Self-service security alert handling with GitLab's UAM
Mar 18, 2025Bala Allam

Summary
Introduced the User Attestation Module (UAM) as a Slack-first automation to streamline security alert handling. UAM allows team members to directly attest to the legitimacy of security alerts, reducing alert fatigue for the Security Incident Response Team (SIRT) and creating a new tier of alert handling. It integrates with GitLab API, Slack API, Tines, Devo, and a Metrics DB to manage the workflow, collect evidence, and provide audit trails and metrics.
More from the Bug Triage and Reporting trail
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
- Manage vulnerability noise at scale with auto-dismiss policies
- How to transform compliance observation management with GitLab
- How GitLab measures Red Team impact: The adoption rate metric
- Introducing GitLab Advanced Vulnerability Tracking