10-Q: GitLab Reports Q3 FY26 Loss Amid R&D Expensing Shift

GitLab Inc. reported a net loss of $8.8 million for the third quarter of fiscal year 2026, driven by increased operating expenses and a shift in tax provisions, despite a 25% revenue increase.

Summary

• Total revenue for the three months ended October 31, 2025, increased by 25% to $244.4 million from $196.0 million in the prior year period.
• Total revenue for the nine months ended October 31, 2025, increased by 27% to $694.8 million from $547.8 million in the prior year period.
• Subscription revenue (self-managed and SaaS) grew 27% to $223.3 million for the three months and 29% to $630.4 million for the nine months ended October 31, 2025.
• Net loss for the three months ended October 31, 2025, was $8.8 million, a significant change from a net income of $27.8 million in the prior year period.
• Net loss for the nine months ended October 31, 2025, was $55.1 million, compared to a net loss of $15.4 million in the prior year period.
• Loss from operations for the three months ended October 31, 2025, improved to $12.4 million from a $28.7 million loss in the prior year period.
• Loss from operations for the nine months ended October 31, 2025, improved to $65.3 million from a $123.4 million loss in the prior year period.
• Gross profit for the three months increased 22% to $212.1 million, with gross margin at 87%.
• Gross profit for the nine months increased 25% to $609.1 million, with gross margin at 88%.
• The Dollar-Based Net Retention Rate was 119% as of October 31, 2025, a decrease from 124% in the prior year.
• Customers with Annual Recurring Revenue (ARR) of $100,000 or more increased by 23% to 1,405 as of October 31, 2025, from 1,144 in the prior year.
• Adjusted free cash flow for the nine months ended October 31, 2025, was $177.8 million, a substantial increase from $57.9 million in the prior year.
• The One Big Beautiful Bill Act (OBBBA), enacted on July 4, 2025, allowed for immediate expensing of U.S. research & development (R&D) expenditures, favorably impacting domestic tax liability.

Sentiment

Score: 4

Explanation: While revenue growth and customer acquisition (especially $100K+ ARR) remain strong, the significant swing to a net loss for the quarter and increased net loss for the nine months, coupled with a declining Dollar-Based Net Retention Rate and increased operating costs, indicates a challenging period for profitability and efficiency. The positive adjusted free cash flow is a good sign, but the overall financial performance, particularly net income, is worse than the prior year.

Positives

• Strong revenue growth: 25% for the three months and 27% for the nine months ended October 31, 2025, demonstrating continued demand for the DevSecOps platform.
• Improved operating loss: Loss from operations significantly reduced to $12.4 million for the quarter and $65.3 million for the nine months, indicating better operational efficiency.
• Significant increase in high-value customers: Customers with ARR of $100,000 or more grew by 23% year-over-year to 1,405, reflecting strong enterprise adoption.
• Robust adjusted free cash flow: $177.8 million for the nine months ended October 31, 2025, a substantial increase from $57.9 million in the prior year, highlighting strong cash generation.
• Favorable tax impact from OBBBA: Immediate expensing of U.S. R&D expenditures reduced domestic tax liability, contributing to a lower tax expense.
• Consistent innovation: The company maintains a monthly release cadence for new software, having done so for 169 consecutive months, and continues to leverage its open-source community and incorporate AI features.
• Increased liquidity: Cash and cash equivalents, along with short-term investments, aggregated to $1.2 billion as of October 31, 2025, up from $992.4 million as of January 31, 2025.

Negatives

• Net loss for the quarter: A net loss of $8.8 million for the three months ended October 31, 2025, represents a significant negative swing from a net income of $27.8 million in the comparable prior year period.
• Increased net loss for the nine months: The net loss for the nine months ended October 31, 2025, increased to $55.1 million from $15.4 million in the prior year period.
• Declining Dollar-Based Net Retention Rate: The rate decreased to 119% from 124%, indicating a slowdown in revenue expansion from existing customers.
• Slight gross margin decrease: Gross margin declined to 87% for the three months (from 89%) and 88% for the nine months (from 89%), partly due to increased SaaS hosting costs.
• Decreased interest income: Interest income declined due to lower interest rates during the periods presented.
• Significant foreign exchange losses: Foreign exchange losses increased, contributing to a higher 'Other expense, net' of $6.3 million for the quarter and $17.2 million for the nine months.
• Increased operating expenses: Absolute operating expenses for sales and marketing, research and development, and general and administrative all increased year-over-year.

Risks

• Difficulty in effectively managing rapid growth and improving systems, processes, and controls could adversely affect business, financial condition, and results of operations.
• Recent growth may not be indicative of future growth, and the company may not be able to sustain its revenue growth rate, making future prospects difficult to evaluate.
• A history of losses and anticipated increases in operating expenses mean the company may not achieve or sustain profitability on a consistent basis.
• Security and privacy breaches, especially due to the use of third-party open-source technologies and community-contributed code, pose heightened risks of litigation, regulatory actions, reputational harm, and financial liability.
• Intense competition from well-established providers and new entrants could lead to loss of market share, adversely affecting business and operating results.
• Failure to respond to rapid technological changes with new solutions, including timely development of AI features, could materially affect operating results.
• Service failures due to material defects, software bugs, or external issues could damage reputation, reduce market share, and lead to liability claims.
• The market for DevSecOps services is relatively new and rapidly evolving with uncertain growth expectations, which could adversely affect future results and stock price.
• Reliance on sales and marketing strategies to drive revenue growth may not be successful, and any decline in customer renewals and expansions could harm future operating results.
• Operating results may fluctuate significantly due to various factors, making future results difficult to predict and potentially affecting the trading price of Class A common stock.
• As product offerings mature and expand, pricing and packaging changes may result in customers purchasing products on less favorable terms, impacting revenues and profitability.
• Implementation of AI and machine learning technologies may result in reputational harm, liability (e.g., intellectual property infringement), increased expenditures, or other adverse consequences.
• The company's core value of transparency, while beneficial, must be 'responsible' as it can have unintended negative consequences, including competitive disadvantages or regulatory scrutiny.
• The publicly available GitLab Handbook may not always be up-to-date or accurate, potentially leading to negative third-party scrutiny or adverse business effects.
• Customers may choose to remain on free self-managed or SaaS product offerings instead of converting to paying customers, impacting revenue growth.
• Failure to effectively expand marketing and sales capabilities could harm the ability to increase the customer base and achieve broader market acceptance.
• Dependence on the management team and other key team members means the loss of personnel or inability to hire/retain qualified staff could harm the business.
• Inability to maintain corporate culture as the company grows could lead to a loss of innovation, creativity, and teamwork.
• Engagement of team members through Professional Employer Organizations (PEOs) and as independent contractors poses challenges and risks related to compliance with local laws and enforceability of agreements.
• Channel partners providing a poor experience to customers could put the company's brand or growth at risk.
• Reliance on internal tools and data models for performance metrics means inherent challenges in measurement, and real or perceived inaccuracies could harm reputation.
• Significant reliance on independent open-source contributors means failure to adequately develop and enhance open-source technologies could increase development expenses or delay releases.
• Failure or inability to protect intellectual property rights, or claims of infringement by others, could diminish brand value and competitive position.
• The open-source and source code-available business model makes software vulnerable to unauthorized distribution and sale.
• Potential for substantial liabilities from lawsuits or other claims, including securities class action and shareholder derivative suits, could consume financial and managerial resources.
• Merger and acquisition activities and joint ventures could require significant management attention, disrupt business, dilute stockholder value, and adversely affect operating results.
• If estimates or judgments relating to critical accounting policies prove incorrect, operating results could be adversely affected.
• Adverse tax laws or regulations, or changes in their application, could increase service costs and negatively impact the business.
• Termination of relationships with payment solutions providers could severely impact the ability to collect revenue from customers.
• Processing, storing, and using personal data subjects the company to governmental regulations (e.g., GDPR, CCPA, PIPL), and non-compliance could result in significant liability and reputational harm.
• Exposure to various governmental export controls, trade sanctions, and import laws could impair the ability to compete internationally or subject the company to liability.
• Failure to comply with anti-bribery, anti-corruption, and anti-money laundering laws could lead to penalties and adverse consequences.
• Sales to government entities are subject to challenges and risks, including competitive bidding, budgetary cycles, and compliance with specific policies.
• Dependence on the quality and volume of code contributed by open-source contributors means a decline could harm the customer base and engagement.
• Seasonality in new customer contracts and renewals, particularly in the last two fiscal quarters, may cause fluctuations in sales and results of operations.
• Revenue recognition over subscription terms means downturns or upturns in sales are not immediately reflected in results of operations.
• The unpredictable length of sales cycles, especially for large customers, can lead to fluctuating operating results and considerable time/expense.
• Operating as a remote-only company poses risks related to technology reliability, corporate culture development, and collaboration.
• Unfavorable media coverage could negatively impact the business, user base, and customer loyalty.
• Disagreement with company policies, practices, or management actions by stakeholders could harm brand, reputation, and business.
• Natural disasters, pandemics, and other catastrophic events, or man-made problems like acts of war, could disrupt business operations.
• Cash and cash equivalents could be adversely affected if financial institutions holding deposits fail.
• The market price of Class A common stock may be volatile due to various factors, including limited public float, and could lead to loss of investment.
• Sales of substantial amounts of Class A common stock in public markets could cause the market price to decline.
• The dual-class structure of common stock concentrates voting control with Class B holders, limiting the influence of Class A stockholders.
• If industry or financial analysts do not continue to publish research or issue unfavorable reports, the stock price and trading volume could decline.
• No dividends are expected in the foreseeable future, meaning investment return depends on stock price appreciation.
• Provisions in organizational documents and Delaware law could make an acquisition more difficult and limit attempts to replace management.
• Exclusive forum provisions for certain claims may limit stockholders' ability to obtain a favorable judicial forum for disputes.

Future Outlook

The company anticipates continued increases in absolute research and development, sales and marketing, and general and administrative expenses as it invests in product enhancements (including AI capabilities), market penetration, and public company compliance. These expenses are expected to decrease as a percentage of total revenue over time. The company believes its current liquidity is sufficient for at least the next 12 months and will continue to evaluate the impact of the OBBBA on future tax provisions. Seasonality in customer contracts is expected to persist, potentially becoming more pronounced with larger enterprise customers.

Management Comments

• We believe GitLab offers the shortest path to unlock technology transformation and business value.
• GitLab accelerates our customers ability to innovate by accelerating their software development cycles from weeks to minutes.
• It removes the need for point tools and delivers enhanced operational efficiency by eliminating manual work, increasing productivity, and creating a culture of innovation and velocity.
• Embedding security earlier in the development process, GitLab enables customers to improve software security, quality, and overall compliance.
• We believe we have built a highly differentiated platform that gives us an advantage over our competitors by empowering business, development, security, operations, and IT teams to collaborate in a single application across the entire DevSecOps lifecycle.
• Our technology leadership is an outcome of various factors, including our strong community, network of contributors, and continued enhancement of The DevSecOps platform by developing new features and expanding the functionality of existing features with speed and consistency.
• We intend to continue releasing new software on a monthly cadence.
• We intend to continue investing in research and development to further enhance The DevSecOps platform and sustain our innovation and technology leadership.
• We believe that eventually the vast majority of organizations will switch to a DevSecOps platform and embrace a single application approach, creating a substantial opportunity to continue to grow our customer base.
• We plan to continue investing in sales and marketing, with a focus on expanding usage of our platform with our existing customers.
• We believe that this expansion will provide us with substantial operating leverage because the costs to expand sales within existing customers are significantly less than the costs to acquire new customers.
• We plan to continue investing in and developing these relationships [partnerships, alliances, channels, and integrations] to broaden our distribution footprint and drive greater awareness of our brand and The DevSecOps platform.
• We believe that these investments will contribute to our long-term growth, although they may adversely affect our operating results in the near term.
• We believe that our existing cash, cash equivalents, and short-term investments will be sufficient to support working capital and capital expenditure requirements for at least the next 12 months.

Industry Context

The software development industry is experiencing rapid technological change and intense competition, with a growing emphasis on unified DevSecOps platforms that integrate development, security, and operations. The market is increasingly adopting AI and machine learning technologies, which GitLab is actively incorporating into its products. Macroeconomic conditions, including inflation and volatile interest rates, are influencing corporate spending on software solutions. The open-source model remains a key driver of innovation and community engagement. Regulatory environments, particularly concerning data privacy (e.g., GDPR, CCPA, PIPL) and AI usage, are evolving rapidly, imposing new compliance burdens on technology companies.

Comparison to Industry Standards

• The filing does not provide specific comparisons to industry benchmarks or comparable companies/projects. It focuses on internal metrics and general market trends within the DevSecOps and software development industry.

Management Changes

Corporate Governance

Legal Proceedings

• Dolly v. GitLab et al. (Securities Class Action): Filed September 4, 2024, alleging material misrepresentations/omissions regarding AI features and monetization. The court granted the company's motion to dismiss on August 14, 2025, with leave to amend. Plaintiff stipulated to dismiss claims with prejudice on September 8, 2025.
• Shareholder Derivative Cases (Preciado, Jones, Lianto): Three putative shareholder derivative cases filed in February and March 2025, based on similar allegations as the Dolly class action, naming the company as a nominal defendant and certain officers/directors. Proceedings were stayed as of May 2025 during the pendency of the Dolly matter. Outcomes remain uncertain, and potential impact cannot be estimated.

Related Party Transactions

• GitLab Foundation Donations: The company's board of directors approved annual donations of Class A common stock to the GitLab Foundation, a California nonprofit public benefit corporation, which is a related party. Donated 40,889 shares ($2.0 million fair value) for the three months ended October 31, 2025, and 122,667 shares ($5.5 million fair value) for the nine months ended October 31, 2025.
• Right of First Refusal Agreement with Kilo Code, Inc.: On November 25, 2025, the company entered into an agreement with Kilo Code, Inc., an affiliate of Sytse Sijbrandij (Executive Chair). This grants the company a right of first refusal for certain acquisition proposals involving Kilo. The Audit Committee reviewed and approved this.

Stakeholder Impact

• Shareholders: Potential for stock price volatility due to net losses, declining net retention rate, and ongoing legal proceedings. The dual-class stock structure concentrates voting power, limiting the influence of Class A stockholders. Potential dilution from future equity raises.
• Employees (Team Members): Stock-based compensation is a significant component of overall compensation. Changes in the perceived value of equity awards could affect retention. Management changes (CEO transition) could impact morale or strategic direction. Risks related to PEOs and independent contractors could affect employment terms.
• Customers: Continued innovation and monthly releases aim to provide better, more secure software faster. Increased hosting costs for SaaS offerings might impact pricing or service levels. Security breaches or service failures could lead to loss of trust and business.
• Partners/Contributors: Continued investment in the partner network and open-source community is expected to broaden distribution and accelerate innovation. However, poor channel partner experience could harm the brand. Reliance on open-source contributors carries risks if they fail to adequately develop technologies.
• Creditors: Financial health indicators like cash, cash equivalents, and short-term investments ($1.2 billion) provide liquidity. However, a history of losses and potential need for future financing could be a concern.
• Regulatory Authorities: Ongoing compliance with evolving data privacy laws (GDPR, CCPA, PIPL), export controls, anti-bribery laws, and tax regulations is critical. Legal proceedings and potential tax liabilities could draw regulatory scrutiny.

Next Steps

• Continue investing in research and development to enhance the DevSecOps platform and sustain innovation, including AI capabilities.
• Maintain a monthly release cadence for new software.
• Continue investing in the open-source community to foster contributions and collaboration.
• Add headcount to the global sales and marketing team to acquire new customers and increase sales to existing customers.
• Continue investing in sales and marketing, focusing on expanding platform usage with existing customers.
• Continue investing in and developing partnerships, alliances, channels, and integrations to broaden distribution and brand awareness.
• Monitor and evaluate the impact of the One Big Beautiful Bill Act (OBBBA) on financial statements, particularly regarding U.S. taxation of foreign operations and foreign tax credit limitations effective in the next fiscal year.
• Evaluate the impact of adopting ASU 2025-06 on consolidated financial statements (effective for fiscal years beginning after December 15, 2027).
• William Staples' 10b5-1 plan for stock purchases is scheduled between December 31, 2025, and October 16, 2026.
• Robin Schulman's 10b5-1 plan for stock sales is scheduled between January 2, 2026, and December 31, 2026.
• James Shen's 10b5-1 plan for stock sales is scheduled between December 31, 2025, and March 12, 2027.

Key Dates

Recommendation

GitLab demonstrates strong revenue growth and continued expansion in its customer base, particularly for high-value customers ($100K+ ARR). The positive adjusted free cash flow indicates operational efficiency in cash generation. However, the significant shift to a net loss for the quarter and an increased net loss for the nine months, coupled with a declining Dollar-Based Net Retention Rate, raises concerns about profitability and the efficiency of expanding within the existing customer base. The company is making substantial investments in R&D, including AI, which could drive future growth but impacts short-term profitability. The resolution of the securities class action is a positive, but ongoing macroeconomic uncertainties and competitive pressures warrant a cautious approach. Investors should hold to monitor the company's ability to translate revenue growth into sustainable profitability and reverse the trend in net retention, while continuing to innovate in a competitive market.

Keywords

DevSecOps, Software-as-a-Service, Open Source, Cloud Computing, Artificial Intelligence, Financial Results, SEC Filing, 10-Q, Subscription Revenue, Net Retention Rate, Enterprise Software, Cybersecurity, Corporate Governance, Legal Proceedings, Taxation, International Operations