Biometric Authentication

Multi-Factor Authentication

An authentication method requiring two or more verification factors to gain access to a resource.

Privileged Access Management

Security solutions that control and monitor access for users with elevated permissions to critical systems.

Identity Threat Detection and Response

Security solutions focused on detecting and responding to identity-based attacks such as credential theft, privilege escalation, and compromised service accounts.

Deception Technology

Security solutions that deploy decoy assets such as fake servers, credentials, and data to detect, misdirect, and analyse attackers who have breached perimeter defences.

Secrets Management

The secure storage, distribution, rotation, and auditing of sensitive credentials such as API keys, tokens, passwords, and certificates used by applications and services.

Phishing-Resistant Authentication

Authentication methods such as FIDO2 passkeys and hardware security keys that are immune to phishing attacks because credentials are cryptographically bound to the legitimate service.

A decoy system designed to attract attackers and study their methods while protecting real systems.

Technology that automates security operations by orchestrating tools and processes for incident response.

Security technology that monitors endpoint devices to detect, investigate, and respond to cyber threats.

The specific path, method, or scenario used by an attacker to gain unauthorised access to a system.

The total number of points where an unauthorised user can try to enter or extract data from a system.

A globally accessible knowledge base of adversary tactics and techniques based on real-world cyber observations.

A set of voluntary guidelines for managing and reducing cybersecurity risk developed by the US National Institute of Standards.

A comprehensive inventory of all software components, libraries, and dependencies used in an application, enabling vulnerability tracking and supply chain risk management.