🩹
Security Patch
Security
Remediation update for known vulnerabilities.
zero day
exploit
endpoint security
Glossary
Privacy terms glossary
Plain-language explanations for encryption, tracking, compliance, and security concepts.
55 terms
(page 1 of 3)
🍪
SameSite Cookie
Web Security
Cookie attribute controlling cross-site cookie sending; helps mitigate CSRF and reduces third-party usage.
cookie
csrf
session cookie
🏢
SAML
Authentication
XML-based federation protocol where an IdP issues signed assertions to a service provider.
single sign on
identity provider
authorization
🏖️
Sandboxing
Security
Isolation of code execution with constrained privileges.
hardened browser
exploit
endpoint security
📦
SBOM
Security
Software Bill of Materials: structured inventory of components, versions, and dependencies for risk management.
supply chain attack
open source
security audit
🎯
Scope
Authorization
Authorization constraint defining the permissions encoded in a token; should be minimal and explicit.
oauth 2
access token
least privilege
🦻
Screen Reader
Privacy
Assistive technology that converts UI content into speech/Braille; relevant to accessible privacy controls.
cookie banner
consent
dark patterns
🔍
Search Engine
Privacy
Information retrieval system that indexes content and ranks results using signals and models.
metasearch engine
privacy browser
search index
🗂️
Search Index
Privacy
Structured datastore of crawled documents and signals used to retrieve and rank results.
search engine
right to be forgotten
data breach
🔑
Secret Key
Encryption
Confidential key material (or shared secret) used for encryption, signing, or authentication.
encryption key
private key
key management
🗝️
Secrets Management
Encryption
Tooling and processes for secure secret storage, access control, auditing, and rotation (often via vault services).
secret key
key management
key vault
🔄
Secrets Rotation
Encryption
Lifecycle control to replace secrets/keys and invalidate old ones, reducing exposure window.
secrets management
key rotation
secret key
🧮
Secure Aggregation
Privacy
Cryptographic protocol allowing computation of aggregates without revealing individual contributions.
federated learning
differential privacy
encryption
🚀
Secure Boot
Security
Cryptographic verification of boot chain integrity.
endpoint security
secure enclave
malware
🔗
Secure Connection
Network Privacy
Authenticated, encrypted channel established using TLS (often via HTTPS).
https
tls
data encryption in transit
🍪
Secure Cookie Flag
Web Security
Cookie attribute restricting transmission to HTTPS; reduces exposure to network interception and downgrade.
cookie
https
tls
🗑️
Secure Delete
Data Management
Deletion method ensuring data is unrecoverable (e.g., cryptographic erase, overwrite, key destruction).
data erasure
data destruction
data retention
🧩
Secure Element
Security
Tamper-resistant hardware component for secure key storage and cryptographic operations.
secure enclave
trusted execution environment
passkey
🔐
Secure Enclave
Security
Hardware-backed trusted execution for key isolation.
biometric authentication
encryption key
key management
💬
Secure Messaging
Security
Messaging systems designed to provide confidentiality, integrity, and safer identity/account controls.
e2ee
metadata
two factor authentication
🤝
Secure Multi‑Party Computation
Encryption
Cryptographic protocols that allow parties to jointly compute a function while keeping inputs private.
homomorphic encryption
zero knowledge proof
data minimization
🗄️
Secure Storage
Security
Confidential storage with controlled access and keys.
data encryption at rest
encryption key
secure enclave
🧾
Security Audit
Security
Systematic assessment of controls, configuration, and compliance.
penetration testing
responsible disclosure
incident response
🧾
Security Headers
Web Security
HTTP response headers enforcing browser security policies.
https
xss
clickjacking