doc/security/_index.md
{{< details >}}
{{< /details >}}
This section covers general information and recommendations about the platform.
For more information about improving the security posture of your GitLab environment, see the hardening recommendations.
Generally, running an antivirus software on the GitLab host is not recommended.
However, if you must use one, all of the location of GitLab on the system should be excluded from scanning as it could be quarantined as a false positive.
Specifically, you should exclude the following GitLab directories from scanning:
/var/opt/gitlab/etc/gitlab//var/log/gitlab//opt/gitlab/You can find all those directories listed in the Linux package configuration documentation.
GitLab Self-Managed customers and administrators are responsible for the security of their underlying hosts, and for keeping GitLab itself up to date. It is important to regularly patch GitLab, patch your operating system and its software, and harden your hosts in accordance with vendor guidance.
For information about rate limits, see Rate limits.