> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Glossary

> Definitions of key concepts, architectural components, and acronyms used across Snapsec.

### A

* **AIM (Asset Inventory Management)**: Snapsec's internal cyber asset attack surface management module mapping APIs, code, containers, cloud resources, and identities.
* **ASM (Attack Surface Management)**: Snapsec's external reconnaissance engine mapping public internet perimeters, subdomains, DNS, and certificates.
* **Asset Criticality**: A policy tier (Tier 1 to Tier 4) indicating the business importance and sensitivity of an asset.

### B

* **Blast Radius**: The simulated lateral impact across interconnected assets if an initial target is compromised.
* **BOLA (Broken Object Level Authorization)**: An API vulnerability where users can access unauthorized objects by manipulating IDs in requests (also known as IDOR).
* **Business Unit (BU)**: An organizational boundary representing product squads, departments, or cost centers within a workspace.

### C

* **Canonical Asset ID**: A unique, persistent identifier assigned to an asset regardless of IP rotation or ephemeral redeployment.
* **CTEM (Continuous Threat Exposure Management)**: An enterprise security program framework designed to continuously scope, discover, prioritize, and validate cyber exposures.
* **CVE (Common Vulnerabilities and Exposures)**: Standardized dictionary of publicly known cybersecurity vulnerabilities.
* **CVSS (Common Vulnerability Scoring System)**: Industry standard numerical score (0.0 to 10.0) measuring vulnerability severity.

### E

* **EPSS (Exploit Prediction Scoring System)**: Data-driven threat metric estimating the probability that a software vulnerability will be exploited in the wild within 30 days.

### F

* **Finding**: A single observation or vulnerability instance detected during an assessment run.

### S

* **SLA (Service Level Agreement)**: Enforceable remediation timeframe defined per severity tier.

### T

* **TrueRisk™**: Snapsec's mathematical risk scoring model combining CVSS base score, asset business criticality, internet exposure status, and real-time exploit intelligence.

### V

* **VM (Vulnerability Management)**: Snapsec's orchestration layer for deduplication, triage, SLA tracking, and Jira remediation.
* **VS (Vulnerability Scanner)**: Automated scanner engine targeting network, host, and cloud environments.

### W

* **WAS (Web Application Scanner)**: Automated scanner specializing in OWASP Top 10 web vulnerabilities and REST/GraphQL APIs.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.