Glossary
Plain-language explanations for encryption, tracking, compliance, and security concepts.
Tracking
Beacon mechanism that triggers a request to log an event and related metadata.
Network Privacy
Linking communication endpoints by correlating traffic features across observation points.
Privacy
Practice of providing clear, accurate disclosures and user-facing explanations of data flows.
Threats
Malicious software disguised as benign code.
Security
Isolated execution region providing confidentiality and integrity guarantees for code and data.
Authentication
Authentication using two independent factors.
Encryption
It’s like a secret code that scrambles your data in a very strong way so no one else can understand it.
Privacy
Property where records, actions, or identifiers cannot be reliably correlated to the same subject.
Consent
User-provided authorization for specific processing purposes and partners.
Tracking
Query parameters used for attribution/analytics; can leak through logs, referrers, and sharing.
Privacy
Speech interface that captures audio, transcribes it, and processes intents, often via cloud services.
Network Privacy
Encrypted tunneling to a VPN gateway.
Network Privacy
Encapsulated, encrypted channel for routed packets.
Security
Continuous program to identify, assess, prioritize, remediate, and verify vulnerabilities across assets.
Security
Automated assessment to identify known vulnerabilities and misconfigurations (often mapped to CVEs).
Security
Policy-based filtering of HTTP(S) traffic for web apps.
Privacy
Ecosystem of blockchain-based applications using wallets, tokens, and decentralized protocols.
Authentication
W3C web authentication API enabling public-key credentials (FIDO2) in browsers.
Network Privacy
Exposure of network identifiers via WebRTC ICE candidates.
Privacy
Surveillance analysis tool referenced in public disclosures; illustrates search/analysis capabilities.
Web Security
Client-side code injection in a trusted web origin.
Threats
Unpatched vulnerability exploited before vendor remediation.
Encryption
Provider lacks access to content decryption keys.
Encryption
Client-controlled keys prevent provider plaintext access.