Glossary

Security terms, in plain English.

Short, clear definitions of the security and compliance terms startups run into.

All Announcement Blog Case Studies Comparison Events Glossary Guides Startup Breaches

DAST Explained: Dynamic Application Security Testing

DAST tests a running application from the outside, sending real requests the way an attacker would, to find weaknesses that… 13 Aug 2026 5 min read

ISO 27001 Annex A Controls Explained

Annex A is the catalogue of 93 security controls published with ISO 27001. You select from it based on your… 13 Aug 2026 5 min read

DPDP Act: Rules, Deadlines and Penalties

The DPDP Act is India’s data protection law. It sets the rules for how organisations may collect, use and store… 13 Aug 2026 5 min read

Risk Treatment Plan: Options and What to Record

A risk treatment plan records what you decided to do about each risk you identified, which controls implement that decision,… 13 Aug 2026 4 min read

Risk Assessment: Steps and the Risk Register

A risk assessment is the process of working out what could go wrong with the information you hold, how likely… 13 Aug 2026 4 min read

Statement of Applicability: What Auditors Check

The Statement of Applicability is the document listing every Annex A control, whether it applies to your organisation, and the… 13 Aug 2026 3 min read

ISMS Explained: The System ISO 27001 Certifies

An ISMS is the set of policies, processes and records an organisation uses to manage information security decisions, rather than… 13 Aug 2026 4 min read

SBOM Explained: Software Bill of Materials

An SBOM is a machine-readable list of every component inside a piece of software, so that when a vulnerability is… 13 Aug 2026 4 min read

SCA Explained: Safer Open-Source Dependencies

SCA identifies the open-source libraries your application depends on and checks each one against known vulnerabilities and licence obligations. Glossary… 13 Aug 2026 4 min read