_stream_analytics
Disallow: /*/-/graphs/
Disallow: /*/insights/
Disallow: /*/-/pipelines/
Disallow: /*/-/settings/
Disallow: /*/-/hooks
Disallow: /*/-/usage_quotas

sitemap.xml

present — 420 url(s)

head

title: Finally, AI for the entire software lifecycle.
description: Your intelligent orchestration platform for DevSecOps

social

og:type: website
og:title: Finally, AI for the entire software lifecycle.
og:description: Your intelligent orchestration platform for DevSecOps
og:image: https://res.cloudinary.com/about-gitlab-com/image/upload/v1758207578/whxaklh4tf6nonryosrs.png
og:url: https://about.gitlab.com/
og:site_name: about.gitlab.com
og:locale: en_US
twitter:card: summary_large_image
twitter:site: @GitLab
twitter:title: Finally, AI for the entire software lifecycle.
twitter:image: https://res.cloudinary.com/about-gitlab-com/image/upload/v1758207578/whxaklh4tf6nonryosrs.png
twitter:description: Your intelligent orchestration platform for DevSecOps
twitter:creator: @GitLab

fetched 2026-04-24T07:56:18.678Z

## web-surface[not_applicable]

open standalone →

inspecting web surface…