2,339 definitions
Latency Health Probe is a networking availability check that tests whether a service or path can receive traffic for time between request and response. It uses timed requests, thresholds, and regional checks so teams can send traffic only to healthy targets while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Latency Health Probe when a user saw slow responses, so the team could send traffic only to healthy targets before traffic crossed a service boundary.”
Endpoint Secret Scanner is a security preventive control that finds credentials before they spread for user device and server protection. It uses pattern matching, entropy checks, and allowlists so teams can stop accidental key exposure while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Endpoint Secret Scanner when a workstation reported suspicious activity, so the team could stop accidental key exposure before the risk review began.”
Service Mesh Path Trace is a networking diagnostic record that shows where traffic travels and where delay or loss appears for east-west service communication. It uses hop data, timing, and network metadata so teams can debug connectivity issues while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Service Mesh Path Trace when a service called another service, so the team could debug connectivity issues before traffic crossed a service boundary.”
Subnet Anycast Endpoint is a networking routing pattern that advertises one address from multiple locations for address segmentation. It uses regional announcements, health checks, and traffic steering so teams can serve users from nearby healthy sites while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Subnet Anycast Endpoint when a workload moved networks, so the team could serve users from nearby healthy sites before traffic crossed a service boundary.”
Zero Trust Forensic Snapshot is a security investigation artifact that captures system state for later review for continuous verification model. It uses logs, configuration, hashes, and time-bounded data so teams can analyze incidents without changing evidence while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Zero Trust Forensic Snapshot when a device changed posture, so the team could analyze incidents without changing evidence before the risk review began.”
Packet Ingress Rule is a networking boundary rule that controls how external traffic enters a service for unit of network transmission. It uses hostnames, paths, protocols, and policy checks so teams can keep entry points predictable while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Packet Ingress Rule when packet loss increased, so the team could keep entry points predictable before traffic crossed a service boundary.”
Secrets Patch Window is a security remediation schedule that sets when a fix should be applied for keys, tokens, and credentials. It uses risk severity, testing needs, and maintenance constraints so teams can repair systems without unnecessary disruption while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Secrets Patch Window when a secret appeared in logs, so the team could repair systems without unnecessary disruption before the risk review began.”
CDN Rate Limit is a networking traffic control that caps request volume over a period for content delivery and edge caching. It uses identity keys, windows, and response policies so teams can protect services from overload while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used CDN Rate Limit when a cache region served an asset, so the team could protect services from overload before traffic crossed a service boundary.”
Identity Attack Surface is a security exposure model that lists reachable systems, actions, and trust boundaries for user and workload identity. It uses asset inventory, route discovery, and permission mapping so teams can prioritize risk reduction while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Identity Attack Surface when a service account requested access, so the team could prioritize risk reduction before the risk review began.”
VPN Egress Policy is a networking outbound control that decides where workloads may send traffic for private tunnel connectivity. It uses allowlists, identity, and logging so teams can reduce exfiltration and SSRF risk while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used VPN Egress Policy when a remote user connected, so the team could reduce exfiltration and SSRF risk before traffic crossed a service boundary.”