| Software | Software |
| ASOC (Application Security Orchestration and Correlation) | Application security orchestration and correlation platforms or solutions are designed to manage and coordinate application security. They automate the detection, analysis, and response processes for application-related security threats. |
| DAST (Dynamic Application Security Testing) | Dynamic code analysis analyzes software without access to the source code by executing the software. Application testing simulates malicious external attacks that attempt to exploit common vulnerabilities. |
| DevSecOps (Development Security Operations) | Secure development is a software development methodology that integrates security practices (Sec) into software development and delivery processes (DevOps). |
| OSA (Open Source Analysis) | Open source software analysis examines open source libraries and components that are part of the software development scope or are already used as artifacts in an application. The analysis identifies known security vulnerabilities and license violations. |
| SCA (Software Composition Analysis) | Software composition analysis determines the composition of software to identify and manage open source components and their vulnerabilities. |
| SAST (Static Application Security Testing) | Static application security testing tests an application for errors and vulnerabilities in its source code through static analysis. Static analysis can identify code that may contain vulnerabilities. |
| IaC (Infrastructure-as-Code) | Infrastructure as code is an approach to creating and managing infrastructure through code, such as configuration files or scripts. |
| Container Security | Container security is an approach to protecting and securely configuring containerization systems. It’s a broad term that covers various tools and methods for protecting containers from potential threats and attacks. |
| Project | An entity created by an authorized user to logically group related applications or components that a team or organization develops and maintains. The project must be checked for compliance with the company’s security policies and quality requirements. |
| AST (Application Security Testing) | Application security testing |
| Integration | Data exchange between systems, with possible subsequent processing |
| AD (Active Directory) | Directory services are collections of software services and databases, based on Microsoft technologies, that provide a hierarchical representation of information resources on a network and configure access to them. |
| LDAP (Lightweight Directory Access Protocol) | Lightweight Directory Access Protocol |
| SSO (Single Sign-On) | Single sign-on is an authentication method in which a user uses one account across multiple services. |