Cybersecurity glossary

Plain-English definitions for 12 cybersecurity terms. Cross-linked to the tools and buying guides where each one matters.

D

A set of tools and processes designed to detect and prevent the unauthorized transmission of sensitive data outside an organizatio…

The technologies and practices designed to protect email communications from threats including phishing, business email compromise…

A security solution that continuously monitors endpoint devices (laptops, servers, workstations) to detect, investigate, and respo…

A globally accessible, curated knowledge base of adversary tactics and techniques based on real-world observations, used as a comm…

A simulated cyberattack against an organization's systems, networks, or applications conducted by authorized security professional…

A type of malicious software that encrypts an organization's data or locks systems and demands payment (ransom) in exchange for th…

The practice and tooling for securely storing, accessing, rotating, and auditing sensitive credentials such as API keys, database …

A cloud-delivered architecture that converges wide-area networking (SD-WAN) and network security services (SWG, CASB, ZTNA, FWaaS)…

A platform that aggregates, correlates, and analyzes security event data from across an organization's IT infrastructure to detect…

A security practice and toolset that identifies open-source and third-party components in a codebase, detects known vulnerabilitie…

A method of analyzing application source code, bytecode, or binaries for security vulnerabilities without executing the program, t…

The evidence-based knowledge about existing or emerging cyber threats, including context about threat actors, their motivations, c…