918,415 GitLab Assets on HTTP: Measuring the Source of Truth

GitLab assets discovered on HTTP: assessing the source of truth

GitLab assets found on HTTP make up around 69 percent of the total fingerprinted assets, according to measurements conducted by ZoomEye on October 1, 2026. The HTTP-scoped figure represents 918,415 assets out of the total.

However, this measurement is not a comprehensive assessment of all GitLab instances. It only covers reachable assets and does not provide information about whether an instance is self-managed or hosted by a vendor, the registration status, or the patched version being used.

Vendor research has identified a GitLab vulnerability (CVE-2026-85706) with observed exploitation attempts, advising customers to upgrade promptly. Nevertheless, the advisory does not include a mechanism for determining which instances have been successfully compromised.

It is important to note that a significant portion of the fingerprinted population is hosted by the vendor or managed platforms that centrally apply updates. These instances are outside the customer's responsibility to patch, even though they are included in the global service count.

To make this measurement actionable, three refinements are necessary:

1. Scope by organization: Combine app= GitLab && service= http with organizational or network conditions to produce a list of owned instances rather than a global figure.

2. Separate the web interface from the SSH endpoint used for Git operations, as both have different exposure requirements.

3. Check for open registration and public project visibility, as these features can turn a reachable instance into an intelligence source for an attacker.

GitLab's own security posture is not the focus of this article; the measurement is. The ZoomEye records for these hosts include HTTP headers, certificate details, and response characteristics, which can help operators distinguish between self-managed deployments and hosted instances and confirm the interface that is answering.

While the count of 918,415 HTTP-scoped GitLab assets provides context, it is essential to identify the specific finding that should not be on the list. This information can help organizations prioritize their patching efforts and secure their GitLab deployments effectively.