GitLab runs phishing test against employees – and 20% handed over credentials

Although there are various industry estimates, code repository management firm GitLab Inc. decided to phish their own employees to see what would happen. The result was not good: One in five employees fell for the fake emails.

Six of the 50 employees who received the fake phishing email reported the email as suspicious to GitLab’s security operations team.