Glossary
Glossary
The terms of the trade, defined in a few lines, with what they become in Ctadel.
- CNAPPCloud-Native Application Protection Platform: a platform that brings into one tool what several products used to do separately: cloud posture, identities, data, Kubernetes, code and vulnerabilities.
- CSPMCloud Security Posture Management: the continuous check of your cloud resources’ configuration, public bucket, open security group, unencrypted database, against a catalogue of rules.
- CIEMCloud Infrastructure Entitlement Management: knowing what an identity can really do, not what its policies declare, and reducing excessive permissions.
- DSPMData Security Posture Management: knowing where personal, banking and health data is, who can read it, and whether it is exposed.
- KSPMKubernetes Security Posture Management: the configuration of your clusters, privileged containers, overly broad RBAC, exposed API, vulnerable images, checked continuously.
- Host hardeningChecking that your machines follow a hardening benchmark, accounts, services, logging, firewall, mounts, Windows registry, without installing an agent.
- Attack pathA sequence of weaknesses that, taken together, lead from an entry point to a valuable asset. Each weakness is tolerable alone; it is the chain that counts.
- Toxic combinationSeveral medium-severity findings, together on connected resources, that form a critical risk.
- Security graphYour cloud resources and their relationships, membership, network, permissions, data, in a structure you can walk, instead of lists separated by service.
- AgentlessNothing to install on your machines or in your clusters: clouds are read through their APIs, disks on a copy inside your account.
- KEV and EPSSTwo sources to sort thousands of CVEs: the catalogue of known exploited vulnerabilities, and a probability-of-exploitation score.
- Infrastructure as code scanningFinding a public bucket in Terraform code before it exists in the cloud, and knowing when what is deployed no longer matches the code.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.