Definition
The term comes from risk analysis: a network exposure, an excessive permission and a piece of sensitive data are three ordinary findings; on the same chain of resources, they become an open access. Listing them separately hides the risk.
Glossary
Toxic combination
Several medium-severity findings, together on connected resources, that form a critical risk.
In Ctadel
The Toxic combinations page is the first page of the application. Each combination has a score out of 100, a visualization of the chain, a Remediation tab and a history. A combination whose signal was never observed on a real account is disabled and said to be.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.