Security Category Glossary
The ColdRecon
Security Glossary
Endpoint Detection and Response (EDR)
EDR is agent-based endpoint tooling that monitors process/file/network activity, detects malicious behavior, and enables…
Extended Detection and Response (XDR)
XDR correlates detection signals across endpoint, network, identity, email, and cloud into one investigation layer. It i…
Next-Generation Firewall (NGFW)
NGFW is network-perimeter inspection with application awareness, IPS, and decryption. A network control, distinct from e…
Positive Security Model (allowlist / known-good)
A positive security model enforces a known-good system state and rejects unauthorized change by default, rather than det…
Security Service Edge (SSE / SASE)
SSE is cloud-delivered network-edge security — secure web gateway, CASB, and zero-trust network access. It governs acces…
Definitions are generated from ColdRecon's reference layer and extend as new category terms are added. Factual category explanations only.