| Software | Software |
| ASOC (Application Security Orchestration and Correlation) | Application security orchestration and correlation platforms or solutions are platforms designed to manage and coordinate application security. They automate the processes of detecting, analyzing, and responding to application-related security threats. |
| DAST (Dynamic Application Security Testing) | Dynamic code analysis analyzes software without access to its source code by running the software. This testing process simulates malicious external attacks that attempt to exploit common vulnerabilities. |
| DevSecOps (Development Security Operations) | Secure development is a software development methodology that integrates security practices (Sec) into software development and delivery processes (DevOps). |
| OSA (Open Source Analysis) | Open-source software analysis examines open-source libraries and components that are part of the software development scope or are already used as application artifacts. The analysis focuses on known security vulnerabilities and license violations. |
| SCA (Software Composition Analysis) | Software composition analysis determines the composition of software to identify and manage open-source components and their vulnerabilities. |
| SAST (Static Application Security Testing) | Static application security testing tests applications for errors and vulnerabilities in source code by using static analysis. Static analysis can help find code that may contain vulnerabilities. |
| IaC (Infrastructure-as-Code) | Infrastructure as code is an approach to creating and managing infrastructure by using code, for example, configuration files or scripts. |
| Container Security | Container security is an approach to protecting and securely configuring containerization systems. It encompasses various tools and methods for protecting containers from potential threats and attacks. |
| Project | An entity created by an authorized user to logically group all related applications or components developed and maintained by one team or organization. The project must be checked for compliance with the company's security policies and quality standards. |
| AST (Application Security Testing) | Application security testing |
| Integration | Data exchange between systems with possible subsequent processing |
| AD (Active Directory) | Directory services are collections of software services and databases, based on Microsoft technology, that provide a hierarchical representation of network information resources and configure access to them. |
| LDAP (Lightweight Directory Access Protocol) | Lightweight Directory Access Protocol |
| SSO (Single Sign-On) | Single sign-on is an authentication method in which a user uses one account across multiple services |