Define the new internet.
Look up the words people use online, add the ones we missed, and help make the internet easier to understand.
Look up the words people use online, add the ones we missed, and help make the internet easier to understand.
2,337 definitions
Cloud Containment Plan is a security response plan that limits damage after a suspected compromise for cloud account and resource security. It uses isolation steps, credential rotation, and communication paths so teams can reduce attacker dwell time while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Cloud Containment Plan when a storage bucket changed policy, so the team could reduce attacker dwell time before the risk review began.”
Incident Response Secret Scanner is a security preventive control that finds credentials before they spread for security event handling. It uses pattern matching, entropy checks, and allowlists so teams can stop accidental key exposure while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Incident Response Secret Scanner when an alert escalated to response, so the team could stop accidental key exposure before the risk review began.”
Incident Response Phishing Resistance is a security identity control that reduces success of credential theft attacks for security event handling. It uses passkeys, hardware-backed factors, and origin checks so teams can protect sign-in flows while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Incident Response Phishing Resistance when an alert escalated to response, so the team could protect sign-in flows before the risk review began.”
Subnet Certificate Monitor is a networking security monitor that tracks certificate validity and configuration for address segmentation. It uses expiry checks, chain validation, and alerting so teams can avoid trust failures while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Subnet Certificate Monitor when a workload moved networks, so the team could avoid trust failures before traffic crossed a service boundary.”
Latency Route Leak Guard is a networking routing control that detects and blocks accidental route propagation for time between request and response. It uses prefix filters, validation, and peer policy so teams can protect reachability while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Latency Route Leak Guard when a user saw slow responses, so the team could protect reachability before traffic crossed a service boundary.”
Vulnerability Phishing Resistance is a security identity control that reduces success of credential theft attacks for weakness tracking and remediation. It uses passkeys, hardware-backed factors, and origin checks so teams can protect sign-in flows while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Vulnerability Phishing Resistance when a scanner found a critical issue, so the team could protect sign-in flows before the risk review began.”
Threat Intel Detection Rule is a security security analytic that matches suspicious behavior or known indicators for external risk and indicator context. It uses logs, thresholds, signatures, and behavioral context so teams can surface actionable alerts while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Threat Intel Detection Rule when a new campaign indicator appeared, so the team could surface actionable alerts before the risk review began.”
Latency Ingress Rule is a networking boundary rule that controls how external traffic enters a service for time between request and response. It uses hostnames, paths, protocols, and policy checks so teams can keep entry points predictable while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Latency Ingress Rule when a user saw slow responses, so the team could keep entry points predictable before traffic crossed a service boundary.”
Identity Trust Boundary is a security security boundary that defines where assumptions, identities, or permissions change for user and workload identity. It uses network edges, service roles, and data classifications so teams can avoid accidental privilege crossing while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Identity Trust Boundary when a service account requested access, so the team could avoid accidental privilege crossing before the risk review began.”
Vulnerability Policy Decision is a security authorization decision that determines whether an action should be allowed for weakness tracking and remediation. It uses identity, resource, context, and policy evaluation so teams can enforce least privilege while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Vulnerability Policy Decision when a scanner found a critical issue, so the team could enforce least privilege before the risk review began.”