by GitLabCode hosting and CI
One DevSecOps platform: Premium at $29 per user a month billed annually, with 10,000 CI minutes, SAML SSO and audit events included.
Code hosting, CI with 10,000 minutes, SAML SSO, audit events and approval rules in one $29 Premium seat, also available self-managed.
GitLab puts source control, CI/CD and security scanning in one platform. Premium, at $29 per user a month billed annually, includes 10,000 compute minutes, SAML SSO, group audit events and merge request approval rules, the controls a security review usually asks for, without an add-on. The same tiers run self-managed at the same listed price, and Dedicated offers single-tenant hosting in a region you choose.
Against 3 other products we reviewed in Code hosting and CI: what you pay for with each, the five access facts, the plan limits we recorded and each review's bottom line. The note under the table says how each one was checked.
| Metric | GitLab | GitHub | Azure DevOps | Bitbucket |
|---|---|---|---|---|
| What you're paying for | Saves engineering timeCode hosting, CI with 10,000 minutes, SAML SSO, audit events and approval rules in one $29 Premium seat, also available self-managed. | Worth the pricePrivate repositories, pull request reviews and 3,000 CI minutes for $4 per user, with a free plan that has no user cap. | Worth the priceGit hosting, CI and boards free for 5 users, with an audit log, EU data location and Entra ID sign-in on every plan. | Built-in reachGit hosting with built-in CI and Jira integration on every plan, from $3.65 per user a month. |
| Overall score | 7.2 | 9.2Best | 8.2 | 6.2 |
| Free option | Free plan | Free plan | Free plan | Free plan |
| Card to start | No card needed | –Not measured | No card needed | –Not measured |
| Getting access | Self-serve | Self-serve | Self-serve | Self-serve |
| Starter priceCheapest paid plan | $29/user/mo | $4/user/mo | $6/user/mo | $3.65/user/mo |
| Pricing model | Per seat | Per seat | Per seat | Per seat |
| Pricing page | Public prices | Public prices | Public prices | Public prices |
| Billing units | Users, plus compute minutes beyond the plan | Users, plus CI minutes beyond the plan | Users after the first 5, plus parallel CI jobs | Users, plus build minutes beyond the plan |
| Free plan | 5 users per private group, 400 CI minutes/mo | Unlimited users, 2,000 CI minutes/mo | 5 users, 1,800 CI minutes/mo | Up to 5 users, 50 build minutes/mo |
| 10 developers, 3,000 CI minutes/mo | $290 (Premium, billed annually) | $40 (Team) | $70 (Basic plus one hosted parallel job) | $46.50 (Standard plus 1,000 minutes) |
| CI minutes on the entry paid plan | 10,000/mo; then $10 per 1,000 | 3,000/mo; then $0.006/min (Linux 2-core) | 1,800/mo; a $40 hosted job removes the limit | 2,500/mo; then $10 per 1,000 |
| Security scanning add-ons | Basic SAST and secret detection in all tiers; full scanning in Ultimate (custom price) | Secret Protection $19 and Code Security $30 per active committer/mo | Code Security $30 and Secret Protection $19 per committer/mo | None listed; Code insights shows third-party results |
| SOC 2 Type II and ISO 27001 | Both | Both (SOC 2 Type 2 report listed on Enterprise) | Both | Both (Bitbucket Cloud in scope) |
| EU data residency | GitLab Dedicated (region of your choice), by demo | Enterprise (GHE.com: EU, Australia, US, Japan) | Europe chosen when creating the organization | Bitbucket not listed for data residency |
| SAML SSO | Premium | Enterprise (from $21/user/mo) | Microsoft Entra ID sign-in, all plans | Atlassian Guard add-on ($3/user/mo at 10 users) |
| Self-managed version | Free, Premium ($29) and Ultimate | GitHub Enterprise Server, covered by Enterprise | Azure DevOps Server, at listed prices | Data Center: not sold to new customers |
| Bottom line | From its public pages, GitLab includes the most CI minutes and team controls in its entry paid plan, at the highest listed price here for 10 developers. Full scanning sits in Ultimate, priced by sales. | From its public pages, GitHub lists the lowest price here for 10 developers and covers the scenario on its $4 Team plan. SAML SSO starts on Enterprise, and scanning is an add-on. | From its public pages, Azure DevOps puts an audit log, EU data location and Entra ID sign-in on every plan and covers our team for $70. CI is bought as parallel jobs, and the free minutes need a linked Azure subscription. | From its public pages, Bitbucket has the lowest per-user price here and Jira integration on every plan. SSO and audit logs come through Atlassian Guard, and there is no data residency or new self-managed option. |
Evidence: GitLab: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; GitHub: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Azure DevOps: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Bitbucket: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
Review from public pages
Written from GitLab's public pages (pricing, security or privacy, and docs) as read on Oct 15, 2026. We did not sign up, and no hands-on run is published yet.
We read GitLab's pricing page and FAQ, its security page and its docs on compute minutes, hosted runners, SAML SSO, audit events, approval rules and trials on Oct 15, 2026; we did not sign up for this review. The pricing page has three tiers: Free, Premium at $29 per user a month billed annually, and Ultimate with custom pricing. They include 400, 10,000 and 50,000 compute minutes a month, shared by the top-level group whatever its size.
The Free plan says no credit card is required, but the FAQ adds that card details are needed to use GitLab.com hosted runners, verified with a one-dollar authorization; bringing your own runner avoids that. Free private groups are limited to five users.
The docs mark SAML SSO, group audit events and approval rules as Premium and Ultimate. The FAQ says basic SAST, secret detection and container scanning run in all tiers, with results as JSON artifacts; showing findings in merge requests and requiring security approvals are Ultimate features. GitLab.com is hosted on Google Cloud in the USA; Dedicated runs on AWS in a region you choose. The security page lists SOC 2 Type 2 reports and ISO/IEC 27001:2022 for GitLab.com and Dedicated.
Premium includes SAML SSO, group audit events and merge request approval rules.
vs Bitbucket: GitHub lists SAML SSO on Enterprise; Bitbucket needs an Atlassian Guard subscription.
Premium includes 10,000 compute minutes a month; bought minutes roll over if unused.
vs Bitbucket: GitHub Team includes 3,000 and Bitbucket Standard 2,500.
Self-Managed is listed on Free and on Premium at $29 per user billed annually.
SAST, secret detection and container scanning run in all tiers; Ultimate adds findings in merge requests and security approvals.
Ten developers need Premium, because Free private groups stop at five users: $290 a month, billed annually.
Workaround: Premium also includes 10,000 minutes, SSO and audit events.
The FAQ says card details are required to use GitLab.com hosted runners, though not to sign up or to use your own runners.
Full security scanning, vulnerability management and compliance features are in Ultimate, which shows "Contact us for custom pricing".
GitLab.com is hosted in the USA; choosing a region means GitLab Dedicated, which is sold through a demo.
GitLab bills per user, annually: Premium is $29 a month per user; Ultimate is quoted. Each tier includes compute minutes for the whole group (400, 10,000 or 50,000); more cost $10 per 1,000 as a one-time purchase. Storage is $5 a month per 10 GiB.
For 10 developers and 3,000 Linux minutes, Free does not fit (five users), so the figure is Premium: 10 × $29 = $290 a month, or $3,480 a year. SAML SSO is already included. Paid plans include promotional GitLab Credits for AI features ($12 per user on Premium) for a limited time.
The pricing FAQ says GitLab can import projects from most providers, including GitHub and Bitbucket, and the same tiers run self-managed on your own infrastructure.
From its public pages, GitLab includes the most CI minutes and team controls in its entry paid plan, at the highest listed price here for 10 developers. Full scanning sits in Ultimate, priced by sales.
| Limit | As recorded |
|---|---|
| Billing units | Users, plus compute minutes beyond the plan |
| Free plan | 5 users per private group, 400 CI minutes/mo |
| 10 developers, 3,000 CI minutes/mo | $290 (Premium, billed annually) |
| CI minutes on the entry paid plan | 10,000/mo; then $10 per 1,000 |
| Security scanning add-ons | Basic SAST and secret detection in all tiers; full scanning in Ultimate (custom price) |
| SOC 2 Type II and ISO 27001 | Both |
| EU data residency | GitLab Dedicated (region of your choice), by demo |
| SAML SSO | Premium |
| Self-managed version | Free, Premium ($29) and Ultimate |
Read from the vendor's public pages on Oct 15, 2026. No hands-on run is published yet. How we check
We have not published a sign-up run for GitLab yet. The access facts above were read from its sign-up and pricing pages on Oct 15, 2026.
We have not published API calls for GitLab yet.
GitLab lists 4 plans. The cheapest paid plan, Premium (billed annually), costs $29/user/mo.
Prices as listed, USD, excluding tax; observed 2026-10-15.
Source: about.gitlab.com pricing page. Prices change; the observed date above is when our agent read them.
We read the pricing, security and docs pages of three code hosting and CI services on the same day and scored them on the same six indicators. How each one bills, what 10 developers and 3,000 CI minutes cost, and who should pick which.
