Secrets Management

Multi-Factor Authentication

An authentication method requiring two or more verification factors to gain access to a resource.

Biometric Authentication

Using unique biological characteristics like fingerprints, facial features, or iris patterns to verify identity.

Privileged Access Management

Security solutions that control and monitor access for users with elevated permissions to critical systems.

Identity Threat Detection and Response

Security solutions focused on detecting and responding to identity-based attacks such as credential theft, privilege escalation, and compromised service accounts.

Deception Technology

Security solutions that deploy decoy assets such as fake servers, credentials, and data to detect, misdirect, and analyse attackers who have breached perimeter defences.

Phishing-Resistant Authentication

Authentication methods such as FIDO2 passkeys and hardware security keys that are immune to phishing attacks because credentials are cryptographically bound to the legitimate service.

A systematic evaluation of an organisation's information system security by measuring compliance with established criteria.

A group of security professionals who defend against both real attackers and simulated attacks from red teams.

An auditing framework that evaluates the security, availability, processing integrity, confidentiality, and privacy of service organisations.

Automated tools that continuously assess cloud infrastructure configurations against security best practices and compliance requirements, identifying and remediating misconfigurations.

A model describing the stages of a cyberattack from reconnaissance through data exfiltration.

Malicious software that encrypts a victim's files and demands payment for the decryption key.

The total number of points where an unauthorised user can try to enter or extract data from a system.

A system that monitors network traffic or system activities for malicious activity or policy violations.

API

Application Programming Interface — a set of protocols and tools for building and integrating software applications.