10-K: GitLab Reports Strong Revenue Growth, Positive Cash Flow

GitLab Inc. announced robust 26% revenue growth to $955.2 million for fiscal year 2026, alongside a significant shift to positive operating cash flow and adjusted free cash flow, despite an increased net loss.

Summary

• Total revenue for fiscal year 2026 increased by 26% to $955.2 million, up from $759.2 million in fiscal year 2025.
• Subscription revenue (self-managed and SaaS) grew by 28% to $864.7 million in fiscal year 2026.
• Net loss attributable to GitLab increased to $56.0 million in fiscal year 2026, compared to $6.3 million in fiscal year 2025.
• Operating cash flow margin improved significantly to 24% in fiscal year 2026, from (8)% in fiscal year 2025.
• Adjusted free cash flow reached $219.6 million in fiscal year 2026, a substantial increase from $120.0 million in fiscal year 2025.
• The Dollar-Based Net Retention Rate was 118% for fiscal year 2026, a slight decrease from 123% in fiscal year 2025.
• Customers with Annual Recurring Revenue (ARR) of $100,000 or more increased to 1,456 in fiscal year 2026, from 1,229 in fiscal year 2025.
• Customers with ARR of $1.0 million or more grew by 26% to 155 in fiscal year 2026, from 123 in fiscal year 2025.
• Gross profit margin slightly decreased to 87% in fiscal year 2026, from 89% in fiscal year 2025.
• Operating expenses increased across sales and marketing (13%), research and development (15%), and general and administrative (1%).
• Legal proceedings, including a securities class action and three shareholder derivative cases, were dismissed with prejudice on January 26, 2026.
• The board of directors approved a share repurchase program of up to $400.0 million of Class A common stock on March 2, 2026.

Sentiment

Score: 7

Explanation: StockSavvy.ai views this filing positively due to strong revenue growth and a significant turnaround in cash flow, indicating improved operational efficiency. While net loss increased and gross margin slightly declined, the overall financial health and strategic positioning, especially with AI integration and enterprise customer growth, are favorable.

Positives

• Total revenue increased by a strong 26% year-over-year to $955.2 million, demonstrating continued market demand for the platform.
• Operating cash flow turned significantly positive to $232.9 million (24% margin) in fiscal year 2026, a substantial improvement from a negative $64.0 million (-8% margin) in fiscal year 2025.
• Adjusted free cash flow also showed strong positive growth, reaching $219.6 million in fiscal year 2026, up from $120.0 million in fiscal year 2025.
• The number of customers with ARR of $100,000 or more increased to 1,456, indicating successful penetration into larger accounts.
• The number of customers with ARR of $1.0 million or more grew by 26% to 155, highlighting strong enterprise adoption and expansion.
• Loss from operations improved, decreasing to $(70.5) million in fiscal year 2026 from $(142.7) million in fiscal year 2025.
• All significant legal proceedings, including a securities class action and three shareholder derivative suits, were dismissed with prejudice, removing a source of uncertainty and potential liability.
• The approval of a $400.0 million share repurchase program signals management's confidence in the company's financial health and commitment to returning value to shareholders.
• GitLab Duo Agent Platform, incorporating AI, became generally available in January 2026, positioning the company for future innovation and market relevance.

Negatives

• Net loss attributable to GitLab increased to $56.0 million in fiscal year 2026 from $6.3 million in fiscal year 2025, primarily due to increased operating expenses and a shift in other income/expense.
• Gross profit margin slightly decreased to 87% in fiscal year 2026 from 89% in fiscal year 2025, impacted by increased third-party hosting costs for SaaS and cloud usage.
• The Dollar-Based Net Retention Rate decreased to 118% in fiscal year 2026 from 123% in fiscal year 2025, suggesting a slight slowdown in expansion within existing customer accounts.
• Interest income decreased due to lower interest rates during fiscal year 2026 compared to fiscal year 2025.
• Other income (expense), net, shifted to a significant expense of $(23.3) million in fiscal year 2026 from an income of $9.2 million in fiscal year 2025, primarily due to foreign exchange losses and an indirect tax credit expense related to the JiHu formation.

Risks

• Challenges in managing rapid growth, including headcount, systems, processes, and controls, could adversely affect business and financial results.
• Recent growth rates may not be indicative of future growth, and the company may not sustain its revenue growth rate, making future prospects difficult to evaluate.
• A history of losses and anticipated increases in operating expenses mean the company may not achieve or sustain profitability on a consistent basis.
• Heightened risk of security and privacy breaches due to the use of third-party open source technologies, community-contributed code, and new AI-specific attack vectors.
• Intense competition from well-established providers like Microsoft (GitHub), Atlassian, JFrog, and Harness could lead to market share loss.
• Inability to respond to rapid technological changes, particularly in AI-assisted development, with new solutions could materially affect operating results.
• Service failures due to material defects, software bugs, or external issues could harm reputation, reduce market share, and lead to liability claims.
• The rapidly evolving market for DevSecOps services has uncertain growth expectations, which could adversely affect future results.
• Dependence on sales and marketing strategies to drive revenue growth, with potential for unsuccessful efforts or declines in customer renewals and expansions.
• Operating results may fluctuate significantly due to factors like customer acquisition/retention, timing of revenue recognition, macroeconomic conditions, and seasonality.
• Changes in product pricing and packaging, or the introduction of new products, may result in customers purchasing on less favorable terms or downtiering subscriptions.
• Implementation of AI and machine learning technologies may result in reputational harm, liability (e.g., IP infringement, data privacy), increased expenditures, or flawed output.
• The company's core value of transparency, while beneficial, can have unintended negative consequences, such as competitor access to information or increased regulatory scrutiny.
• The publicly available GitLab Handbook may not always be up-to-date or accurate, potentially leading to negative third-party scrutiny or adverse business effects.
• Customers may choose to remain on free self-managed or SaaS product offerings instead of converting to paying customers, impacting revenue growth.
• Failure to effectively expand marketing and sales capabilities could harm the ability to increase the customer base and achieve broader market acceptance.
• Reliance on the management team and other key team members, with the loss of personnel or inability to hire/retain qualified individuals (especially in AI/ML) posing a risk.
• Challenges in maintaining corporate culture as the company grows could lead to a loss of innovation, creativity, and teamwork.
• Risks associated with engaging team members through Professional Employer Organizations (PEOs) and as independent contractors, including compliance and enforceability issues.
• Channel partners providing a poor customer experience could damage the brand or hinder company growth.
• Reliance on internal tools and data models for performance metrics, which are not independently verified and may contain inaccuracies, could harm reputation.
• Dependence on independent open source contributors to develop and enhance technologies, with potential for delays or increased expenses if contributions decline.
• Failure to protect intellectual property rights or claims by others of infringement could diminish brand value and weaken competitive position.
• The open source and source code-available business model makes software vulnerable to authorized and unauthorized distribution and sale.
• Exposure to lawsuits or other claims, including potential securities class action litigation and shareholder derivative suits (though recent cases were dismissed).
• Risks associated with merger and acquisition activities and joint ventures, including integration challenges, diversion of management attention, and potential dilution.
• If estimates or judgments relating to critical accounting policies prove incorrect, operating results could be adversely affected.
• Adverse changes in tax laws or regulations, or their application, could increase costs and impact business (e.g., OBBBA, OECD Pillar 2, digital service taxes).
• Termination of relationships with payment solutions providers could severely impact revenue collection.
• Extensive governmental regulations related to data privacy (GDPR, UK GDPR, CCPA/CPRA, PIPL, PCI-DSS) and content moderation (EU Digital Services Act) could result in significant liability and reputational harm.
• Subject to various governmental export controls, trade sanctions, and import laws, with past inadvertent violations and ongoing compliance challenges.
• Failure to comply with anti-bribery, anti-corruption, and anti-money laundering laws could lead to penalties and adverse consequences.
• Sales to government entities are subject to challenges and risks, including competitive environments, budgetary cycles, and specific AI compliance policies.
• Dependence on the quality and volume of code contributed by open source contributors, with potential for decline if user concerns are not addressed or AI adoption increases.
• Seasonality in sales, with a higher percentage of new and renewal contracts in the last two fiscal quarters, can cause fluctuations in results.
• Downturns or upturns in sales are not immediately reflected in results due to revenue recognition over subscription terms.
• The length of the sales cycle, particularly for large customers, can be unpredictable and require considerable time and expense.
• As a remote-only company, risks include technology failures, difficulties in developing/preserving corporate culture, and challenges in collaboration.
• Unfavorable media coverage or public disagreement with policies/practices could negatively impact business and brand.
• International expansion plans could subject the company to additional costs and risks, including legal, political, economic, and social uncertainties in China related to the JiHu joint venture.
• Exposure to fluctuations in currency exchange rates and interest rates could negatively affect results of operations.
• Failure to maintain effective systems of internal controls and disclosure controls could have a material adverse effect.
• Significant costs and management resources are devoted to operating as a public company.
• The potential need to raise additional capital in the future, which may not be on acceptable terms or at all, could adversely affect operating results.
• The market price of Class A common stock may be volatile, and sales of substantial amounts could cause a decline.
• The stock repurchase program may not be fully consummated or preserve/enhance long-term stockholder value.
• The dual class structure of common stock concentrates voting control with Class B holders, limiting influence on corporate matters.
• Stockholder advisory firms and large institutional investors may oppose the dual class structure, adversely affecting the trading market.
• If industry or financial analysts do not continue to publish research or issue unfavorable reports, stock price and trading volume could decline.
• No dividends are expected in the foreseeable future, meaning returns depend on stock price appreciation.
• Provisions in organizational documents and Delaware law could make an acquisition more difficult and limit stockholder influence.
• Exclusive forum provisions may limit stockholders' ability to choose a judicial forum for disputes.
• Adverse effects from natural disasters, pandemics, catastrophic events, and man-made problems like acts of war or terrorism.

Future Outlook

GitLab plans to continue investing in research and development to advance feature maturity across more stages of the DevSecOps lifecycle, drive growth through go-to-market expansion, increase expansion within its existing customer base, and further grow adoption of its SaaS and usage-based offerings, particularly with the GitLab Duo Agent Platform. The company also intends to grow and invest in its global partner network.

Management Comments

• "Our business has experienced rapid growth. We generated revenue of $955.2 million and $759.2 million in fiscal year 2026 and fiscal year 2025, respectively, representing growth of 26%."
• "During this period, we continued to invest in growing our business to capitalize on our market opportunity."
• "We believe that our values and culture are a competitive advantage within our industry, and we will continue to invest time and resources in building our culture to drive superior business results."
• "We are highly dependent on our management, highly skilled engineers, sales team members and other professionals. It is crucial that we continue to identify, attract and retain valuable team members."
• "We believe our open source approach helps us acquire, retain, and grow our paying customer base."
• "We intend to continue to invest in our research and development capabilities to extend the GitLab platform and capabilities."
• "We believe that our existing cash, cash equivalents, and short-term investments will be sufficient to support working capital and capital expenditure requirements for at least the next 12 months."

Industry Context

StockSavvy.ai notes that GitLab's strong revenue growth and focus on AI-driven DevSecOps solutions align with broader industry trends emphasizing automation, security integration, and developer productivity. The increasing adoption of AI in software development is a key driver, and GitLab's 'intelligent orchestration platform' directly addresses the challenges of fragmented toolchains in this evolving landscape. The competitive environment, particularly with Microsoft's GitHub, remains intense, underscoring the importance of GitLab's differentiation through flexible deployment, LLM neutrality, and its open-core model.

Comparison to Industry Standards

• GitLab's 26% revenue growth for FY2026 is competitive within the high-growth software and SaaS industry, though some hyper-growth companies might exceed this. For example, while not directly comparable due to different scales and market segments, companies like Datadog (DDOG) or MongoDB (MDB) have shown similar or higher growth rates in certain periods, reflecting strong demand for developer tools and cloud infrastructure.
• The Dollar-Based Net Retention Rate of 118% is strong, indicating healthy customer expansion, though a slight decrease from 123% in FY2025. This is generally considered a good retention rate for SaaS companies, often benchmarked against peers like Atlassian or JFrog, which also aim for high net retention to demonstrate product stickiness and upsell potential.
• The shift to a positive operating cash flow margin of 24% from a negative (8)% is a significant operational improvement, indicating increased efficiency and scalability. This is a positive signal compared to many growth-stage tech companies that may still be prioritizing market share over profitability.
• The growth in $100,000+ ARR customers (to 1,456) and $1.0 million+ ARR customers (to 155, a 26% increase) demonstrates successful enterprise adoption, a key indicator of market validation and ability to serve large, complex organizations, comparable to the enterprise sales success seen by established players in the DevOps space.

Management Changes

Corporate Governance

Legal Proceedings

• Dolly v. GitLab et al. (securities class action): Filed September 4, 2024, alleging material misrepresentations regarding AI features and monetization. The case was dismissed with prejudice and final judgment was entered on behalf of GitLab on January 26, 2026.
• Preciado v. Sijbrandij et al., Jones v. Sijbrandij et al., and Lianto v. Sijbrandij et al. (shareholder derivative cases): Filed February-March 2025, containing allegations similar to the securities class action. Plaintiffs agreed to voluntarily dismiss their respective claims, and all three cases were dismissed on January 26, 2026.
• Management believes there are no other current legal proceedings that would individually or collectively have a material adverse effect on the business, financial condition, or operating results.

Related Party Transactions

• GitLab Information Technology (Hubei) Co., LTD (JiHu): A joint venture in the People's Republic of China, in which GitLab holds approximately a 54% equity stake and consolidates its financials. JiHu maintains employee stock option plans for its employees.
• GitLab Foundation: GitLab's board of directors approved annual donations of Class A common stock to the GitLab Foundation, a California nonprofit public benefit corporation. Certain of GitLab's officers serve as directors of the Foundation.

Stakeholder Impact

• Shareholders: Positive impact from strong revenue growth, improved cash flow, and the announcement of a share repurchase program. The dismissal of legal proceedings also reduces uncertainty. However, the increased net loss and slight decrease in Dollar-Based Net Retention Rate could be areas of concern. The dual-class structure limits voting influence for Class A shareholders.
• Employees (Team Members): Continued investment in research and development, sales, and marketing suggests ongoing growth opportunities. The company emphasizes its unique all-remote culture, diversity, inclusion, and competitive compensation, which are positive for retention and recruitment. However, the CISO role change and past restructuring charges indicate some organizational shifts.
• Customers: Benefit from continuous innovation (172 consecutive monthly releases), new AI-powered features (GitLab Duo Agent Platform), flexible deployment options, and a commitment to security and compliance. The Forrester study suggests significant ROI and faster time to market for customers. The slight decrease in Dollar-Based Net Retention Rate might indicate some customers are not expanding as rapidly.
• Suppliers/Partners: The company's growth strategy includes expanding its global partner ecosystem, which could lead to increased opportunities for hyperscalers, system integrators, resellers, and technology partners. Increased cloud-hosting costs suggest continued reliance on third-party service providers.
• Creditors: Improved operating cash flow and a strong cash position (over $1.2 billion in cash, cash equivalents, and short-term investments) enhance the company's ability to meet its financial obligations.

Next Steps

• Continue investing in research and development to mature capabilities across additional stages of the DevSecOps lifecycle.
• Drive growth through go-to-market expansion, including sales and marketing initiatives and expanding the global partner ecosystem.
• Focus on customer success and expansion initiatives to increase adoption within existing customers, particularly larger enterprises.
• Further grow adoption of SaaS and usage-based offerings, including differentiated deployment options for highly regulated industries.
• Continue to grow and invest in the global partner network, including hyperscalers, technology partners, resellers, and system integrators.
• Monitor and ensure compliance with evolving U.S. federal government policies and obligations relating to the use of AI for products sold to government entities.
• Continue to evaluate the impact of the One Big Beautiful Bill Act (OBBBA) on consolidated financial statements.
• The company's board of directors approved a share repurchase program of up to $400.0 million of its Class A common stock, which may be executed in the future.

Key Dates

Recommendation

GitLab demonstrates strong revenue growth and a significant improvement in cash flow, indicating a healthy underlying business and operational efficiency. The dismissal of legal proceedings removes a notable overhang. However, the increased net loss and a slight dip in the Dollar-Based Net Retention Rate warrant caution. The extensive list of risks, particularly those related to intense competition, rapid technological change (especially in AI), and international operations, suggests that while the company is performing well, it operates in a dynamic and challenging environment. The share repurchase program is a positive, but the dual-class structure and potential for future capital raises add complexity. A 'hold' recommendation reflects the balance of strong performance and strategic positioning against inherent industry and operational risks, suggesting investors monitor execution on AI monetization and sustained customer expansion.

Keywords

DevSecOps, AI orchestration, Software development lifecycle, Open-core model, SaaS, Cloud computing, Enterprise software, Cybersecurity, Data privacy, Financial results, Annual Recurring Revenue, Dollar-Based Net Retention Rate, GitLab Duo, Artificial Intelligence, SEC filing, 10-K, GTLB