Glossary

Security terms, in plain English.

Short, clear definitions of the security and compliance terms startups run into.

All Announcement Blog Case Studies Comparison Events Glossary Guides Startup Breaches

SAST Explained: Static Application Security Testing

SAST analyses your source code without running it, looking for insecure patterns that could become vulnerabilities once the code ships.… 13 Aug 2026 4 min read

SIEM Explained: From Raw Logs to Real Alerts

A SIEM collects security events from across your systems, correlates them, and raises an alert when the combination looks like… 13 Aug 2026 4 min read

API Security: Risks and Controls That Work

API security is the practice of protecting the endpoints your applications expose, where the main risk is not a malformed… 13 Aug 2026 4 min read

ISO 27001: Clauses, Annex A and Certification

ISO 27001 is the international standard for information security management. It sets out how a company should identify risks to… 12 Aug 2026 5 min read

WAF Explained: What a Web Application Firewall Blocks

A WAF sits in front of your application, inspects every incoming request, and blocks the ones carrying an attack before… 12 Aug 2026 4 min read

Encryption at Rest vs In Transit: The Difference

Encryption at rest protects data while it is stored. Encryption in transit protects it while it moves between systems. Most… 12 Aug 2026 5 min read

DLP Explained: How Data Loss Prevention Works

DLP is the set of controls that stop sensitive data leaving your organisation, whether someone is doing it deliberately or… 12 Aug 2026 4 min read

MDM Explained: Device Management for Compliance

MDM is how an organisation enrols, configures and secures the laptops and phones its people use for work, and removes… 11 Aug 2026 4 min read