📣 Apiiro named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

Learn more

Apiiro logo close menu
Get a demo
mobile menu toggler

Glossary

A B C D E F G H I J K L M N O P R S T U V W X Z

A

Abstract Syntax Tree
Access Control Vulnerabilities
Agentic AI Data Protection
Agentic AI for Threat Detection
Agentic AI Security
Agentic AI Vulnerability Assessment
Agentic Coding
AI Agent Monitoring
AI Agent Observability
AI Alert Investigation
AI API Security
AI Application Security
AI Code Security Scanning
AI Coding Assistants
AI Coding Vulnerability
AI Risk Detection
AI Secure Coding Assistant
AI Security Posture Management
AI Static Code Analysis
AI Vulnerability Management
AI Vulnerability Scanner
AI-Enhanced Static Analysis
AI-Native Development
AIBOM
AJAX Security Testing
API Abuse
API Security Testing
Application Attack Surface
Application Data Security
Application Dependency Mapping
Application Detection and Response (ADR)
Application Hardening
Application Layer Attacks
Application Lifecycle Management
Application Risk Management
Application Risk Scoring
Application Sandboxing
Application Security Architecture
Application Security Architecture Patterns
Application Security Assessment
Application Security Controls
Application Security Policy
Application Security Testing
Application Security Vulnerability
Application Threat Modeling
Application Vulnerability Correlation
Application Vulnerability Response (AVR)
Appsec AI Risk
Artifact Signing
Asset-first Application Security
Attack Path Analysis
Attack Surface Mapping
Attack Surface Reduction
Attack-Based Vulnerability Management
Authentication Bypass
Authentication Testing
Authorization Bypass
Authorization Testing
Automated Remediation

B

Binary Code Analysis
Broken Access Control
BSIMM
Buffer Overflow
Build Pipeline Security
Business Logic Vulnerabilities

C

CBOM
Centralized Log Collection
CI/CD Security
Client-Side Security Testing
Cloud Application Security
Cloud Native Security
CNAPP
Code Execution Vulnerability
Code Obfuscation
Code Parsing
Code Property Graph
Code Provenance
Code Review Automation
Code Risk Management
Code Scanning
Code Signing
Code to Cloud Security
Code Trustworthiness
Command Injection
Common Vulnerability Scoring System (CVSS)
Common Weakness Enumeration
Compensating Controls
Configuration Management Database (CMDB)
Container Runtime Security
Container Vulnerability Scanning
Contextual Vulnerability Management
Continuous Threat Exposure Management
Credential Leakage
Cross-Site Scripting

D

Data Fabric
Data Flow Analysis
Dependency Confusion
Dependency Management
Developer-Centric Security
Dynamic Application Security Testing (DAST)

E

Endpoint Detection and Response
Enterprise Application Security
Exploit Development
Exploit Prediction Scoring System

F

FedRAMP
Fuzz Testing

G

GenAI Guardrails

H

Hardcoded Credentials
Hardcoded Secrets
Hash Validation

I

IAC Security
IAST
Identity-first Security
Incident Response
Incident Root Cause Analysis
Indicator of Compromise
Insecure Cryptographic Storage
Insecure Deserialization
Integer Overflow
Interactive Application Security Testing (IAST)

J

Just-in-time Access Controls

K

Known Exploited Vulnerabilities
Kubernetes Security

L

Lateral Movement Attack
LDAP
LLM-Driven Development

M

Malicious Dependencies
Managed Application Security
Mandatory Access Control
MCP Authorization
MCP Protocol Security
MCP Security
Mean Time To Detect (MTTD)
Mean Time to Remediate (MTTR)
Minimum Viable Security (MVS)
MLBOM
Mobile Application Security Testing

N

NIST SSDF

O

Open Software Supply Chain Attack Reference
OpenSSF Scorecard
OWASP ASVS
OWASP SAMM

P

Package Signing
Patch Management
Path Traversal
Penetration Testing Methodology
Platform Engineering Security
Policy-as-Code
Policy-as-Code
Privilege Escalation
Privilege Escalation Detection
Proactive Risk Management
Prompt Injection
Prompt Leakage

R

Race Condition
Records of Processing Activities (ROPA)
Red Teaming for AI
Remote Code Execution (RCE)
Risk Acceptance
Risk-Based Vulnerability Management
Runtime Application Security Testing
Runtime Application Self-Protection
Runtime Software Verification
Runtime Threat Detection

S

Sandwich Attack
SBOM
SDLC Governance
SDLC Security
Secrets Detection
Secrets Management
Secure Code Review
Secure Coding Standards
Secure Software Development
Security Alert Fatigue
Security Architecture Review
Security Control Validation
Security Debt
Security Drift
Security Event Correlation
Security Gates
Security Misconfiguration
Security Observability
Security Telemetry
Segregation of Duties (SoD)
Semantic Code Analysis
Sensitive Data Exposure
Service Account Security
Shadow AI
Shadow APIs
Shift Left Security
Shift Right Security
Software Assurance
Software Component Verification Standard
Software Composition Analysis (SCA)
Software Deployment Security
Software Development Vulnerabilities
Software Graph Visualization
Software Integrity Validation
Software Security
Software Security Hygiene
Software Supply Chain Attacks
Software Supply Chain Risk Management
Software Supply Chain Security (SSCS)
Software Supply Chain Security for AI-Generated Code: How to Protect What You Ship
Software Supply Chain Security: A Practical How-To Guide for Modern AppSec Teams
Software Tampering
Software Weaknesses
Source Code Analysis
SSRF Vulnerability
Static Application Security Testing (SAST)
Static Code Analysis
Static Code Review
STRIDE Threat Model
Symbolic Execution

T

Taint Analysis
Third Party Cyber Risk Management
Threat Exposure Management
Threat Hunting
Threat Intelligence Integration
Threat Modeling
Transitive Dependencies
Typosquatting

U

Unified Vulnerability Management

V

Vibe Coding Security
Vulnerability Classification
Vulnerability Discovery
Vulnerability Exploitability Exchange (VEX)
Vulnerability Management Lifecycle (VML)
Vulnerability Prioritization
Vulnerability Reachability Analysis
Vulnerability Scan of Software Code
Vulnerability Triage

W

Web Application Penetration Testing
Web Services Testing

X

XXE Vulnerability

Z

Zero Day Vulnerability
Zero Trust Application Security
Zero Trust Architecture

Cookies Notice

This site uses cookies to deliver services and to analyze traffic.

Learn more
Okay, got it