Skip to main content
Version: 1.5

Terms and definitions

Term/abbreviationDefinition
SoftwareSoftware
ASOC (Application Security Orchestration and Correlation)Application security orchestration and correlation platforms or solutions are designed to manage and coordinate application security. They automate the detection, analysis, and response to application-related security threats.
DAST (Dynamic Application Security Testing)Dynamic code analysis analyzes software without access to its source code by executing the software. It tests applications by simulating malicious external attacks that attempt to exploit common vulnerabilities.
DevSecOps (Development Security Operations)Secure development is a software development methodology that integrates security practices (Sec) into software development and delivery processes (DevOps).
OSA (Open Source Analysis)Open-source software analysis examines open-source libraries and components included in the software development scope or already used as application artifacts. It analyzes them for known security vulnerabilities and license violations.
SCA (Software Composition Analysis)Software composition analysis determines the contents of software to identify and manage open-source components and their vulnerabilities.
SAST (Static Application Security Testing)Static application security testing tests applications for errors and vulnerabilities in source code through static analysis. Static analysis can identify code that may contain vulnerabilities.
IaC (Infrastructure-as-Code)Infrastructure as code is an approach to creating and managing infrastructure by using code, such as configuration files or scripts.
Container SecurityContainer security protects and securely configures containerization systems. It covers a range of tools and methods for protecting containers from potential threats and attacks.
ProjectAn entity created by an authorized user to logically group related applications or components developed and maintained by a team or organization. The project must be checked for compliance with the company's security policies and quality standards.
AST (Application Security Testing)Application security testing
IntegrationData exchange between systems with possible subsequent processing
AD (Active Directory)Directory services are collections of software services and databases, based on Microsoft technology, that provide a hierarchical representation of information resources on a network and configure access to them.
LDAP (Lightweight Directory Access Protocol)Lightweight Directory Access Protocol
SSO (Single Sign-On)Single sign-on is an authentication method in which a user uses one account across multiple services