GitLab Security in 2021: protect, enhance, certify and strengthen

This post details GitLab's security efforts in 2021, highlighting improvements in enterprise SaaS security, supply chain security, and APT threat protection. It covers the expansion of security certifications (SOC 2 Type 2/SOC 3, ISO/IEC 27001:2013), the adoption of the Secure Control Framework (SCF) and ZenGRC for continuous control monitoring, and the deployment of GitLab's Trust Center and Customer Assurance Package. It also discusses security automation for incident response, Red Team activities including supply chain security research, and product security enhancements like Spamcheck and Package Hunter. Specific technical details include the use of BPF and perf for Redis latency diagnosis, and the migration from Unicorn to Puma for application servers.