All glossary terms

• AI Code Review
• AI SecOps
• LLM Security
• AI in DevOps
• Immutable Infrastructure
• Insecure Direct Object References (IDOR)
• Brute Force Attack
• Password Spraying
• Credential Harvesting
• Identity-Based Attacks
• Test-Driven Development (TDD)
• DevOps Governance
• DevOps Maturity Model
• Application Security Requirements
• Authentication Bypass
• Detection as Code
• Code Smell
• Code Audit
• Security Triage
• Continuous Integration Testing
• Security Event Correlation
• Security Misconfiguration
• Security Observability
• Security Telemetry
• Segregation of Duties (SoD)
• Semantic Code Analysis
• Sensitive Data Exposure
• Service Account Security
• Shadow AI
• Shadow APIs
• Software Assurance
• Software Component Verification Standard
• Software Composition Analysis (SCA)
• Software Deployment Security
• Software Development Vulnerabilities
• Software Graph Visualization
• Software Integrity Validation
• Software Security
• Software Security Hygiene
• Software Supply Chain Attacks
• Software Supply Chain Risk Management
• Software Supply Chain Security (SSCS)
• Software Supply Chain Security for AI-Generated Code: How to Protect What You Ship
• Software Supply Chain Security: A Practical How-To Guide for Modern AppSec Teams
• Software Tampering
• Software Weaknesses
• Source Code Analysis
• Static Application Security Testing (SAST)
• Static Code Analysis
• Static Code Review
• STRIDE Threat Model
• Symbolic Execution
• Taint Analysis
• Third Party Cyber Risk Management
• Threat Exposure Management
• Threat Intelligence Integration
• Threat Modeling
• Transitive Dependencies
• Vibe Coding Security
• Vulnerability Classification
• Vulnerability Discovery
• Vulnerability Management Lifecycle (VML)
• Vulnerability Prioritization
• Vulnerability Reachability Analysis
• Vulnerability Scan of Software Code
• Web Application Penetration Testing
• Zero Trust Application Security
• Zero Trust Architecture
• Security Drift
• MCP Protocol Security
• MCP Security
• Mean Time To Detect (MTTD)
• Minimum Viable Security (MVS)
• MLBOM
• Mobile Application Security Testing
• NIST SSDF
• Open Software Supply Chain Attack Reference
• Path Traversal
• Platform Engineering Security
• Policy-as-Code
• Policy-as-Code
• Privilege Escalation
• Privilege Escalation Detection
• Proactive Risk Management
• Prompt Injection
• Prompt Leakage
• Race Condition
• Records of Processing Activities (ROPA)
• Red Teaming for AI
• Runtime Application Security Testing
• Runtime Application Self-Protection
• Runtime Software Verification
• Runtime Threat Detection
• SBOM
• SDLC Governance
• SDLC Security
• Secrets Detection
• Secrets Management
• Secure Code Review
• Secure Coding Standards
• Secure Software Development
• Security Alert Fatigue
• Security Architecture Review
• Security Control Validation
• IAST
• Identity-first Security
• Incident Response
• Incident Root Cause Analysis
• Indicator of Compromise
• Insecure Cryptographic Storage
• Interactive Application Security Testing (IAST)
• Just-in-time Access Controls
• Known Exploited Vulnerabilities
• LDAP
• LLM-Driven Development
• Malicious Dependencies
• Managed Application Security
• Mandatory Access Control
• MCP Authorization
• Attack-Based Vulnerability Management
• Authorization Bypass
• Automated Remediation
• Binary Code Analysis
• Broken Access Control
• BSIMM
• Buffer Overflow
• Build Pipeline Security
• Business Logic Vulnerabilities
• CBOM
• Centralized Log Collection
• CI/CD Security
• Cloud Application Security
• CNAPP
• Code Execution Vulnerability
• Code Obfuscation
• Code Parsing
• Code Property Graph
• Code Review Automation
• Code Risk Management
• Code Scanning
• Code Signing
• Code to Cloud Security
• Code Trustworthiness
• Command Injection
• Common Weakness Enumeration
• Configuration Management Database (CMDB)
• Container Runtime Security
• Container Vulnerability Scanning
• Contextual Vulnerability Management
• Continuous Threat Exposure Management
• Credential Leakage
• Cross-Site Scripting
• Data Fabric
• Data Flow Analysis
• Dependency Confusion
• Dependency Management
• Developer-Centric Security
• Dynamic Application Security Testing (DAST)
• Endpoint Detection and Response
• Enterprise Application Security
• Exploit Development
• Exploit Prediction Scoring System
• FedRAMP
• Fuzz Testing
• GenAI Guardrails
• Hardcoded Credentials
• Hardcoded Secrets
• Hash Validation
• IAC Security
• Application Hardening
• Application Layer Attacks
• Application Lifecycle Management
• Application Risk Management
• Application Risk Scoring
• Application Sandboxing
• Application Security Architecture
• Application Security Architecture Patterns
• Application Security Assessment
• Application Security Controls
• Application Security Policy
• Application Security Testing
• Application Security Vulnerability
• Application Threat Modeling
• Application Vulnerability Correlation
• Application Vulnerability Response (AVR)
• Appsec AI Risk
• Asset-first Application Security
• Attack Path Analysis
• Attack Surface Mapping
• Attack Surface Reduction
• Abstract Syntax Tree
• Access Control Vulnerabilities
• Agentic AI Data Protection
• Agentic AI for Threat Detection
• Agentic AI Security
• Agentic AI Vulnerability Assessment
• Agentic Coding
• AI Agent Monitoring
• AI Agent Observability
• AI Alert Investigation
• AI API Security
• AI Application Security
• AI Code Security Scanning
• AI Coding Assistants
• AI Coding Vulnerability
• AI Risk Detection
• AI Secure Coding Assistant
• AI Security Posture Management
• AI Static Code Analysis
• AI Vulnerability Management
• AI Vulnerability Scanner
• AI-Enhanced Static Analysis
• AI-Native Development
• AIBOM
• API Security Testing
• Application Attack Surface
• Application Data Security
• Application Dependency Mapping
• Application Detection and Response (ADR)