Skip to content

Compare moats

Up to three covered companies, band by band. Every call is a curated editorial judgment, never a disclosed figure — and every band carries its cited basis.

comparing GitLab×Celestica×Vistra× maximum of 3 — remove one to swap
GitLab GTLB ai moat: latest change 2026-08-05 Celestica CLS ai moat: latest change 2026-02-27 Vistra VST ai moat: latest change 2026-08-06
Moat rating narrow

The FY2026 10-K (year ended 2026-01-31) shows real expansion inside the installed base: 118% Dollar-Based Net Retention, Base Customers up to 10,682 from 9,893, customers above $100,000 of ARR up to 1,456 from 1,229, and $1.0 million ARR customers "to 155 from 123, an increase of 26%". But the filing concedes "limited barriers to entry" and names "Microsoft Corporation, which owns GitHub" as principal competitor. Retention decelerates (130% FY2024, 123% FY2025, 118% FY2026), and since DBNR is reported "on a threshold basis of 130%," the FY2024 figure is a cap and the slide is steeper than it looks. Narrow, not wide: expansion must be re-won against a bundled hyperscaler.

source: sec.gov

narrow

The FY2025 10-K shows a real but bounded edge. On the durable side, Celestica is increasingly engaged as an ODM: its HPS business co-designs (JDM) or fully designs the platforms it builds, it states 'We have hardware and software patents that are integral to our HPS business' and that 'our increased R&D activities have resulted in the growth of our dependence on our patent portfolio', and HPS reached 41% of total revenue in 2025 (from 21% in 2023) at a margin profile the filing says is higher than traditional EMS work. On the limiting side, the same filing concedes 'Some of our competitors have greater scale and provide a broader range of services than we provide', the master supply agreements 'do not typically guarantee a particular level of business or fixed pricing', work is won 'on a program-by-program basis', and the top 10 customers were 79% of 2025 revenue with three customers individually at 32%, 14% and 12%. An advantage that must be re-won each program against greater-scale rivals, for a handful of buyers who can in-source, is narrow rather than wide.

source: sec.gov

narrow

The 10-K states that "the majority of our facilities operate as “merchant” facilities without long-term power sales agreements" and that Vistra is "not guaranteed any rate of return on our capital investments". Against that, the scarcity is real: six NRC-licensed nuclear units totalling 6,448 MW, licences running 2036-2053, inside a 43,641 MW fleet, plus 20-year PPAs with AWS (1,200 MW) and Meta (2,609 MW). The 2025 gas additions - Lotus (2,600 MW, closed October 2025) and pending Cogentrix (5,500 MW) - extend the merchant gas side, not the nuclear scarcity. Only the 433 MW of uprates extends the moat asset.

source: sec.gov

Moat type switching costs

Stickiness comes from platform embedding, not IP. The 10-K rests differentiation on "our single platform with a unified data model," on "Consolidation of multiple tools into a single platform," and on deployment inside the customer's own perimeter for regulated buyers. Replacement means re-integrating a toolchain and re-certifying compliance. IP is the wrong label: only "16 issued patents and 25 pending patent applications," plus open-source licenses granting "broad permissions to use, copy, modify, and redistribute." The no-lock-in claim is the filing's own characterisation, footnoted to a Forrester study "commissioned by GitLab."

source: sec.gov

switching costs

Cost scale is explicitly not the source: the 10-K states competitors have greater scale and a broader service range. What does bind a customer is the design-in. Within HPS, Celestica 'design[s] and manufacture[s] products, either as customized solutions, white box solutions or under Joint Design and Manufacturing (JDM) engagements', holds 'hardware and software patents that are integral to our HPS business', and delivers 'complete platform solutions... integration and orchestration of various technologies into rack-scale designs'. The filing adds that 'a majority of these supply agreements also require the customer to purchase unused inventory that we have purchased to fulfill that customer's forecasted manufacturing demand', a contractual cost of walking away mid-program. Moving a qualified, jointly designed rack-scale platform to another ODM means requalifying a design Celestica partly owns, which is friction the commodity assembly work does not carry.

source: sec.gov

intangibles ip

The intangibles are non-replicable regulatory assets rather than patents: six nuclear licences (Comanche Peak 2050/2053, Perry 2046, Davis-Besse 2037, Beaver Valley 2036/2047), fuel "contracted to support all our refueling needs through 2030", section 45U credits "recognizing the value of existing carbon-free nuclear power", and TXU Energy, sold "for over 20 years" and "registered and protected by trademark law". Read 45U as a floor, not moat strength: the 2025 credit was $220m against $545m in 2024, and it "provides increasing levels of support as unit revenues decline". Efficient scale does not apply.

source: sec.gov

Leadership fast follower

The 10-K positions GitLab against a leader rather than as one: "Our principal competitor is Microsoft Corporation, which owns GitHub." Competition reads from the challenger side, differentiating "from GitHub through flexible deployment options that work within enterprise security and compliance requirements, LLM neutrality with self-hosted gateway support" and an open core model. On AI it follows: Duo Agent Platform went "Generally available in January 2026," the last month of the fiscal year. What keeps it a follower rather than behind is cadence, "a new version of our software every month for 172 months in a row," plus a regulated-deployment franchise a SaaS-first rival does not cover.

source: sec.gov

at parity

The 10-K claims no share leadership. It states plainly that 'Some of our competitors have greater scale and provide a broader range of services than we provide', and lists Hon Hai, Flex, Jabil, Sanmina, Benchmark and Plexus in EMS plus Quanta, Wiwynn and Accton in ODM. Its stated competitive advantage is execution quality, not position: 'our track record in advanced manufacturing capabilities, design and engineering, quality, delivery, managing complexity and responsiveness'. It is also winning: CCS revenue grew 42% to $9.19 billion and total revenue reached $12.39 billion in FY2025. Competing on comparable terms with a field it neither leads nor trails is parity.

source: sec.gov

co leader

Vistra describes itself as "one of the largest producers of power in deregulated markets in the U.S." with over 230 TWh generated, "one of the largest competitive power generators in the U.S. as measured by MWh of generation capacity", "one of the largest electricity generators in the U.S.", and "one of the largest competitive residential retail electricity providers". That hedged phrasing appears four times and is the strongest claim the filing makes. The 10-K names no competitor and assigns no rank, so co-leader is the ceiling the disclosure supports.

source: sec.gov

Pricing power moderate

FY2026 gross margin was 87% against 89%, with cost of revenue up $35.6 million "primarily due to an increase of $18.4 million in third party hosting costs for SaaS and cloud usage," and management expects SaaS and Duo mix to bring costs that "may adversely impact our gross margins." Strain is explicit: GitLab "may be required to reduce our prices," competitors "may offer their products and services at a lower price or for free," and it "implemented user limits on our free SaaS product." Power retained: Premium lists at $29 per user/month billed annually, and seats bundle $12 and $24 of GitLab Credits. But "A majority of our subscriptions are on a one-year period."

source: sec.gov

weak

The filing describes price as contested by contract, not set by Celestica: master supply agreements 'do not typically guarantee a particular level of business or fixed pricing', 'Some of these agreements require us to provide specific price reductions to our customers over the term of the contracts', and the Item 1A risk factor 'We operate in an industry comprised of numerous competitors and aggressive pricing dynamics' says competitors may be 'willing to, or able to make sales or provide services at lower margins than we do'. The site's fundamentals show gross margin at 12.06% in FY2025, up from 8.96% in FY2022, 9.47% in FY2023 and 10.72% in FY2024 — improving, but still low double digits, and the filing attributes the higher margin to mix (HPS is 'higher margin profile than our traditional EMS businesses' and went from 21% to 41% of revenue over the same span) rather than to raising prices.

source: sec.gov

weak

Vistra is a merchant price taker. Price formation rests on "the highest variable cost unit that clears the market", prices are "unpredictable and may fluctuate substantially", hedging markets have "limited liquidity after two to three years", and competing retailers "may offer different products, lower electricity prices and other incentives". ERCOT's $2,000/MWh figure is the low system-wide offer cap, applied conditionally when the peaker net margin exceeds three times CONE or under the PUCT Emergency Pricing Program, not a standing cap. PJM has "announced that it would propose" extending its capacity cap to 2028-29 and 2029-30, subject to FERC approval.

source: sec.gov

Summary

GitLab sells a single-platform DevSecOps toolchain defended by workflow lock-in rather than intellectual property: a unified data model plus deployment flexibility, including single-tenant "Dedicated for Government with FedRAMP compliance," makes it hard to remove where data residency is contractual. The installed base expands: 118% Dollar-Based Net Retention, 10,682 Base Customers, 1,456 above $100,000 of ARR, 155 above $1.0 million (up 26%), over 70% of ARR from public sector and enterprise. The filing supplies the counterweight: "limited barriers to entry," Microsoft/GitHub as principal competitor, 16 issued patents. Retention (130 to 123 to 118, the 130 a cap), gross margin (89% to 87%) and a January 2026 AI launch point to compression at the commodity end. No source measures market share, so every share band is "unknown".

Celestica is a contract design and manufacturing company that has been pulled up the value chain by the AI data-center build-out. Its CCS segment, which builds networking switches, optical systems, data center racks, servers and storage for hyperscalers and other cloud and AI service providers, grew 42% to $9.19 billion in 2025, and Communications alone went from 33% of revenue in 2023 to 57% in 2025. The part of that business with a defensible position is HPS, where Celestica is the designer rather than the assembler: HPS revenue rose 81% in 2025 to 41% of the total, carries a higher margin than traditional EMS work, and rests on a patent portfolio the filing calls integral to the business. That design-in position is what separates it from pure build-to-print capacity. What caps the moat is the customer side of the ledger. The 10-K describes an industry where 'aggressive pricing is a common business dynamic', where master supply agreements guarantee neither volume nor price and some of them 'require us to provide specific price reductions to our customers over the term of the contracts', and where the company bids program by program against Hon Hai, Flex, Jabil, Sanmina, Benchmark and Plexus on the EMS side and Quanta, Wiwynn and Accton on the ODM side, plus Arista and Cisco where a customer might buy an off-the-shelf switch instead. Revenue concentration has tightened as the AI mix grew, from 64% of revenue in the top 10 customers in 2023 to 79% in 2025, with a single customer at 32%. The company also notes its HPS offerings can compete with a customer's own hardware, which may 'negatively impact our relationship with, or result in a loss of business from, such customers'. So the profile is a genuine but program-scoped advantage, held by a company whose fortunes turn on a few buyers' capital plans.

Vistra's moat is one scarce asset wrapped in a commodity business. Six NRC-licensed nuclear units - 6,448 MW, licences running 2036-2053 - sit inside a 43,641 MW fleet that the 10-K says operates in the majority as "merchant" facilities with no long-term power sales agreements and no guaranteed rate of return. That block cannot be rebuilt by a rival, and is now partly de-risked by 20-year PPAs with AWS (1,200 MW from Comanche Peak) and Meta (2,609 MW from the PJM plants) plus section 45U credits. Everything else - 26,989 MW of gas, 8,743 MW of coal, the 5m-customer retail book - competes on price in markets Vistra does not set, against entrants the filing says keep building "despite relatively low power prices". The 2025 growth was gas M&A (Lotus, pending Cogentrix), which widens the commodity-exposed side. Narrow, for a specific reason: the moat is 15% of the fleet.

Chain position

GitLab sits at the software-tooling layer, not compute or models. It consumes third-party LLM capacity — marketing "LLM neutrality and support for self-hosted AI gateways, including air-gapped environments" — so it captures no model-layer economics and bears inference as COGS, visible in the $18.4 million rise in hosting costs. Its distinctive position is the regulated perimeter.

Celestica sits between component suppliers and the hyperscale buyer, and owns the design only in part of that span. It 'procure[s] substantially all of our materials and components on behalf of our customers pursuant to individual purchase orders that are generally short-term in nature', then designs, assembles, integrates at rack scale and tests the switches, optical systems, servers, storage and data-center racks that cloud, AI and enterprise customers deploy. In ATS it is a pure EMS contractor that does 'not generally collaborate with ATS customers on the design of the solutions we manufacture'; in HPS it is the designer of record or a joint designer. The economics follow that split: the segment where it holds design IP is the one with the higher margin profile.

Merchant IPP: sells energy, capacity and ancillary services into ISO/RTO spot and short-term wholesale markets (ERCOT, PJM, ISO-NE, NYISO, CAISO, MISO) and resells to ~5m retail customers. Emerging role as long-term nuclear offtake supplier to hyperscalers (AWS, Meta). Not a price setter at any link.

Products (share / barrier)
  • Enterprise Agile Planning add-on Unknown · Low source: sec.gov
  • GitLab Dedicated (including Dedicated for Government) Unknown · Deep source: sec.gov
  • GitLab DevSecOps Platform (Free, Premium, and Ultimate tiers) Unknown · Moderate source: sec.gov
  • GitLab Duo Agent Platform (with GitLab Credits) Unknown · Low source: about.gitlab.com
  • Self-Managed GitLab (on-premises and hybrid cloud deployment) Unknown · Deep source: sec.gov
  • Coal and lignite generation fleet Unknown · Low source: sec.gov
  • Long-term large-load / data-centre power offtake (AWS and Meta PPAs) Unknown · Deep source: sec.gov
  • Natural gas generation fleet (CCGT and peaking) Unknown · Low source: sec.gov
  • Nuclear generation fleet (Comanche Peak, Perry, Davis-Besse, Beaver Valley) Unknown · Deep source: sec.gov
  • Retail electricity and natural gas (TXU Energy, Ambit, Dynegy Energy Services, Homefield, Energy Harbor, U.S. Gas & Electric) Unknown · Low source: sec.gov
  • Vistra Zero - solar and battery energy storage Unknown · Low source: sec.gov
Long-horizon vote +0.06 at weight 0.20 · swarm neutral

Editorial prior, not backtested.

see exactly how it voted →

-0.01 at weight 0.20 · swarm neutral

Editorial prior, not backtested.

see exactly how it voted →

+0.05 at weight 0.20 · swarm neutral

Editorial prior, not backtested.

see exactly how it voted →