Every security term, explained in plain English. Pick an area, search for anything you've heard of, or just start clicking.
Press / to search · ↑↓ to pick · Enter to open
🔑
Identity & Access Management (IAM)
Controls who can access what.
Identity and Access Management covers how people prove who they are and what they are allowed to open, change, or run once they are in.
Stolen or reused passwords are one of the most common ways attackers get into small-business accounts, so strong sign-in controls close a very common door.
Examples: Microsoft Entra ID, Okta, CyberArk
💻
Endpoint Security
Protects laptops, desktops, servers, and mobile devices.
Endpoint security protects the individual devices people use every day, such as laptops, phones, and servers, from malware and misuse.
Each laptop or phone is a possible entry point, and one infected device can spread to shared files and accounts.
Examples: Microsoft Defender, CrowdStrike, SentinelOne
🌐
Network Security
Protects traffic and network infrastructure.
Network security controls what traffic can flow into, out of, and around your network, and watches that traffic for signs of attack.
A poorly separated office network can let one compromised device, like a smart camera or guest laptop, reach your important systems.
Examples: Palo Alto, Fortinet, Cisco
📧
Email Security
Protects against phishing and malicious emails.
Email security filters dangerous messages before they reach people and helps prove that email sent from your domain is really from you.
Email is where most phishing and invoice-fraud attempts start, and without the right DNS records others can more easily send email pretending to be your business.
Examples: Microsoft Defender for Office 365, Proofpoint
🗂️
Data Security
Protects sensitive information.
Data security is about knowing where your sensitive information lives and keeping it from being seen, changed, or shared by the wrong people.
Customer records, payment details, and employee information are often what attackers are after, and losing them can bring legal duties and lost trust.
Examples: Microsoft Purview, Varonis
☁️
Cloud Security
Protects SaaS, IaaS, and PaaS workloads.
Cloud security protects the online services you rent, from software apps like Microsoft 365 (SaaS) to servers (IaaS) and platforms (PaaS) in providers like Azure or AWS.
Cloud providers secure their platform, but your settings, accounts, and data are your responsibility, and a single misconfiguration can expose files publicly.
Examples: Defender for Cloud, Wiz, Prisma Cloud
📡
Security Monitoring
Detects threats and suspicious activity.
Security monitoring collects activity records from your systems and looks through them for signs that something is wrong.
Attackers often go unnoticed for a long time, and without logs you may not be able to tell what happened or what was accessed.
Examples: Microsoft Sentinel, Splunk, QRadar
🕵️
Threat Intelligence
Provides information about attackers.
Threat intelligence is information about who is attacking, how they operate, and what clues they leave behind, used to improve defenses.
Knowing which scams and attack methods are currently targeting businesses like yours helps you focus limited time and money on the most likely risks.
Examples: Microsoft Threat Intelligence
🩹
Vulnerability Management
Finds and fixes weaknesses.
Vulnerability management is the ongoing cycle of finding security weaknesses in your systems, deciding which matter most, and fixing them.
Many attacks use known flaws that already have a fix available, so regular scanning and patching removes easy targets.
Examples: Tenable, Qualys, Rapid7
🧩
Application Security
Protects software throughout development.
Application security builds security checks into how software is designed, written, tested, and maintained, from first draft to release.
If your business runs a website, online store, or custom app, flaws in that code or its add-ons can expose customer data.
Examples: GitHub Advanced Security, Veracode
🚨
Incident Response
Handles security incidents.
Incident response is the plan and process for what to do when something goes wrong, from first alert through cleanup and lessons learned.
A simple written plan, with who to call and what to do first, can reduce confusion, downtime, and cost when an incident happens.
📋
Compliance & Governance
Ensures security is managed properly.
Governance and compliance cover the policies, decisions, and checks that make sure security is planned, owned, and measured, and that legal and contractual requirements are met.
Clients, insurers, and regulators increasingly ask businesses to show how they protect data, and a basic program makes those questions easier to answer.
💾
Backup & Recovery
Protects against ransomware and outages.
Backup and recovery make sure you keep separate copies of important data and systems and can actually restore them when something breaks.
Reliable, tested backups are often what decides whether a ransomware attack or hardware failure is a bad day or a business-ending event.
Examples: Veeam, Commvault
🏢
Physical Security
Protects facilities and hardware.
Physical security controls who can enter your buildings and rooms and protects the hardware and paper records inside.
Someone who can walk up to an unlocked computer, server, or filing cabinet can often bypass many digital protections.
🤖
AI Security
Protects AI systems and data.
AI security is a rapidly growing area focused on using AI tools safely and protecting AI systems, and the data they touch, from misuse.
Staff may paste customer or business information into AI chat tools, and AI features connected to your data can be tricked into revealing or acting on it.