Security concepts refer to the strategies, controls, and frameworks used to protect data, systems, and networks from unauthorized access or damage. Core ideas include confidentiality, integrity, availability, and non-repudiation.
Mutual TLS (mTLS) is an extension of the standard TLS protocol in which both the client and the server present and validate certificates, establishing cryptographic proof of identity on both sides of a connection. In workload-to-workload communication, mTLS enforced with SVIDs from a SPIFFE-based system replaces password or token-based authentication entirely. It is a cornerstone of zero trust networking for services, ensuring that every connection is authenticated and encrypted regardless of network location.
Zero Trust Network Access (ZTNA)
Security Concepts
Zero Trust Network Access (ZTNA) is a security model that grants access to specific applications and resources only after verifying identity and context on every request, rather than trusting anything based on network location. Unlike traditional VPNs, ZTNA applies granular, policy-driven access decisions at the workload level, making it a foundational control for securing service-to-service communication in distributed and multi-cloud environments.
Cross-Origin Resource Sharing
Security Concepts
CORS controls whether JavaScript running in your browser can read responses from a different origin, gating access to your API data.
Cyber resilience is your organization’s ability to anticipate, withstand, recover from and adapt to adverse conditions, stresses, attacks or compromises that involve cyber resources, while keeping the business running continuously.
Least privilege is a security principle requiring that users, workloads, and services receive only the minimum access rights necessary to perform their assigned functions.
Proof Key for Code Exchange (PKCE) is a security extension to the OAuth 2.0 authorization code flow that prevents authorization code interception attacks.
Encryption is the process of converting data into an unreadable format so that only authorized parties with the correct decryption key can access it. It protects information from unauthorized access, eavesdropping, and tampering, whether the data is stored (at rest) or transmitted across networks (in transit).
Posture assessment is the continuous evaluation of an organization’s security status based on its defensive capabilities, configurations, and readiness to respond to threats. In workload identity and access management, it serves as the foundational mechanism for dynamic, context-aware access decisions based on real-time security state.
