Define the new internet.
Look up the words people use online, add the ones we missed, and help make the internet easier to understand.
Look up the words people use online, add the ones we missed, and help make the internet easier to understand.
2,337 definitions
Cloud Containment Plan is a security response plan that limits damage after a suspected compromise for cloud account and resource security. It uses isolation steps, credential rotation, and communication paths so teams can reduce attacker dwell time while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Cloud Containment Plan when a storage bucket changed policy, so the team could reduce attacker dwell time before the risk review began.”
Threat Intel Trust Boundary is a security security boundary that defines where assumptions, identities, or permissions change for external risk and indicator context. It uses network edges, service roles, and data classifications so teams can avoid accidental privilege crossing while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Threat Intel Trust Boundary when a new campaign indicator appeared, so the team could avoid accidental privilege crossing before the risk review began.”
Data Loss Abuse Throttle is a security anti-abuse control that slows or blocks suspicious repeated behavior for sensitive data exposure risk. It uses rate limits, reputation signals, and challenge steps so teams can protect public access without a login wall while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Data Loss Abuse Throttle when a report included private metadata, so the team could protect public access without a login wall before the risk review began.”
Incident Response Patch Window is a security remediation schedule that sets when a fix should be applied for security event handling. It uses risk severity, testing needs, and maintenance constraints so teams can repair systems without unnecessary disruption while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Incident Response Patch Window when an alert escalated to response, so the team could repair systems without unnecessary disruption before the risk review began.”
CDN Anycast Endpoint is a networking routing pattern that advertises one address from multiple locations for content delivery and edge caching. It uses regional announcements, health checks, and traffic steering so teams can serve users from nearby healthy sites while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used CDN Anycast Endpoint when a cache region served an asset, so the team could serve users from nearby healthy sites before traffic crossed a service boundary.”
VPN Packet Capture is a networking diagnostic artifact that records network packets for analysis for private tunnel connectivity. It uses bounded capture windows, filters, and redaction so teams can investigate protocol behavior safely while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used VPN Packet Capture when a remote user connected, so the team could investigate protocol behavior safely before traffic crossed a service boundary.”
Service Mesh Route Leak Guard is a networking routing control that detects and blocks accidental route propagation for east-west service communication. It uses prefix filters, validation, and peer policy so teams can protect reachability while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Service Mesh Route Leak Guard when a service called another service, so the team could protect reachability before traffic crossed a service boundary.”
Application Secret Scanner is a security preventive control that finds credentials before they spread for software security and abuse resistance. It uses pattern matching, entropy checks, and allowlists so teams can stop accidental key exposure while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Application Secret Scanner when a form received unusual input, so the team could stop accidental key exposure before the risk review began.”
Service Mesh Ingress Rule is a networking boundary rule that controls how external traffic enters a service for east-west service communication. It uses hostnames, paths, protocols, and policy checks so teams can keep entry points predictable while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Service Mesh Ingress Rule when a service called another service, so the team could keep entry points predictable before traffic crossed a service boundary.”
Cloud Policy Decision is a security authorization decision that determines whether an action should be allowed for cloud account and resource security. It uses identity, resource, context, and policy evaluation so teams can enforce least privilege while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Cloud Policy Decision when a storage bucket changed policy, so the team could enforce least privilege before the risk review began.”