Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

GitLab Orbit: AI Agent Context at Enterprise Scale

Gitlab
10/30/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


How are you? Thank you. Hey, Angelo. Thank you. Great to see you. Great to see you. You have something to show us? I think we have a few things to show you. We've been cooking. So, Manav's right. For a single, small, local repo, agents shine. But that's not the stack our enterprise customers are working on. With large monorepos or multi-repos, agents break down because they're trying to chain together customers. So, for example, if you have a single, small, local repo, and you're trying to chain together customers, you're not going to be able to do that. You're not going to be able to do that. You're not going to be able to do that. You're not going to be able to do that. But that's not the stack our enterprise customers are working on. With large monorepos or multi-repos, agents break down because they're trying to chain together contacts by calling dozens of tools and running thousands of API requests. But the data quality suffers. So we had to reimagine context at scale. So, Angelo, how about you tell us how we solve this by building Orbit? Thank you, Meg. And just a touch on that. GitLab itself is a classic example of a mega-monolith repo and thousands of repositories within our own organization. So that's where we had a pretty crazy question. What if we took all of GitLab's data and turned it into a graph that agents could query directly? And we did that by building a highly distributed system in just three months that essentially is an indexing engine. And as I show you here in the schema, what we can do is we take... Actually just the other week, we've been able to index 160,000 repositories into code graphs. And as you can see on the right here, we take those graphs and we marry that data to the rest of the software development lifecycle. And that unlocks a variety of different questions, which we'll jump into. But one thing to touch on here is we've built this for scale. So all of this can be indexed, namely 500 million nodes and 2 billion edges in just 15 minutes. So to touch on that a little bit more and how this improves agentic outcomes, I'd first like to ask everybody, has anyone ever gone through the painful experience of refactoring a code base? I don't know. Maybe a show of hands? Me too. It's not fun. So with that, let's pull up a little bit of an example of what Orbit can do for you. So I'm going to kick off this run here for what we call the Orbit benchmark. And as you can see, we'll go into a little bit about what Orbit does. We've got this Orbit benchmark here. And we've asked a very relatable question to GitLab itself. So at GitLab, we're actually currently exploring decoupling authentication authorization within GitLab itself. And as anyone knows, if you have a mega monolith, decoupling such a critical service is a huge pain. And if you're doing that manually, that'll take months. And if you're doing that with agents, there's high risk involved, right? And in this repo, how many files are there? There's around 50,000 files, and it's millions of lines of Ruby code. And so if we're going to make any change, we want to know what's going to be affected and how. So if we go back to the benchmark here that's already running, we've asked a prompt saying, can you get the complete authorization class hierarchy and all of its front-end consumers within the GitLab monolith? And remember, this is 50,000 files. So let's jump into a little bit what's going on here. So quad code without Orbit is doing the normal thing that you would expect any agent to do. It's searching through all 50,000 of those files. It's using the classic tools like grep and text search, and essentially assembling the entire picture from scratch. On the right, the agent has access to Orbit. And what we've done is built a universal code-indexing engine that indexes over 11 languages into a unified graph that essentially acts as a pre-built map for your agents to query directly. And what that means is that agents are able to write their own queries here, as you can see, and get back the entire authorization tree in just a few hundred milliseconds. And so that effectively allows you to pretty much answer most of the questions that you would normally ask an agent, but get that answer back a lot quicker with a lot higher quality. And as you can see, the agent on the left is still running. And here's the output report with all the authorization classes. And to increase accuracy, we've leveraged a lot of different techniques like SSA and various compiler techniques. And Angelo, I think what I saw when you scrolled up, the agent on the right with Orbit is already done cooking at just a minute and 15 seconds. We're still chugging along on the left. But I have the most important question of all, which is, tell us about the data quality. So that is the most interesting part about this whole experiment that we've been running. So as you said, it's still running, and so we won't bore everybody with the results there. But with this previous run, you can see that in just one minute, we completed the result. And we just saw that with the previous run. And it took over 11 minutes. So this is, Manav, you and I were just talking about this. This is you and I, if we're coding, we can stay in the loop on the right here. And on the left, as a developer, maybe I'll go get some coffee. I'm going to break your flow. Yes, we don't want to lose our flow. So with that, the last thing I wanted to touch on that's very interesting about this benchmark is the accuracy. So we did something to measure, in a deterministic way, the output of this report. What we did is we took the actual Ruby on Rails runtime. We generated a script to get that same class hierarchy. And as you can imagine, both of these cloud codes don't have access to that runtime. So what we're doing is comparing the classes that come from the actual runtime itself with the results from the agent. And we've instructed the agent to output those classes. And what's very interesting is it's not as complete in the amount of rules that it found from the authorization classes. But Cloud Code without Orbit actually hallucinated 1,000 more rules as compared to Cloud Code with Orbit. That's 1,000 more rules that you have to manually go make sure that it got right. Yep, and so that's what we're talking about with agent trust. So with that, we can imagine how this is super useful for a developer like myself on your local machine. But we didn't want to just stop there. We wanted to empower all of organizations and enterprises with this technology. And with that, we built a service. So Meg, why don't you show us what else we've been cooking? Yeah, so as Angelo's alluding to, we didn't just stop at indexing the code base. We indexed your entire GitLab instance, which means you have access to all of your rich GitLab SDLC data. So one of the perfect examples is a pipeline analysis. For all the DevOps and platform teams in the room, you might have heard that one in three CI pipelines fail, which can really add up at scale. And in the paradigm before Orbit, you could really only analyze your kind of pipeline health at a single project at a time. But now with Orbit, because we have these traversal and aggregation abilities, you can understand thousands of pipelines and thousands of projects and their pipelines at once. So another one of our goals with Orbit is to make Duo Agent Platform even more capable. So we're jumping in here to agentic chat, and we're going to ask a pretty heavy-hitting question here. We're going to ask the agents to deep research our most recurrent failing pipelines and their jobs over the last 60 days. So in GitLab Org, that's 8,000 projects, and it's 12 million pipelines. This is a huge question that we're asking. So we have two instances. We have GitLab Duo Agent in the old paradigm on the left with access to just the GitLab API, and we have the same GitLab Duo Agent on the right with access to Orbit. And I'm going to fast-forward into a completed output and show you what we're looking at here as well. So on the left, let's zoom in for just a moment. The agent says to us, I'll be straight with you, I can't do it. And this is a limitation not of GitLab Duo, but of all agents today, because they don't have access to Orbit. To achieve an analysis like this, it would have to make tens of thousands of API calls, and the API would just time out. But we have Orbit now. So our agent on the right is actually traversing the whole graph and aggregating the job failures. It's understanding the projects, the failed pipelines, and the common field jobs underneath them. It's giving us a CI compute cost attribution and looking at those common field pipelines, and then ultimately taking us to the most important question of all, which is, what do I change to resolve this? So as we continue to see the agent with Orbit, it gives us the shared CI template hotspots and points us exactly to what I'm going to work on today, which is resolve these. And with this resolution, we're probably going to save developers a few headaches and maybe a few dollars on CI compute. Amazing. This is just one of the possibilities that Orbit makes possible. APPLAUSE We've been doing a lot of cool stuff. And Angelo, I know our engineers have been asking some crazy questions because Orbit can go further than any agent ever could. How about you tell us some of those wild things our engineers have been looking at? Thanks, Megan. That's a great question. And we as a team sat down, and we've been just playing around with it and asking some of the most wild engineering questions that you would ask when you can ask anything about your GitLab instance. And just some examples here that we pulled up off the cuff. One of them is, find all the dead repos across GitLab Org, or find all the critical services within the fulfillment department and who maintains them and who is the expert in those services. And then one of the craziest ones was we actually took the call graph technology that we built and indexed all five years' worth of repositories, then used the graph that's available for the SDLC and did a cross-comparison. And we were able to basically get a trend line of various security fixes throughout GitLab over the past five years. So basically, whatever you can do with your imagination is the limit. And like Manav said, if the nervous system is what lets your body act coherently, then Orbit is that for your entire software organization. And until today, your agents have been definitely flying blind without one. And agents in the GitLab Orbit just work a lot better as a result. Yep, we're sending them to Orbit. Amazing, amazing. Hey, thank you. Great job, Antolo.

TL;DR

  • AI coding agents break down in enterprise monorepos because they rely on thousands of sequential API calls and text searches, producing slow, hallucination-prone results that erode developer trust.
  • GitLab Orbit is a distributed graph indexing engine that compiles 500 million nodes and 2 billion edges across 11 programming languages in under 15 minutes, giving agents a pre-built, queryable map of the entire codebase.
  • A live benchmark shows Orbit reducing agent task completion time from over 11 minutes to 75 seconds and cutting hallucinated authorization rules from 1,000-plus to near zero on a 50,000-file Ruby monolith.
  • Orbit extends beyond code to the full SDLC, enabling cross-project pipeline analysis across 12 million pipelines and 8,000 projects — a query that would time out any agent relying solely on the GitLab API.

The Enterprise AI Context Problem

This session from GitLab Transcend 2026 opens with a sharp diagnosis of why AI coding agents fail at enterprise scale. Product Manager Meg Corren and Engineering Lead Michael Angelo Rivera explain that while agents perform well in small, isolated repositories, they collapse under the weight of mega-monorepos and multi-repo environments. The root cause is architectural: agents must chain together context by issuing thousands of API requests and running exhaustive text searches across tens of thousands of files, which degrades data quality, inflates execution time, and produces hallucinated outputs. GitLab's own codebase — a monolith with 50,000 files and millions of lines of Ruby — served as the proving ground for a new approach.

GitLab Orbit: Graph-Powered Code Intelligence

The core of the presentation is a live benchmark demonstrating GitLab Orbit, a highly distributed indexing engine built in three months that compiles code across 11 languages into a unified graph of 500 million nodes and 2 billion edges — fully indexed in under 15 minutes. The benchmark poses a real engineering challenge: retrieve the complete authorization class hierarchy and all front-end consumers within the GitLab monolith. Without Orbit, Claude Code spends over 11 minutes running grep and text searches, ultimately hallucinating more than 1,000 erroneous authorization rules. With Orbit, the same agent writes a graph query and returns the complete, accurate result in approximately 75 seconds, with hallucinations reduced to near zero. The accuracy improvement is validated deterministically by comparing agent output against the actual Ruby on Rails runtime class hierarchy.

SDLC-Wide Intelligence and Pipeline Analytics

Beyond code indexing, Orbit extends to the full GitLab SDLC data layer. Meg demonstrates a pipeline analysis use case in which the GitLab Duo Agent — equipped with Orbit — is asked to deep-research the most recurrent failing pipelines and jobs across 8,000 projects and 12 million pipelines over 60 days. Without Orbit, the agent explicitly refuses, noting that the required tens of thousands of API calls would time out. With Orbit, the agent traverses the graph, aggregates job failures, attributes CI compute costs, and surfaces shared CI template hotspots for immediate remediation. The team also highlights exploratory queries their engineers have run: identifying dead repositories, mapping critical service ownership, and generating a five-year trend line of security fixes across GitLab's own history — capabilities that were previously impossible for any agent.

Chapters

0:00 - Why Enterprise Agents Fail
0:44 - Introducing GitLab Orbit
1:54 - Scale and Architecture
2:29 - Live Benchmark Setup
4:20 - Speed and Accuracy Results
5:56 - Hallucination Measurement
7:11 - Pipeline Analysis at Scale
10:04 - Wild Engineering Queries
11:23 - Closing Summary

Key Quotes

0:37 "We had to reimagine context at scale."
1:01 "What if we took all of GitLab's data and turned it into a graph that agents could query directly? ..."
1:54 "All of this can be indexed, namely 500 million nodes and 2 billion edges in just 15 minutes."
6:35 "Cloud Code without Orbit actually hallucinated 1,000 more rules as compared to Cloud Code with Orbit. That's 1,000 more rules that you have to manually go make sure that it got right."
8:43 "I'll be straight with you, I can't do it. And this is a limitation not of GitLab Duo, but of all agents today, because they don't have access to Orbit."
11:11 "If the nervous system is what lets your body act coherently, then Orbit is that for your entire software organization. And until today, your agents have been definitely flying blind without one."

FAQ

How does GitLab Orbit improve AI agent accuracy compared to standard code search?

Orbit replaces sequential text searches and grep-based tool calls with pre-built graph queries. In the benchmark shown, this reduced hallucinated authorization rules from over 1,000 to near zero, validated by comparing agent output against the actual Ruby on Rails runtime class hierarchy.

What kinds of questions can Orbit answer that traditional agents cannot?

Orbit enables queries that would require tens of thousands of API calls and time out on standard agents — such as analyzing 12 million pipelines across 8,000 projects, identifying dead repositories across an entire GitLab organization, mapping critical service ownership by department, and generating multi-year security fix trend lines from historical repository data.


Categories:
  • » Cybersecurity » Application Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • AI & Machine Learning
  • DevSecOps
  • Demo
  • Technical Deep Dive
  • Security Operations
  • Best Practices
  • AI coding agents
  • graph-based code indexing
  • enterprise monorepo management
  • hallucination reduction
  • CI
  • CD pipeline analytics
  • SDLC data integration
  • code intelligence
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: GitLab Orbit: AI Agent Context at Enterprise Scale

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Nov
                  10

                  Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service

                  11/10/202601:00 PM ET
                  • Nov
                    12

                    Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                    11/12/202601:00 PM ET
                    More events

                    Industry Events (Sponsor Hosted)

                    • Nov
                      04

                      Aligning Agentic Intent: Understanding Your Agents' True Potential and Performance

                      11/04/202611:00 AM ET
                      • Nov
                        05

                        Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption

                        11/05/202602:00 PM ET
                        • Nov
                          10

                          Agentic Shopping and Muse: Insights for the 2026 Holiday Season

                          11/10/202601:00 PM ET
                          • Nov
                            19

                            Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

                            11/19/202601:00 PM ET
                            • Jan
                              19

                              HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.

                              01/19/202702:00 PM ET
                              More events

                              Upcoming Webinar Calendar

                              • 11/04/2026
                                11:00 AM
                                11/04/2026
                                Aligning Agentic Intent: Understanding Your Agents' True Potential and Performance
                                https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-true-potential-and-performance/
                              • 11/05/2026
                                02:00 PM
                                11/05/2026
                                Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                                https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                              • 11/10/2026
                                01:00 PM
                                11/10/2026
                                Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service
                                https://www.truthinit.com/index.php/channel/2191/zendesk-from-ai-readiness-to-results-a-framework-for-transforming-it-service/
                              • 11/10/2026
                                01:00 PM
                                11/10/2026
                                Agentic Shopping and Muse: Insights for the 2026 Holiday Season
                                https://www.truthinit.com/index.php/channel/2219/agentic-shopping-and-muse-insights-for-the-2026-holiday-season/
                              • 11/12/2026
                                01:00 PM
                                11/12/2026
                                Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                                https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                              • 11/19/2026
                                01:00 PM
                                11/19/2026
                                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                                https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                              • 11/19/2026
                                01:00 PM
                                11/19/2026
                                Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                                https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                              • 01/19/2027
                                02:00 PM
                                01/19/2027
                                HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                                https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                              Truth in IT
                              • Sponsor
                              • About Us
                              • Terms of Service
                              • Privacy Policy
                              • Contact Us
                              • Preference Management
                              Desktop version
                              Standard version