GitLab Duo runs AI agents and flows inside GitLab for coding, code review, security triage and fixing CI/CD pipelines.
Coding & DevelopmentSubscription
DevSecOps
Security folded into the development loop rather than bolted on at the end — scanning, policy and fixes where the code is written.
1 app and 3 MCP servers tagged DevSecOps.
Apps
MCP servers
MCP: Aikido Security MCP Server
by Aikido Security
Runs Aikido's code and secrets scan as a tool inside your coding agent, returning machine-readable findings the agent can triage, fix or ignore in place.
MCP: CVE MCP Server
by mukul975
Vulnerability triage for AI agents: 28 security tools across 24 free intelligence sources — NVD, EPSS, CISA KEV, MITRE ATT&CK, Shodan and VirusTotal — behind a single triage_cve call.
MCP: Snyk MCP Server
by Snyk
Snyk's official MCP server, shipped inside the Snyk CLI: scan code, dependencies, containers and IaC for vulnerabilities, generate SBOMs and monitor projects from your agent.
Related tags
Tags that appear alongside this one, ranked by how often.