The language of security,
made understandable.
Clear definitions of common terms used throughout cybersecurity services, reports and conversations.
Learn the essentials.
Definitions simplify concepts for visitors; they do not replace contract definitions or official technical standards.
SOCSecurity Operations Center
The people, processes and systems used to monitor, analyze and respond to security activity.
MDRManaged Detection & Response
An operational service that investigates threats and coordinates response using agreed tools and authority.
SIEMSecurity Information & Event Management
Tools and workflows used to collect, correlate and analyze security event data.
XDRExtended Detection & Response
A security approach that connects multiple telemetry sources for detection and investigation.
EDREndpoint Detection & Response
Monitoring and investigation capabilities for eligible workstations and servers.
MFAMulti-factor Authentication
An additional identity verification factor beyond a password.
FIDO2 / PasskeyPhishing-resistant authentication
A modern authentication approach using cryptographic credentials in supported environments.
SSOSingle Sign-On
One central sign-in mechanism for multiple supported applications.
WAFWeb Application Firewall
Traffic rules and detection mechanisms focused on web application requests.
APIApplication Programming Interface
A defined interface that lets systems or applications communicate.
DASTDynamic Application Security Testing
Testing a running application for selected weaknesses through observed behavior.
SASTStatic Application Security Testing
Analyzing source or compiled code for patterns suggesting security weaknesses.
CTEMContinuous Threat Exposure Management
A recurring approach to identify, prioritize and validate meaningful exposure.
RTORecovery Time Objective
The target time to restore a workload or service after disruption.
RPORecovery Point Objective
The maximum targeted age of recoverable data after disruption.
SOC 2 Type IIService-organization attestation report
An independent examination over a reporting period; it is not an ISO certification.
PCI DSSPayment Card Industry Data Security Standard
Security requirements applicable to payment-account data and in-scope environments.
What needs protecting next?
Tell us what you operate and what concerns you most. Get a tailored conversation about scope and priorities.