CorpSec Devices
CorpSec Devices owns GitLab’s endpoint security control plane.
The CorpSec Devices team owns the security of team member endpoints and the security tools and controls that run on them.
Ownership Boundary
CorpSec Devices owns the endpoint security control plane, including:
- Mobile device management (MDM) architecture, configuration, enrollment, and security baselines
- Endpoint detection and response (EDR) configuration and deployment
- Browser security policy and browser extension governance
- Operating system and third-party software update policy
- Endpoint security telemetry, compliance monitoring, and automated remediation
- Device-trust and endpoint application-control enforcement
- Guarded integrations that perform device actions such as lock, wipe, or restart
Corporate IT / End User Services owns the user-facing support experience, laptop procurement and logistics, hardware repairs, and delegated routine device actions. Corporate IT and CorpSec Devices share ownership of end-user endpoint documentation so that support instructions and security requirements remain aligned.
For team procedures, current tooling, runbooks, and escalation guidance, see the CorpSec Devices TeamDocs.
Last modified July 28, 2026: Correct CorpSec Devices name and ownership (
6ebdd895)
