A
- AIM (Asset Inventory Management): Snapsec’s internal cyber asset attack surface management module mapping APIs, code, containers, cloud resources, and identities.
- ASM (Attack Surface Management): Snapsec’s external reconnaissance engine mapping public internet perimeters, subdomains, DNS, and certificates.
- Asset Criticality: A policy tier (Tier 1 to Tier 4) indicating the business importance and sensitivity of an asset.
B
- Blast Radius: The simulated lateral impact across interconnected assets if an initial target is compromised.
- BOLA (Broken Object Level Authorization): An API vulnerability where users can access unauthorized objects by manipulating IDs in requests (also known as IDOR).
- Business Unit (BU): An organizational boundary representing product squads, departments, or cost centers within a workspace.
C
- Canonical Asset ID: A unique, persistent identifier assigned to an asset regardless of IP rotation or ephemeral redeployment.
- CTEM (Continuous Threat Exposure Management): An enterprise security program framework designed to continuously scope, discover, prioritize, and validate cyber exposures.
- CVE (Common Vulnerabilities and Exposures): Standardized dictionary of publicly known cybersecurity vulnerabilities.
- CVSS (Common Vulnerability Scoring System): Industry standard numerical score (0.0 to 10.0) measuring vulnerability severity.
E
- EPSS (Exploit Prediction Scoring System): Data-driven threat metric estimating the probability that a software vulnerability will be exploited in the wild within 30 days.
F
- Finding: A single observation or vulnerability instance detected during an assessment run.
S
- SLA (Service Level Agreement): Enforceable remediation timeframe defined per severity tier.
T
- TrueRisk™: Snapsec’s mathematical risk scoring model combining CVSS base score, asset business criticality, internet exposure status, and real-time exploit intelligence.
V
- VM (Vulnerability Management): Snapsec’s orchestration layer for deduplication, triage, SLA tracking, and Jira remediation.
- VS (Vulnerability Scanner): Automated scanner engine targeting network, host, and cloud environments.
W
- WAS (Web Application Scanner): Automated scanner specializing in OWASP Top 10 web vulnerabilities and REST/GraphQL APIs.