Zero Trust at GitLab: Data zones & authentication scoring

This post introduces the concepts of 'data zones' and an 'authentication scoring system' as part of GitLab's Zero Trust initiative. Data zones group data based on access controls when granular control is not possible, with four zones (RED, ORANGE, YELLOW, GREEN) mirroring data classification. The authentication scoring system assigns points for basic authentication, U2F, managed devices, device health, and geolocation to determine access levels to these zones. The goal is to achieve more granular control over data access, automate processes, and simplify onboarding/offboarding.