BlitzLab Scoring · Oct 2026 · Model v1.0 (frozen)
GitLab — Blitz Index 52 (C)
An elite-margin DevSecOps incumbent decelerating into GitHub's shadow, its AI second curve still unproven in revenue.
52Grade C
Confidence: High · Category: platforms
Score breakdown
| Section | Score | Detail |
|---|---|---|
| A · Speed | 15 / 25 | Growth +25.8% and slowing (guidance +18–19%); DBNRR down from 130% to 117% |
| B · Moat | 36 / 60 | Elite gross margin (84%) and self-hosting lock-in, but no quantified edge over GitHub is disclosed anywhere |
| C · Creative destruction | 8 / 15 | The single-platform DevSecOps shift is real; Duo AI consumption ($40M+ run rate) is still early |
| D · BlitzFailing | −7 | SBC at 22.5% of revenue, an AI-monetization securities lawsuit, founder voting control of 50.4% |
Radar axes (0–100): Moat 60 · Speed 60 · Creative 53.3.
Watch item
Gates: G1 ✓ · G2 ✓. Bar ≈ $11.3B (FY2027E revenue × 10); the market cap at 82% of the bar is a valuation note, kept out of the gate (BE precedent).
Strengths
- DevSecOps PMF is proven: ~$1.06B TTM revenue, DBNRR 117%, cRPO +20%+, 1,571 customers at $100K+
- Consumption signals: paid AI run rate $15M → $40M+ in one quarter; Flex drew 130+ customers in six weeks
- First Order +100% YoY (Q2 FY2027) — new-logo inflow re-accelerating
- Debt-free with ~$1.26B net cash and a $400M buyback executed; FY2027 guidance raised twice
Concerns
- Consistent deceleration: +30.9% → +25.8% → guidance +18–19%, approaching the sub-20% line
- Gross margin down three straight years (89.7% → 84%) on structural AI/SaaS hosting costs
- No disclosed win-rate or share data against GitHub — differentiation remains a qualitative claim
- Duo revenue is not broken out, so the second curve cannot be verified in numbers
Next earnings
Dec 1, 2026 · Expected
Coverage
GitLab Inc. · Q3 FY2027 due Dec 1, 2026 (expected) · Score 52 · Grade C
BlitzLab scores businesses against a scholar’s standard — not investment advice. No price targets, no buy/sell recommendations. Figures are from SEC filings (XBRL) as labeled in the source scorecard.