Small - Straight forward change, minimal investigation https://handbook.gitlab.com/handbook/security/product-security/application-security/metrics/capacity/#table-1

Medium - Some investigation and/or collaboration needed https://handbook.gitlab.com/handbook/security/product-security/application-security/metrics/capacity/#table-1

Large - Significant investigation and collaboration needed https://handbook.gitlab.com/handbook/security/product-security/application-security/metrics/capacity/#table-1

XLarge - Very complex and requires a major portion of the milestone to resolve https://handbook.gitlab.com/handbook/security/product-security/application-security/metrics/capacity/#table-1

Indicates the work was associated to cross-team help/collaboration

Indicates the work was associated to a customer escalating a security issue

Indicates the work was associated to HackerOne administration

Indicates the work was associated to the AppSec HackerOne duties

Work associated with AppSec OKRs and KRs