SAST, static application security testing, analyzes source code, bytecode or binaries without running them to find security flaws early in development.
An SBOM is a machine-readable inventory of every component and dependency in a software product, used to track vulnerabilities, licenses and supply…
A security audit is a systematic, evidence-based evaluation of how well an organization's security controls meet a defined standard or policy.
A security playbook is a documented, step-by-step procedure for handling one specific type of security incident, from detection through recovery.
A security policy is a management-approved document that sets an organization's rules, responsibilities and expectations for protecting information.
SIEM is the security platform that collects, normalizes and correlates logs across an organization to detect threats, aid investigations and meet audit…
SOC 2 is an AICPA attestation framework in which an independent auditor reports on a service organization's controls for security and related…
SQL injection is a vulnerability in which untrusted input changes the structure of a database query, letting attackers read or modify data.
SSO (single sign-on) lets a user authenticate once with a central identity provider and then reach many applications without signing in again.
SSRF (server-side request forgery) is a flaw that lets an attacker make a server send requests to internal or unintended network destinations.
Symmetric encryption is the cryptography method that uses one shared secret key both to encrypt and to decrypt data, as in AES…