10-Q: GitLab Reports Strong Revenue Growth and Improved Profitability in Q1 2026, Despite Dip in Net Retention Rate

GitLab Inc. announced a 27% year-over-year revenue increase to $214.5 million and a significant reduction in net loss for the first fiscal quarter ended April 30, 2025, driven by strong demand for its DevSecOps platform, though its Dollar-Based Net Retention Rate saw a decline.

Summary

• Total revenue for the three months ended April 30, 2025, increased by 27% to $214.5 million, up from $169.2 million in the same period last year.
• Subscription revenue (self-managed and SaaS) grew by 29% to $194.5 million, while License and other revenue increased by 11% to $20.0 million.
• Net loss significantly improved to $(36.3) million for the quarter, compared to $(55.5) million in the prior year period.
• Net cash provided by operating activities surged to $106.3 million, a substantial increase from $38.1 million in the same quarter last year.
• Adjusted free cash flow also saw a significant increase, reaching $104.1 million compared to $37.4 million in the prior year.
• The number of customers with Annual Recurring Revenue (ARR) of $100,000 or more increased by 26% year-over-year, reaching 1,288 as of April 30, 2025.
• Total Base Customers (with over $5,000 ARR) grew by 13% to 10,104 as of April 30, 2025.
• The Dollar-Based Net Retention Rate was 122% as of April 30, 2025, a decrease from 129% in the prior year.
• The company maintains a strong liquidity position with $1.1 billion in cash, cash equivalents, and short-term investments as of April 30, 2025.
• Operating expenses increased by 10% overall, with sales and marketing up 16% and research and development up 21%, while general and administrative expenses decreased by 11% due to lower event and charitable donation expenses.
• Foreign exchange losses significantly impacted other expense, net, increasing it to $(9.97) million from $(0.89) million in the prior year.

Sentiment

Score: 7

Explanation: The company demonstrated strong revenue growth, significantly reduced its net loss, and generated substantial positive cash flow from operations and adjusted free cash flow. Growth in high-value customers is also positive. However, the decline in Dollar-Based Net Retention Rate and significant foreign exchange losses are areas of concern. Ongoing legal proceedings also introduce uncertainty. Overall, the financial health shows improvement, but some key metrics indicate potential headwinds.

Positives

• Strong revenue growth of 27% year-over-year, indicating continued market demand for The DevSecOps platform.
• Significant improvement in net loss, reducing from $(55.5) million to $(36.3) million.
• Substantial increase in net cash provided by operating activities to $106.3 million, demonstrating strong operational cash generation.
• Adjusted free cash flow increased significantly to $104.1 million, highlighting improved financial efficiency.
• Robust growth in high-value customers, with $100,000+ ARR customers increasing by 26% and total Base Customers by 13%.
• Maintained a strong liquidity position with $1.1 billion in cash, cash equivalents, and short-term investments.
• Continued investment in research and development (up 21%) to enhance product offerings and maintain technology leadership.
• Successful integration of acquisitions like Rezilion and Oxeye Security Limited, strengthening product capabilities.
• The company's open-core business model continues to foster community contributions, with nearly 900 people contributing over 3,000 merge requests in calendar year 2024.

Negatives

• Dollar-Based Net Retention Rate decreased from 129% to 122%, indicating a softening in expansion within existing customer accounts.
• Gross margin slightly declined from 89% to 88%, partly due to increased cloud-hosting costs associated with SaaS growth.
• Significant increase in foreign exchange losses, contributing to a higher 'other expense, net' of $(9.97) million.
• Continued net loss, despite improvement, indicating the company is not yet consistently profitable.
• Increased stock-based compensation expense, which impacts profitability.
• Ongoing securities class action and shareholder derivative lawsuits alleging misrepresentations regarding AI features and monetization, posing potential financial and reputational risks.

Risks

• Challenges in managing rapid growth, including improving systems, processes, and controls, which could adversely affect business and financial results.
• Uncertainty in sustaining past revenue growth rates, as historical performance may not be indicative of future growth.
• Inability to achieve or sustain consistent profitability due to anticipated increases in operating expenses.
• Heightened risk of security and privacy breaches, including those related to third-party open source technologies and AI-related data exposure, potentially leading to litigation, regulatory actions, and reputational harm.
• Intense competition in the DevSecOps market from well-established providers and new entrants, which could lead to market share loss.
• Failure to respond to rapid technological changes with new solutions, potentially making existing offerings obsolete.
• Risk of service failures due to material defects, software bugs, or external issues, which could damage reputation and lead to liability claims.
• The market for DevSecOps services is relatively new and rapidly evolving, with uncertain growth expectations.
• Dependence on sales and marketing strategies to drive revenue growth, with potential for decline in customer renewals and expansions.
• Significant fluctuations in operating results, making future performance difficult to predict.
• Pricing and packaging changes for new and existing products may result in less favorable terms for the company.
• Implementation of AI and machine learning technologies may lead to reputational harm, liability, increased expenditures, and intellectual property concerns.
• Challenges in maintaining 'responsible transparency' due to potential unintended negative consequences from openly sharing information.
• Risk that the publicly available GitLab Handbook may not be up to date or accurate, leading to negative scrutiny.
• Customers may choose to remain on free product offerings instead of converting to paying customers.
• Failure to effectively expand marketing and sales capabilities could hinder customer acquisition and market acceptance.
• Reliance on the management team and key personnel, with risks associated with loss or inability to hire and retain qualified staff.
• Challenges in maintaining corporate culture as the company grows.
• Risks associated with engaging team members through Professional Employer Organizations (PEOs) and as independent contractors, including compliance and enforceability issues.
• Additional costs and risks associated with expanding international operations, including legal, political, economic, and social uncertainties in China related to the JiHu joint venture.
• Exposure to fluctuations in currency exchange rates and interest rates, which could negatively affect financial results.
• Failure to maintain effective internal controls and disclosure controls, potentially leading to adverse financial reporting.
• Significant costs and management resources required for operating as a public company.
• Potential future need to raise additional capital, which may not be available on favorable terms or could dilute stockholder value.
• Changes in tax laws or other tax guidance, including international tax frameworks like OECD Pillar 2, could adversely affect effective tax rates and financial condition.
• Exposure to greater than anticipated tax liabilities due to interpretation challenges by taxing authorities.
• Risk of adverse impact on operating liquidity if financial institutions holding cash and cash equivalents fail.
• Volatility in the market price of Class A common stock due to various factors, including global events and industry trends.
• Sales of substantial amounts of Class A common stock in the public markets could cause price declines.
• The dual-class common stock structure concentrates voting control with Class B holders, limiting influence of Class A stockholders.
• No dividends are expected to be paid in the foreseeable future, relying solely on stock price appreciation for investor returns.
• Provisions in organizational documents and Delaware law could make company acquisition more difficult.
• Exclusive forum provisions may limit stockholders' ability to choose judicial forums for disputes.
• Adverse effects from natural disasters, pandemics, catastrophic events, and man-made problems on business operations and continuity.

Future Outlook

GitLab expects to continue investing significantly in research and development to enhance its DevSecOps platform, including AI capabilities, and expand its sales and marketing efforts to acquire new customers and increase sales to existing ones. The company anticipates operating expenses to increase in absolute terms but decrease as a percentage of total revenue over time. It aims to balance these investments with a focus on managing operating results and achieving long-term growth, despite potential short-term impacts on profitability. The company believes its existing cash, cash equivalents, and short-term investments will be sufficient for at least the next 12 months.

Management Comments

• "We believe GitLab offers the shortest path to unlock technology transformation and business value."
• "We intend to continue releasing new software on a monthly cadence."
• "We intend to continue investing in research and development to further enhance The DevSecOps platform and sustain our innovation and technology leadership."
• "We expect our research and development expenses to increase on an absolute basis in future periods. We foresee that such investment in research and development will contribute to our long-term growth, but may also negatively impact our short-term profitability."
• "We intend to continue to add headcount to our global sales and marketing team to acquire new customers and to increase sales to existing customers."
• "We plan to continue investing in sales and marketing, with a focus on expanding usage of our platform with our existing customers. We believe that this expansion will provide us with substantial operating leverage because the costs to expand sales within existing customers are significantly less than the costs to acquire new customers."
• "We plan to continue investing in our business so that we can capitalize on our market opportunity. We believe that these investments will contribute to our long-term growth, although they may adversely affect our operating results in the near term."
• "We expect our general and administrative expenses to increase in absolute amount for the foreseeable future given the additional expenses for accounting, compliance, and insurance as a public company."
• "We believe that our existing cash, cash equivalents, and short-term investments will be sufficient to support working capital and capital expenditure requirements for at least the next 12 months."

Industry Context

GitLab operates in the rapidly evolving DevSecOps market, which is characterized by a shift towards unified software development and security platforms. The company positions its 'single application' DevSecOps platform as a differentiator against traditional 'point tools,' aiming to accelerate innovation, improve operational efficiency, and enhance software security. The industry is highly competitive, with established players like Microsoft and Atlassian, and is increasingly integrating AI and machine learning technologies. GitLab's open-core business model and strong community contributions are key aspects of its strategy to maintain innovation and market relevance in this dynamic environment.

Comparison to Industry Standards

• GitLab competes with well-established providers such as Microsoft and Atlassian, which offer solutions across various stages of the software development lifecycle.
• The company differentiates itself by offering a 'complete DevSecOps platform delivered as a single application,' contrasting with competitors' more fragmented 'point tool' approaches.
• GitLab's open-core business model, which enables community contributions (nearly 900 contributors and over 3,000 merge requests in calendar year 2024), is a unique aspect compared to many proprietary software providers.
• The company's Dollar-Based Net Retention Rate of 122% indicates strong, but slightly declining, expansion within its existing customer base, a key metric for SaaS companies, which can be compared to industry benchmarks for similar growth-stage software firms.
• The company's high gross margin of 88% is competitive within the software industry, though it saw a slight decrease, partly due to increased cloud-related costs as SaaS adoption grows.

Management Changes

Corporate Governance

Legal Proceedings

• Dolly v. GitLab et al.: A putative securities class action filed on September 4, 2024, in the U.S. District Court for the Northern District of California, alleging material misrepresentations or omissions regarding the company's AI features and monetization during the Class Period (June 5, 2023, to June 3, 2024). The company moved to dismiss the second amended complaint in April 2025.
• Preciado v. Sijbrandij et al., Jones v. Sijbrandij et al., and Lianto v. Sijbrandij et al.: Three putative shareholder derivative cases filed on February 14, 2025, February 19, 2025, and March 28, 2025, respectively, in the U.S. District Court for the Northern District of California. These cases contain allegations similar to the securities class action, including breach of fiduciary duty and unjust enrichment. Proceedings in these cases have been stayed pending the Dolly matter.

Related Party Transactions

• The GitLab Foundation, a California nonprofit public benefit corporation, is a related party as certain of the company's officers serve as directors of the Foundation. In March 2025 and 2024, the company's board approved donations of 163,555 and 221,195 shares of Class A common stock, respectively, to the Foundation, distributed in four equal quarterly distributions. During the three months ended April 30, 2025 and 2024, the company donated 40,889 shares ($1.7 million expense) and 53,226 shares ($3.0 million expense) respectively.

Stakeholder Impact

• Shareholders: Potential for stock price volatility due to market factors, legal proceedings, and the dual-class voting structure. Positive financial results (revenue growth, reduced loss, strong cash flow) could support share price, while declining net retention rate and increased foreign exchange losses could be negative. Future capital raises could lead to dilution.
• Employees (Team Members): Continued investment in R&D and sales/marketing suggests job growth. Stock-based compensation is a significant part of compensation. Risks related to managing growth, maintaining corporate culture, and engagement models (PEOs, independent contractors) could affect employee experience and retention.
• Customers: Benefit from continued innovation and monthly feature releases on the DevSecOps platform. Risks of security breaches, service failures, or changes in pricing/packaging could negatively impact customer satisfaction and retention. The company's focus on expanding usage within existing customers indicates continued engagement.
• Suppliers/Vendors: Increased hosting expenses and consulting fees suggest continued reliance on third-party service providers. The new $130 million cloud infrastructure agreement indicates a significant commitment to a key supplier.
• Creditors: Strong cash position and positive cash flow from operations reduce immediate concerns for creditors, but ongoing losses and potential future capital needs are factors to monitor.

Next Steps

• Continue monthly software releases to enhance The DevSecOps platform.
• Continue investing in research and development, including AI capabilities, to sustain innovation and technology leadership.
• Continue to add headcount to global sales and marketing teams to acquire new customers and increase sales to existing ones.
• Continue investing in and developing partnerships, alliances, channels, and integrations to broaden distribution and brand awareness.
• File amended tax returns for fiscal years 2018 through 2023 as per the Bilateral Advanced Pricing Agreement (BAPA).
• Monitor and respond to ongoing legal proceedings, including the securities class action and shareholder derivative lawsuits.
• Merline Saintil's pre-arranged stock sales under Rule 10b5-1 are scheduled to occur between July 2, 2025, and December 31, 2025.

Key Dates

Recommendation

Keywords

DevSecOps, Software Development, SaaS, Open Source, AI, Cloud Infrastructure, Application Security, GitLab, SEC Filing, Quarterly Report, Financial Results, Enterprise Software, Cybersecurity, Digital Transformation