Glossary

This is some text inside of a div block.

Access Management

practice of controlling access to specific assets. In order to secure an asset against attack/breach/exposure, limiting access to only...

Access Management

access-management

Account Takeover

A type of cyber security attack where a bad actor steals the login credentials of an account. In some cases, the bad actor locks the...

Account Takeover

account-takeover

Authentication

the act of verifying the identity of a user or SaaS app. In contrast with identification, the act of indicating a person or thing's...

Authentication

authentication

Authorization

the function of specifying access rights and/or privileges to resources, such as SaaS apps, infrastructure, data, or devices and is...

Authorization

authorization

BYOA

Bring your own application (BYOA) is the growing trend of employees using the application of their choice to perform their jobs...

BYOA

byoa

BYOD

Bring Your Own Device. Employees using their personal devices to perform the duties of their job. In some cases this is approved by...

BYOD

byod

Business-led IT

Technology, software, or SaaS acquired and used by employees that is outside the purview of the central IT or security departments. In some

Business-led IT

business-led-it

Cloud Access Security Broker (CASB)

CASB is an enforcement point for accessing cloud services and applications, generally deployed via a collection of services and...

Cloud Access Security Broker (CASB)

cloud-access-security-broker-casb

Cloud Security

Cloud security is about making sure that cloud computing is safe and compliant, and that any risks associated with its use and...

Cloud Security

cloud-security

Cloud Security Posture Management (CSPM)

Cloud security posture management (CSPM) is the continuous proactive process of enterprise-wide asset visibility, risk assessment, and...

Cloud Security Posture Management (CSPM)

cloud-security-posture-management-cspm

Cloud environment vs SaaS environment

cloud refers to any asset or set of assets supporting digital workloads outside the physical corporate network. SaaS refers to cloud base...

Cloud environment vs SaaS environment

cloud-environment-vs-saas-environment

Cybersecurity Mesh Architecture (CSMA)

Cybersecurity mesh architecture (CSMA) provides a security support layer to enable distinct security services work together, improving...

Cybersecurity Mesh Architecture (CSMA)

cybersecurity-mesh-architecture

Dirty Environments

Enterprise IT environments with a lot of shadow SaaS, poor configurations, and lack of control...

Dirty Environments

dirty-environments

Identity Attack Surface Management (IASM)

Identity attack surface management (IASM) is a security practice and technology solution that provides identity discovery, risk prior...

Identity Attack Surface Management (IASM)

identity-attack-surface-management-iasm

Identity Governance and Administration (IGA)

Identity governance and administration (IGA) is a set of processes, policies, and technologies used to manage digital identities and...

Identity Governance and Administration (IGA)

identity-governance-and-administration-iga

Identity Proofing Services

Identity-proofing services verify identities before provisioning accounts or authorized credentials to access SaaS services. These servi...

Identity Proofing Services

identity-proofing-services

Identity Provider

Identity Provider (IdP) or Providers are security systems that are used to manage a central identity for users and employees, to define...

Identity Provider

identity-provider

Identity Risk Management

Identity risk management refers to the practices used to protect enterprise identities, typically expressed in corporate email. The goal...

Identity Risk Management

identity-risk-management

Identity Security

A comprehensive approach to identity security would include authenticating every identity correctly, authorizing each identity with...

Identity Security

identity-security

Identity Security Fabric

Identity security fabric is a security architecture that provides identity-based protection for an organization's assets, systems...

Identity Security Fabric

identity-security-fabric

Identity Threat Detection and Response (ITDR)

Identity Threat Detection and Response (ITDR) is a security category designed and deployed to secure identities and identity-based...

Identity Threat Detection and Response (ITDR)

what-is-identity-threat-detection-and-response-itdr

Identity and Access Management (IAM)

Identity and Access Management is a set of policies, procedures, and technologies used to manage and control access to sensitive data...

Identity and Access Management (IAM)

identity-and-access-management

Multifactor Authentication (MFA)

Multi factor authentication. One of the highest impact controls available to reduce likelihood of breach, but how can you ensure MFA is...

Multifactor Authentication (MFA)

mfa

Nudge Security Strategy

A nudge security strategy is an approach that leverages nudges to create behavioral changes in employees to implement cybersecurity...

Nudge Security Strategy

nudge-security-strategy

On-premises

Refers to software deployed within the organization's internal system along with the hardware and other infrastructure necessary for...

On-premises

on-premises

Open Authorization (OAuth)

Open Authorization (OAuth), is a widely used protocol for allowing third-party SaaS to access resources from a user's accounts, devices,...

Open Authorization (OAuth)

what-is-open-authorization-oauth

Open ID Connect (OIDC)

Open ID Connect (IODC), often called “Social Login”, is a standard defined to allow users to use existing authentication method/vehicle...

Open ID Connect (OIDC)

oidc

Password Manager

An application that helps users store and manage their online credentials.

Password Manager

password-manager

RBAC

Role Based Access Controls. Used to define who can access different types of assets based on their job type and role; often RBAC is used...

RBAC

rbac

Remote Browser Isolation

Remote browser isolation (RBI) is a security technique designed to protect users from browser-based attacks including browser vulnerabili...

Remote Browser Isolation

remote-browser-isolation

SAML

Security Assertion Markup Language (SAML) is a standard for user authentication to platforms that allows SaaS applications to easily...

SAML

saml

SaaS Identity Sprawl

SaaS identity sprawl is a cybersecurity challenge that arises when an organization uses multiple cloud-based SaaS apps

SaaS Identity Sprawl

saas-identity-sprawl

SaaS Security

SaaS security is a set of architectures, processes, and strategies designed and implemented by companies to protect their data...

SaaS Security

saas-security

SaaS Security Control Plane (SSCP)

A SaaS Security Control Plane (SSCP) is an essential element of modern security architectures—identifying risks and threats within...

SaaS Security Control Plane (SSCP)

saas-security-control-plane-sscp

SaaS Security Posture Management (SSPM)

SaaS Security Posture Management (SSPM) is a category of products that continuously evaluate, measure, and help remediate risks...

SaaS Security Posture Management (SSPM)

saas-security-posture-management-sspm

SaaS Sprawl

SaaS publishers are marketing directly to their end user, and end users are adopting without following corporate policy around vendor sec...

SaaS Sprawl

saas-sprawl

SaaS application lifecycle

govern application onboarding, control sanctioned use and access, secure sensitive data, and revoke access when users no longer need acc...

SaaS application lifecycle

saas-application-lifecycle

Secure Access Service Edge (SASE)

Secure access service edge is a security framework aimed at guiding practitioners through a series of controls needed to enable the “work...

Secure Access Service Edge (SASE)

sase

Secure Web Gateway (SWG)

Technology deployed to restrict web and internet activity, relationships, and connections to enforce security policy...

Secure Web Gateway (SWG)

secure-web-gateway

Shadow IT

The use of technology, software, or SaaS used by employees to do their job without the knowledge of IT or security. Shadow IT is acquired

Shadow IT

shadow-it

Shadow SaaS

SaaS applications in-use without the knowledge of IT or security. Often referred to as "business-led SaaS", shadow SaaS happens when...

Shadow SaaS

shadow-saas

Single Sign On (SSO)

Single sign on (SSO) is an authentication framework that allows users to log in to multiple, unrelated applications with a single ID and...

Single Sign On (SSO)

sso

Software-as-a-Service (SaaS)

Applications owned, delivered, and managed by a provider whether via licensing or consumption. SaaS creates security gaps with limited...

Software-as-a-Service (SaaS)

software-as-a-service-saas

Vulnerability Assessment

The process and outcome of identifying, enumerating, and evaluating of exposures and vulnerabilities in the SaaS attack surface....

Vulnerability Assessment

vulnerability-assessment

Zombie Accounts

digital accounts that are no longer in use, but remain available creating risk exposure. Also known as abandoned accounts, zombie account...

Zombie Accounts

zombie-accounts

Don’t compromise

secure SaaS across 100% of applications across devices and users

Make it simple

don’t require incremental expertise or resourcing

Make it cost effective

self explanatory

No marketing fluff

hopefully even more self explanatory

To learn more, contact us

Your request has been sent

Oops! Something went wrong while submitting the form.

Gain more technical details on how you can get a Grip on your SaaS Security.

Visibility and control across nearly all your SaaS apps. Too good to be true?

For any request or information please email info@grip.security or fill the form.

Glossary

Access Management

Account Takeover

Authentication

Authorization

BYOA

BYOD

Business-led IT

Cloud Access Security Broker (CASB)

Cloud Security

Cloud Security Posture Management (CSPM)

Cloud environment vs SaaS environment

Cybersecurity Mesh Architecture (CSMA)

Dirty Environments

Identity Attack Surface Management (IASM)

Identity Governance and Administration (IGA)

Identity Proofing Services

Identity Provider

Identity Risk Management

Identity Security

Identity Security Fabric

Identity Threat Detection and Response (ITDR)

Identity and Access Management (IAM)

Multifactor Authentication (MFA)

Nudge Security Strategy

On-premises

Open Authorization (OAuth)

Open ID Connect (OIDC)

Password Manager

RBAC

Remote Browser Isolation

SAML

SaaS Identity Sprawl

SaaS Security

SaaS Security Control Plane (SSCP)

SaaS Security Posture Management (SSPM)

SaaS Sprawl

SaaS application lifecycle

Secure Access Service Edge (SASE)

Secure Web Gateway (SWG)

Shadow IT

Shadow SaaS

Single Sign On (SSO)

Software-as-a-Service (SaaS)

Vulnerability Assessment

Zombie Accounts

Don’t compromise

Make it simple

Make it cost effective

No marketing fluff

To learn more, contact us