1. A method to reduce false alarms generated by an automated analysis tool performing static security analysis, comprising: receiving a set of data representing findings generated by the static security analysis; with respect to a subset of the data, receiving user-generated classifications for each of the findings in the subset; based on the user-generated classifications, computing a machine learning classifier using software executing in a hardware element; and applying the machine learning classifier to a remainder of the data.