GitLab Introduces Flat-Rate Code Reviews and Free AI

InfoQ reports that GitLab released versions 18.10 and 18.11 of its DevSecOps platform on April 27, 2026. Per InfoQ, the releases introduce a flat $0.25 per automated code review price, regardless of merge-request size, and add admin-level hard limits on monthly AI credit spend. InfoQ also reports that free-tier group owners on GitLab.com can now purchase GitLab Credits to unlock the Duo Agent Platform, and that SAST false positive detection reached GA for Ultimate customers. InfoQ quotes GitLab Chief Product and Marketing Officer Manav Khurana: "Development teams are shipping more code faster than ever, and the AI automation that keeps code secure and ensures it gets safely deployed has to keep pace -- running across every project and every group, with the context of the entire platform."

InfoQ describes the flat-rate change as replacing token-based billing; GitLab is reported to contrast the new $0.25 per review with competing token models it says charge $15 to $25 per review. The releases enable group-level credit allocation and a usage dashboard that shows which agents and flows consume credits, per InfoQ and GitLab release notes. InfoQ reports the Duo Agent Platform reached GA in January 2026 and that free-tier customers can now buy credits rather than requiring per-seat licenses.

Editorial analysis: Companies adopting usage-based or per-action pricing for AI services often seek simpler cost predictability and to lower the friction of running small, frequent operations across many repositories. Observed patterns in similar transitions include increases in API call volume after per-action prices fall and a subsequent need for stronger governance and observability to control spend and performance trade-offs.

Editorial analysis: For platform and DevOps engineers, the flat per-review price and group-level credits change the economics of running automated checks. Lower per-review cost can encourage more frequent automated reviews, which may reduce manual backlog but increase compute and CI/CD load. Agentic capabilities on the free tier expand experimentation scope, which increases the importance of monitoring agent behavior, credit consumption, and false-positive handling.

Editorial analysis: Observers should watch aggregate credit consumption trends, merge-request latency changes after broader rollout, whether competitors adjust pricing models, and adoption metrics for Duo Agent Platform on free-tier groups. Also monitor operational metrics for CI/CD capacity and SAST signal-to-noise as usage scales.