Create incident tickets for on-call responders before SLAs

Your security alert emails land in a shared inbox, causing missed triage and slower remediation. Security leads get parsed summaries and tickets with links to investigate before outreach SLAs lapse.