Active Directory
Microsoft's directory service that stores user accounts and controls access to resources on Windows networks.
Related: LDAP, Directory as a Service, SSO
Identity & Access
Cybersecurity Glossary
Cybersecurity terms, explained in plain English
From MDR and Zero Trust to the DPDP Act, clear definitions of the security, managed IT and compliance terms Indian businesses come across every day.
- Terms
- 169 terms
- Categories
- 8 categories
- Focus
- India regulations covered
Browse by topic
Eight areas of security, each grouped around the problems it solves.
- SOC & Threat DetectionHow security teams monitor, detect and respond to attacks around the clock.24 terms
- Endpoint & Device ManagementSecuring and managing laptops, phones and servers across your organisation.19 terms
- Network & Cloud SecuritySecure access for users, branches and cloud apps, from Zero Trust to SASE.20 terms
- Identity & AccessWho can log in to what, and how access is verified and controlled.19 terms
- Threats & AttacksHow common cyber attacks work, from phishing to ransomware.29 terms
- Data, AI & API SecurityProtecting sensitive data, AI tools and the APIs that connect your systems.20 terms
- Compliance & GovernanceIndian and global regulations and standards, from the DPDP Act to ISO 27001.21 terms
- Managed Security ServicesHow outsourced and co-managed security services work and are bought.17 terms
All terms A–Z
169 terms
A
AI security
Protecting AI systems, models and the data they use from attacks and misuse, and governing how AI is used.
Related: Prompt injection, Shadow AI
Data, AI & API Security
Alert fatigue
When security teams receive so many alerts, many of them false, that real threats get missed or ignored.
Related: SOC analyst, False positive, SOAR
SOC & Threat Detection
Android Enterprise
Google's framework for managing Android devices and separating work and personal data.
Related: MDM, Zero-touch enrollment, BYOD
Endpoint & Device Management
Antivirus
Software that detects and removes known malicious programs from a computer.
Endpoint & Device Management
API gateway
A service that manages, routes and secures traffic to an organisation's APIs.
Related: API security, WAF, OAuth
Data, AI & API Security
API security
Protecting application programming interfaces from attacks, misuse and data exposure.
Related: OWASP API Top 10, API gateway, OAuth
Data, AI & API Security
APT
Advanced Persistent Threat
A long-running, targeted attack, often state-backed, that stays hidden in a network to steal data.
Related: Threat intelligence, Lateral movement, MITRE ATT&CK
Threats & Attacks
Attack surface
All the points where an attacker could try to enter or extract data from an organisation.
Related: Shadow IT, Vulnerability management
Threats & Attacks
Audit trail
A chronological record of who did what and when in a system.
Related: Log management, SOC 2
Compliance & Governance
B
BCDR
Business Continuity and Disaster Recovery
Plans and processes that keep a business running during a disruption and restore systems afterwards.
Related: Immutable backup, Ransomware, Incident response
Data, AI & API Security
BEC
Business Email Compromise
Email fraud in which attackers impersonate executives or suppliers to trick staff into transferring money or data.
Related: Phishing, Spear phishing, Social engineering
Threats & Attacks
Botnet
A network of infected devices controlled by an attacker, often used for DDoS attacks or spam.
Related: DDoS attack, Malware
Threats & Attacks
Brute force attack
Guessing passwords or keys by trying many combinations until one works.
Related: Credential stuffing, MFA, Passwordless authentication
Threats & Attacks
BYOD
Bring Your Own Device
A policy that lets employees use their personal devices for work, with security controls to protect company data.
Endpoint & Device Management
C
CASB
Cloud Access Security Broker
A security layer between users and cloud apps that enforces policies and gives visibility into cloud usage.
Network & Cloud Security
CERT-In directions
Indian Computer Emergency Response Team
Rules from India's national cyber agency, including reporting certain cyber incidents within 6 hours and keeping logs for 180 days.
Related: Incident response, Log management, DPDP Act
Compliance & Governance
CIS Controls
A prioritised set of security best practices from the Center for Internet Security.
Compliance & Governance
Cloud security
The policies, controls and technologies that protect cloud data, applications and infrastructure.
Data, AI & API Security
CNAPP
Cloud-Native Application Protection Platform
A platform that combines cloud security tools to protect cloud-native applications from development to runtime.
Related: CSPM, CWPP, Cloud security
Data, AI & API Security
Co-managed SOC
A SOC model where an internal team and an external provider share security monitoring and response.
Managed Security Services
Compliance automation
Using software to continuously collect evidence, monitor controls and prepare for audits.
Related: Continuous compliance monitoring, GRC, SOC 2
Compliance & Governance
Conditional access
Allowing or blocking access based on conditions such as user, device health, location and risk.
Related: Zero Trust, MFA, Device compliance
Identity & Access
Consent manager
Under India's DPDP Act, a registered entity that helps people give, manage and withdraw consent for use of their data.
Related: DPDP Act, Data fiduciary
Compliance & Governance
Continuous compliance monitoring
Automatically and constantly checking that security controls meet regulatory requirements.
Related: Compliance automation, GRC, Audit trail
Compliance & Governance
Credential stuffing
Using usernames and passwords leaked from one site to break into accounts on other sites.
Related: MFA, Brute force attack, ITDR
Threats & Attacks
Cross-site scripting
Cross-Site Scripting
An attack that injects malicious scripts into web pages viewed by other users.
Related: SQL injection
Threats & Attacks
Cryptojacking
Secretly using someone's computing power to mine cryptocurrency.
Threats & Attacks
CSPM
Cloud Security Posture Management
Tools that continuously check cloud environments for misconfigurations and compliance risks.
Related: CNAPP, CWPP, Cloud security
Data, AI & API Security
CWPP
Cloud Workload Protection Platform
Security for workloads running in the cloud, such as virtual machines, containers and serverless functions.
Data, AI & API Security
Cyber insurance
Insurance that covers financial losses from cyber incidents, such as data breaches and ransomware.
Related: Incident response, Ransomware, Risk assessment
Managed Security Services
Cyber resilience
An organisation's ability to keep operating through cyber attacks and recover quickly.
Related: BCDR, Incident response, SEBI CSCRF
Managed Security Services
Cybersecurity
Protecting systems, networks, devices and data from digital attacks.
Related: Network security, Endpoint security, Cloud security
Managed Security Services
D
Data breach
An incident in which sensitive, protected or confidential data is accessed or disclosed without authorisation.
Related: DPDP Act, Incident response, DLP
Threats & Attacks
Data classification
Labelling data by sensitivity so the right protections can be applied.
Related: DLP, DPDP Act, Data fiduciary
Data, AI & API Security
Data fiduciary
Under India's DPDP Act, the organisation that decides why and how personal data is processed.
Related: DPDP Act, Consent manager
Compliance & Governance
DDoS attack
Distributed Denial of Service
Flooding a website or network with traffic from many sources so it slows down or goes offline.
Related: Botnet, Network security, NGFW
Threats & Attacks
Deepfake fraud
Using AI-generated audio or video that imitates a real person to deceive victims, often to authorise payments.
Related: Vishing, BEC, Social engineering
Threats & Attacks
Device compliance
Checking that a device meets security rules, such as encryption and up-to-date software, before it can access company resources.
Related: UEM, Conditional access, Zero Trust
Endpoint & Device Management
DFIR
Digital Forensics and Incident Response
Digital forensics and incident response: investigating how an attack happened, preserving evidence and recovering from it.
Related: Incident response, IOC, Ransomware
SOC & Threat Detection
Directory as a Service
A cloud-hosted directory that manages users, devices and access without on-premises servers.
Related: Active Directory, LDAP, SSO
Identity & Access
DLP
Data Loss Prevention
Tools and policies that stop sensitive data from being leaked, misused or sent outside the organisation.
Related: CASB, Data classification, Insider threat
Data, AI & API Security
DNS filtering
Blocking access to malicious or unwanted websites at the domain name lookup stage.
Related: SWG, URL filtering, Phishing
Network & Cloud Security
DPDP Act
Digital Personal Data Protection Act, 2023
India's Digital Personal Data Protection Act, 2023, which governs how organisations collect, process and protect personal data.
Related: Data fiduciary, Data breach, DLP
Compliance & Governance
E
EDR
Endpoint Detection and Response
Software on laptops and servers that records activity, detects malicious behaviour and lets security teams investigate and contain threats on the device.
SOC & Threat Detection
EMM
Enterprise Mobility Management
An earlier suite for managing mobile devices, apps and content, now largely replaced by UEM.
Endpoint & Device Management
Encryption
Converting data into unreadable code so only people with the right key can read it.
Related: Tokenization, SSL inspection, DLP
Data, AI & API Security
Endpoint
Any device that connects to a network, such as a laptop, phone, server or IoT device.
Related: Endpoint security, UEM, EDR
Endpoint & Device Management
Endpoint security
Protecting laptops, desktops, servers and mobile devices from threats, usually with antivirus, EDR and device controls.
Endpoint & Device Management
EPP
Endpoint Protection Platform
Software that prevents known threats on endpoints, such as malware, using antivirus and other preventive controls.
Endpoint & Device Management
F
False positive
An alert that flags harmless activity as malicious.
Related: Alert fatigue, SIEM, SOC
SOC & Threat Detection
Fileless malware
Malware that runs in memory using legitimate system tools, leaving few files to detect.
Threats & Attacks
Firewall
A security control that allows or blocks network traffic based on defined rules.
Related: NGFW, FWaaS, Network security
Network & Cloud Security
FWaaS
Firewall as a Service
Firewall capabilities delivered from the cloud instead of a hardware box at each site.
Network & Cloud Security
G
GDPR
General Data Protection Regulation
The European Union's data protection law governing how personal data of people in the EU is handled.
Related: DPDP Act, Data fiduciary, Data breach
Compliance & Governance
GRC
Governance, Risk and Compliance
Governance, risk and compliance: aligning IT and security with business goals, managing risk and meeting regulations.
Related: Compliance automation, Risk assessment, vCISO
Compliance & Governance
H
HIPAA
Health Insurance Portability and Accountability Act
A US law that sets rules for protecting patients' health information.
Related: Compliance automation, Encryption
Compliance & Governance
Honeypot
A decoy system set up to attract attackers so their methods can be detected and studied.
Related: Threat intelligence, Lateral movement, Threat hunting
SOC & Threat Detection
I
IAM
Identity and Access Management
The policies and tools that make sure the right people get the right access to the right resources.
Identity & Access
Identity lifecycle management
Creating, updating and removing user access as people join, move within and leave an organisation.
Identity & Access
IDS / IPS
Intrusion Detection / Prevention System
Systems that monitor network traffic for attacks; an IDS raises alerts, an IPS also blocks the traffic.
Related: NGFW, NDR, Network security
Network & Cloud Security
IGA
Identity Governance and Administration
Managing who has access to what, approving requests and reviewing access regularly for compliance.
Related: IAM, Identity lifecycle management, RBAC
Identity & Access
Immutable backup
A backup that cannot be changed or deleted for a set period, protecting it from ransomware.
Related: BCDR, Ransomware, Ransomware rollback
Data, AI & API Security
Incident response
The structured process of preparing for, detecting, containing, removing and recovering from a cyber attack.
SOC & Threat Detection
Insider threat
A risk to security from people inside the organisation, whether malicious, careless or compromised.
Threats & Attacks
IOA
Indicator of Attack
Signs of attacker behaviour in progress, such as credential dumping, that point to an attack before damage is done.
Related: IOC, Threat hunting, MITRE ATT&CK
SOC & Threat Detection
IOC
Indicator of Compromise
Evidence that a system has been compromised, such as a malicious file hash, IP address or domain.
Related: IOA, Threat intelligence, Threat hunting
SOC & Threat Detection
IRDAI cybersecurity guidelines
Information and cyber security rules from India's insurance regulator for insurers and intermediaries.
Related: RBI cybersecurity framework, SEBI CSCRF
Compliance & Governance
ISMS
Information Security Management System
A documented system of policies and controls for managing information security, central to ISO 27001.
Compliance & Governance
ISO 27001
An international standard for setting up and running an information security management system.
Related: ISMS, SOC 2, Risk assessment
Compliance & Governance
IT asset management
IT Asset Management
Tracking every hardware and software asset an organisation owns, from purchase to retirement.
Related: Endpoint, UEM, Shadow IT
Endpoint & Device Management
ITDR
Identity Threat Detection and Response
Tools and practices that detect and respond to attacks targeting identities, such as stolen credentials.
Related: IAM, UEBA, Credential stuffing
Identity & Access
J
Just-in-time access
Just-in-Time Access
Granting elevated access only when needed and only for a limited time.
Related: PAM, Least privilege, Zero Trust
Identity & Access
K
L
Lateral movement
Techniques attackers use to move from one compromised system to others inside a network.
Related: Microsegmentation, APT, MITRE ATT&CK
Threats & Attacks
LDAP
Lightweight Directory Access Protocol
A standard protocol for reading and updating user information in a directory.
Related: Active Directory, SSO, Directory as a Service
Identity & Access
Least privilege
Giving users and systems only the minimum access they need to do their job.
Related: Zero Trust, PAM, RBAC
Identity & Access
Log management
Collecting, storing and searching the logs produced by systems and applications for security, troubleshooting and compliance.
Related: SIEM, Audit trail, CERT-In directions
SOC & Threat Detection
M
Malware
Any software designed to damage systems, steal data or gain unauthorised access.
Related: Ransomware, Trojan, Spyware
Threats & Attacks
MAM
Mobile Application Management
Managing and securing specific work apps and their data on a device, without controlling the whole device.
Endpoint & Device Management
Man-in-the-middle attack
Man-in-the-Middle
Secretly intercepting and possibly altering communication between two parties.
Related: Encryption, SSL inspection, VPN
Threats & Attacks
Managed IT services
Outsourcing the day-to-day management of IT systems to a specialist provider for a regular fee.
Managed Security Services
MDM
Mobile Device Management
Software that lets IT enrol, configure, secure and wipe mobile devices used for work.
Endpoint & Device Management
MDR
Managed Detection and Response
A service where an external team of security analysts monitors your environment 24x7, investigates threats and responds to them on your behalf.
SOC & Threat Detection
MFA
Multi-Factor Authentication
Logging in with two or more proofs of identity, such as a password plus a one-time code or app approval.
Related: SSO, Passwordless authentication, Credential stuffing
Identity & Access
Microsegmentation
Dividing a network into small isolated zones so an attacker who gets in can't move freely.
Related: Zero Trust, Lateral movement, Network security
Network & Cloud Security
MITRE ATT&CK
A public knowledge base that catalogues the tactics and techniques attackers use, widely used to map and test defences.
Related: Threat hunting, IOA, Lateral movement
SOC & Threat Detection
MSP
Managed Service Provider
A company that remotely manages a client's IT infrastructure and systems.
Related: MSSP, Managed IT services, RMM
Managed Security Services
MSSP
Managed Security Service Provider
A company that provides outsourced monitoring and management of security tools and services.
Managed Security Services
MTTD / MTTR
Mean Time to Detect / Mean Time to Respond
Mean time to detect and mean time to respond: how long, on average, it takes to spot an incident and to contain it.
SOC & Threat Detection
MXDR
Managed Extended Detection and Response
A managed service in which a provider runs XDR for you, adding 24x7 analysts who hunt, investigate and respond across your whole environment.
SOC & Threat Detection
N
NAC
Network Access Control
Controls which devices can connect to a network, based on identity and security checks.
Related: ZTNA, Device compliance, Zero Trust
Network & Cloud Security
NDR
Network Detection and Response
Technology that analyses network traffic to spot suspicious behaviour, such as an attacker moving between systems.
SOC & Threat Detection
Network security
Protecting a network and the data travelling over it from unauthorised access, misuse and attacks.
Related: NGFW, IDS / IPS, ZTNA
Network & Cloud Security
NGAV
Next-Generation Antivirus
Antivirus that uses behaviour analysis and machine learning, not just signatures, to block known and unknown malware.
Endpoint & Device Management
NGFW
Next-Generation Firewall
A firewall that adds application awareness, intrusion prevention and threat intelligence to traditional traffic filtering.
Related: FWaaS, IDS / IPS, Network security
Network & Cloud Security
NIST CSF
NIST Cybersecurity Framework
A widely used framework from the US National Institute of Standards and Technology for managing cybersecurity risk.
Related: ISO 27001, CIS Controls, Risk assessment
Compliance & Governance
NOC
Network Operations Center
A team that monitors network and IT infrastructure health and performance.
Managed Security Services
O
OAuth
A standard that lets an app access resources on a user's behalf without seeing their password.
Related: SAML, OpenID Connect, API security
Identity & Access
OpenID Connect
An identity layer built on OAuth 2.0 that lets apps verify who a user is.
Identity & Access
OWASP API Top 10
A list of the ten most critical API security risks, published by the OWASP Foundation.
Related: API security, SQL injection, OAuth
Data, AI & API Security
P
PAM
Privileged Access Management
Securing, controlling and monitoring accounts with elevated access, such as administrators.
Related: IAM, Least privilege, Just-in-time access
Identity & Access
Passkeys
Phishing-resistant login credentials stored on a device and unlocked with a fingerprint, face or PIN.
Related: Passwordless authentication, MFA
Identity & Access
Passwordless authentication
Logging in without a password, using passkeys, biometrics or device-based methods.
Identity & Access
Patch management
Finding, testing and installing software updates to fix security vulnerabilities and bugs.
Related: UEM, Zero-day vulnerability, Vulnerability management
Endpoint & Device Management
PCI DSS
Payment Card Industry Data Security Standard
A security standard for organisations that store, process or transmit payment card data.
Related: Tokenization, Encryption, Compliance automation
Compliance & Governance
Phishing
Fraudulent messages that trick people into clicking malicious links, sharing credentials or sending money.
Related: Spear phishing, Smishing, Vishing
Threats & Attacks
Prompt injection
An attack that hides instructions in input to an AI model to make it ignore its rules or leak data.
Related: AI security, Shadow AI
Data, AI & API Security
R
RaaS
Ransomware as a Service
A model where ransomware developers lease their tools to affiliates in exchange for a share of the ransom.
Related: Ransomware, APT
Threats & Attacks
Ransomware
Malware that encrypts or steals an organisation's data and demands payment to restore or not leak it.
Related: Malware, RaaS, Ransomware rollback
Threats & Attacks
Ransomware rollback
Restoring files and systems to their state before a ransomware attack, using snapshots kept by endpoint security tools.
Related: Ransomware, EDR, Immutable backup
Endpoint & Device Management
RBAC
Role-Based Access Control
Granting access based on a user's role, such as finance or HR, instead of individually.
Related: Least privilege, IAM, PAM
Identity & Access
RBI cybersecurity framework
Reserve Bank of India rules that set cybersecurity requirements for banks and regulated financial entities.
Related: CERT-In directions, SEBI CSCRF, DPDP Act
Compliance & Governance
Remote browser isolation
RBI
Runs web browsing in an isolated cloud container so malicious code never reaches the user's device.
Related: SWG, Phishing, Zero Trust
Network & Cloud Security
Remote wipe
Erasing data on a lost or stolen device from a central console.
Endpoint & Device Management
Risk assessment
Identifying, analysing and prioritising risks to an organisation's information and systems.
Related: GRC, ISO 27001, Vulnerability management
Compliance & Governance
RMM
Remote Monitoring and Management
Software that lets IT providers monitor and manage client devices remotely.
Related: MSP, Patch management, UEM
Managed Security Services
S
SAML
Security Assertion Markup Language
A standard that lets an identity provider tell an application a user is authenticated, enabling single sign-on.
Related: SSO, OAuth, OpenID Connect
Identity & Access
SASE
Secure Access Service Edge
A cloud-delivered framework that combines networking (SD-WAN) and security services such as ZTNA, SWG and CASB into one service.
Network & Cloud Security
SD-WAN
Software-Defined Wide Area Network
Software that manages wide-area network traffic across links such as broadband, MPLS and 4G/5G to connect branches efficiently.
Related: SASE, FWaaS, Network security
Network & Cloud Security
SDP
Software-Defined Perimeter
A security approach that hides applications from the internet and only reveals them to verified users.
Related: ZTNA, Zero Trust, VPN
Network & Cloud Security
SEBI CSCRF
Cybersecurity and Cyber Resilience Framework
SEBI's Cybersecurity and Cyber Resilience Framework for regulated entities in India's securities market.
Related: RBI cybersecurity framework, CERT-In directions, Cyber resilience
Compliance & Governance
Security automation
Using technology to perform security tasks automatically, reducing manual effort and response time.
Related: SOAR, Alert fatigue, Security playbook
Data, AI & API Security
Security awareness training
Teaching employees to recognise and avoid threats such as phishing.
Related: Phishing, Social engineering
Managed Security Services
Security maturity model
A framework for measuring how advanced an organisation's security practices are.
Related: Security posture, NIST CSF, vCISO
Managed Security Services
Security operations cost
The total cost of running security monitoring and response, whether in-house or outsourced.
Related: SOC, MSSP, Tool sprawl
Managed Security Services
Security playbook
A step-by-step guide that defines how to respond to a specific type of security incident.
Related: SOAR, Incident response
SOC & Threat Detection
Security posture
The overall strength of an organisation's security across people, processes and technology.
Related: Attack surface, Security maturity model, CSPM
Managed Security Services
Shadow AI
Employees using AI tools without approval or oversight, risking data leakage.
Related: Shadow IT, AI security, DLP
Data, AI & API Security
Shadow IT
Hardware, software or cloud services used without IT department approval.
Related: CASB, Shadow AI, Attack surface
Data, AI & API Security
Shared responsibility model
The split of security duties between a cloud provider and its customer.
Related: Cloud security, CSPM
Data, AI & API Security
SIEM
Security Information and Event Management
A system that collects logs and security events from across an organisation, correlates them and raises alerts on suspicious activity.
Related: SOAR, UEBA, Log management
SOC & Threat Detection
SLA
Service Level Agreement
A contract that defines the level of service a provider must deliver, such as response times.
Related: MTTD / MTTR, MSSP, MSP
Managed Security Services
Smishing
Phishing sent by SMS, often posing as a bank, courier or government service.
Related: Phishing, Vishing, Social engineering
Threats & Attacks
SOAR
Security Orchestration, Automation and Response
Tools that automate and coordinate security tasks, such as enriching alerts or isolating a device, using predefined playbooks.
Related: SIEM, Security automation, SOC
SOC & Threat Detection
SOC
Security Operations Center
A team, with its processes and tools, that monitors an organisation's systems around the clock to detect, investigate and respond to cyber threats.
Related: SOC analyst, SIEM, MDR
SOC & Threat Detection
SOC 2
A US audit framework that reports on how a service provider protects customer data.
Related: ISO 27001, Compliance automation, Audit trail
Compliance & Governance
SOC analyst
A security professional who monitors alerts, investigates suspicious activity and escalates or responds to incidents in a SOC.
Related: SOC, Alert fatigue, SIEM
SOC & Threat Detection
Social engineering
Manipulating people into revealing information or taking actions that compromise security.
Related: Phishing, Vishing, Security awareness training
Threats & Attacks
Spear phishing
A targeted phishing attack crafted for a specific person or organisation.
Threats & Attacks
Spyware
Malware that secretly monitors a user's activity and steals information.
Related: Malware, Keylogger, EDR
Threats & Attacks
SQL injection
SQL Injection
An attack that inserts malicious database commands into an application's input fields.
Related: Cross-site scripting, API security
Threats & Attacks
SSE
Security Service Edge
The security part of SASE, combining SWG, CASB and ZTNA delivered from the cloud.
Network & Cloud Security
SSL inspection
Decrypting and inspecting encrypted web traffic to find hidden threats, then re-encrypting it.
Related: SWG, NGFW, Encryption
Network & Cloud Security
SSO
Single Sign-On
Signing in once to access many applications without entering a password for each.
Identity & Access
Supply chain attack
Compromising an organisation through a trusted supplier, software update or service provider.
Related: APT, Zero-day vulnerability
Threats & Attacks
SWG
Secure Web Gateway
A security service that filters web traffic to block malicious sites, downloads and policy violations.
Related: URL filtering, DNS filtering, CASB
Network & Cloud Security
T
Tabletop exercise
A discussion-based drill where teams walk through how they would respond to a simulated incident.
Related: Incident response, Cyber resilience
Managed Security Services
Threat detection and response
The combined practice of identifying cyber threats and acting quickly to contain and remove them.
SOC & Threat Detection
Threat hunting
Proactively searching through systems and data for attackers who have slipped past automated security controls.
Related: MDR, Threat intelligence, IOC
SOC & Threat Detection
Threat intelligence
Evidence-based information about attackers, their tools and their targets, used to detect and prevent attacks.
Related: IOC, Threat hunting, APT
SOC & Threat Detection
Tokenization
Replacing sensitive data, such as card numbers, with non-sensitive tokens.
Related: Encryption, PCI DSS
Data, AI & API Security
Tool sprawl
Running too many separate security tools, which raises cost and complexity and leaves gaps.
Managed Security Services
Trojan
Malware disguised as legitimate software to trick users into installing it.
Related: Malware, Spyware, EDR
Threats & Attacks
U
UEBA
User and Entity Behavior Analytics
Analytics that learn normal behaviour for users and devices and flag unusual activity that may indicate a threat.
Related: SIEM, Insider threat, ITDR
SOC & Threat Detection
UEM
Unified Endpoint Management
A single console to manage and secure every device in an organisation, including laptops, phones, tablets and IoT devices.
Endpoint & Device Management
URL filtering
Allowing or blocking web pages based on their address or category.
Related: SWG, DNS filtering
Network & Cloud Security
V
VAPT
Vulnerability Assessment and Penetration Testing
Vulnerability assessment and penetration testing: finding security weaknesses and testing whether attackers can exploit them.
Related: Vulnerability management, CERT-In directions
Compliance & Governance
vCISO
Virtual Chief Information Security Officer
A part-time or outsourced chief information security officer who leads security strategy.
Related: GRC, MSSP, Risk assessment
Managed Security Services
Vishing
Phishing by phone call, where attackers impersonate trusted organisations to extract information or money.
Related: Smishing, Phishing, Deepfake fraud
Threats & Attacks
VPN
Virtual Private Network
An encrypted tunnel that connects a user or site to a private network over the internet.
Network & Cloud Security
Vulnerability management
The continuous process of finding, prioritising and fixing security weaknesses in systems and software.
Related: Patch management, VAPT, Zero-day vulnerability
Endpoint & Device Management
W
WAF
Web Application Firewall
A firewall that filters web traffic to block attacks on web applications, such as SQL injection.
Related: API security, SQL injection, Cross-site scripting
Data, AI & API Security
X
Z
Zero Trust
A security model that never trusts any user or device by default and verifies every access request.
Related: ZTNA, Least privilege, Microsegmentation
Network & Cloud Security
Zero-day vulnerability
A software flaw that attackers exploit before the vendor has released a fix.
Related: Patch management, Vulnerability management, APT
Threats & Attacks
Zero-touch enrollment
Setting up company devices automatically with the right settings and apps the first time they are switched on.
Related: MDM, UEM, Android Enterprise
Endpoint & Device Management
ZTNA
Zero Trust Network Access
Gives users access to specific applications only after verifying identity and device every time, instead of opening the whole network like a VPN.
Related: Zero Trust, VPN, SASE
Network & Cloud Security
Know the terms. Need help putting them to work?
Talk to NetNXT's security team about managed SOC, Zero Trust, identity and compliance for your organisation.