Previous SecureBeans logoNew SecureBeans logoWe’ve refreshed our brand. Same team, same partners, same phone number.Read the story
+92 321 2112225
SecureBeans - Information Security Integration CompanyTalk to an Expert
Cybersecurity glossary

Security glossary

Plain-English definitions of the cybersecurity terms you will meet in security projects - EDR, XDR, PAM, DLP, SIEM, SASE and more.

Attack surface
All the points where an attacker could try to enter or extract data - devices, applications, cloud services, users and internet-facing systems.
CNAPP / CSPM
Cloud-Native Application Protection Platform / Cloud Security Posture Management - tools that find misconfigurations and risks in cloud environments.
DLP
Data Loss Prevention - technology that detects and blocks sensitive data leaving the organisation through email, web, cloud apps or devices.
EDR
Endpoint Detection and Response - records endpoint activity so threats can be detected, investigated and contained.
EPP
Endpoint Protection Platform - prevention-focused endpoint security such as next-generation antivirus and exploit protection.
GRC
Governance, Risk and Compliance - the processes and tools that keep an organisation's controls, risks and regulatory duties under management.
IPS
Intrusion Prevention System - inspects network traffic and blocks exploits and attacks in real time.
MDR
Managed Detection and Response - a service where external experts monitor, investigate and respond to threats 24x7.
MFA
Multi-Factor Authentication - requires two or more proofs of identity, such as a password plus an app approval.
NGFW
Next-Generation Firewall - a firewall that also understands applications and users and includes IPS and threat protection.
PAM
Privileged Access Management - controls, vaults and monitors administrator and other high-risk accounts.
SASE
Secure Access Service Edge - combines network access and security services, such as web gateway and zero trust access, delivered from the cloud.
SIEM
Security Information and Event Management - collects and correlates logs to detect threats and support investigations.
SSO
Single Sign-On - one secure login gives access to many applications.
SWG
Secure Web Gateway - filters and inspects web traffic to block malicious sites and enforce policy.
XDR
Extended Detection and Response - correlates endpoint, email, identity, network and cloud data into single incidents.
Zero Trust
A security model that never assumes trust based on network location and verifies every user, device and request.
In depth

Security glossary at a glance

Why a cybersecurity glossary

Security is full of acronyms. This cybersecurity glossary explains the cybersecurity terms we use most - EDR, XDR, MDR, SIEM, PAM, DLP, SASE, GRC and zero trust - in one or two plain sentences each, so buyers and boards can follow the conversation.

FAQ

Frequently asked questions

What is the difference between EDR and XDR?

EDR (Endpoint Detection and Response) monitors and responds to threats on endpoints. XDR (Extended Detection and Response) correlates endpoint data with email, identity, network and cloud signals into single incidents.

What is PAM in cybersecurity?

PAM (Privileged Access Management) controls, vaults, rotates and monitors administrator and other high-risk accounts so attackers cannot easily misuse them.

What is DLP?

DLP (Data Loss Prevention) detects and blocks sensitive data leaving an organisation through email, web, cloud applications, endpoints and removable media.

What is SASE?

SASE (Secure Access Service Edge) combines networking and security services such as secure web gateway, cloud access security and zero trust network access, delivered from the cloud.

Not sure where to start?

Book a 30-minute security architecture review with our engineers.

Book a reviewGet a Quote