Glossary

This is some text inside of a div block.

Access Management

practice of controlling access to specific assets. In order to secure an asset against attack/breach/exposure, limiting access to only...

Access Management

access-management

Account Takeover

A type of cyber security attack where a bad actor steals the login credentials of an account. In some cases, the bad actor locks the...

Account Takeover

account-takeover

Attack Surface

An attack surface refers to the vulnerabilities or entry points that an attacker can exploit to gain unauthorized access to a system.

Attack Surface

attack-surface-management

Authentication

the act of verifying the identity of a user or SaaS app. In contrast with identification, the act of indicating a person or thing's...

Authentication

authentication

Authorization

the function of specifying access rights and/or privileges to resources, such as SaaS apps, infrastructure, data, or devices and is...

Authorization

authorization

BYOA

Bring your own app (BYOA) is is a workplace trend where employees use personal or preferred applications to accomplish work-related tasks.

BYOA

byoa

BYOAI (Bring Your Own AI)

BYOAI, or "Bring Your Own AI," is a growing trend where employees independently select and use artificial intelligence (AI) tools.

BYOAI (Bring Your Own AI)

byoai-bring-your-own-ai

BYOD

Bring Your Own Device. Employees using their personal devices to perform the duties of their job. In some cases this is approved by...

BYOD

byod

Business-led IT

Technology, software, or SaaS acquired and used by employees that is outside the purview of the central IT or security departments. In some

Business-led IT

business-led-it

Cloud Access Security Broker (CASB)

CASB is an enforcement point for accessing cloud services and applications, generally deployed via a collection of services and...

Cloud Access Security Broker (CASB)

cloud-access-security-broker-casb

Cloud Security

Cloud security is about making sure that cloud computing is safe and compliant, and that any risks associated with its use and...

Cloud Security

cloud-security

Cloud Security Posture Management (CSPM)

Cloud security posture management (CSPM) is the continuous proactive process of enterprise-wide asset visibility, risk assessment, and...

Cloud Security Posture Management (CSPM)

cloud-security-posture-management-cspm

Cloud environment vs SaaS environment

cloud refers to any asset or set of assets supporting digital workloads outside the physical corporate network. SaaS refers to cloud base...

Cloud environment vs SaaS environment

cloud-environment-vs-saas-environment

Configuration Drift

SaaS configuration drift refers to the misalignment of application settings from established security standards.

Configuration Drift

configuration-drift

Credential Stuffing

Credential stuffing is a type of cyberattack where attackers use automated tools to attempt to gain unauthorized access to accounts.

Credential Stuffing

credential-stuffing

Cybersecurity Mesh Architecture (CSMA)

Cybersecurity mesh architecture (CSMA) provides a security support layer to enable distinct security services work together, improving...

Cybersecurity Mesh Architecture (CSMA)

cybersecurity-mesh-architecture

Data Loss Prevention (DLP)

DLP is a cybersecurity strategy and control to detect, monitor, and prevent the unauthorized transmission, sharing, or leakage of data.

Data Loss Prevention (DLP)

data-loss-prevention-dlp

Dirty Environments

Enterprise IT environments with a lot of shadow SaaS, poor configurations, and lack of control...

Dirty Environments

dirty-environments

Identity Attack Surface Management (IASM)

Identity attack surface management (IASM) is a security practice and technology solution that provides identity discovery, risk prior...

Identity Attack Surface Management (IASM)

identity-attack-surface-management-iasm

Identity Governance and Administration (IGA)

Identity governance and administration (IGA) is a set of processes, policies, and technologies used to manage digital identities and...

Identity Governance and Administration (IGA)

identity-governance-and-administration-iga

Identity Operations

Identity Operations (Identity Ops) is the strategic management, automation, and security of digital identities across an organization.

Identity Operations

identity-operations

Identity Proofing Services

Identity-proofing services verify identities before provisioning accounts or authorized credentials to access SaaS services. These servi...

Identity Proofing Services

identity-proofing-services

Identity Provider

Identity Provider (IdP) or Providers are security systems that are used to manage a central identity for users and employees, to define...

Identity Provider

identity-provider

Identity Risk Management

Identity risk management refers to the practices used to protect enterprise identities, typically expressed in corporate email. The goal...

Identity Risk Management

identity-risk-management

Identity Security

A comprehensive approach to identity security would include authenticating every identity correctly, authorizing each identity with...

Identity Security

identity-security

Identity Security Fabric

Identity security fabric is a security architecture that provides identity-based protection for an organization's assets, systems...

Identity Security Fabric

identity-security-fabric

Identity Security Posture Management (ISPM)

Identity security posture management (ISPM) refers to the practice of securing an organization's digital identities.

Identity Security Posture Management (ISPM)

identity-security-posture-management-ispm

Identity Threat Detection and Response (ITDR)

Identity Threat Detection and Response (ITDR) is a security category designed and deployed to secure identities and identity-based...

Identity Threat Detection and Response (ITDR)

what-is-identity-threat-detection-and-response-itdr

Identity and Access Management (IAM)

Identity and Access Management is a set of policies, procedures, and technologies used to manage and control access to sensitive data...

Identity and Access Management (IAM)

identity-and-access-management

Light IGA

Light IGA refers to a streamlined and simplified approach to managing user identities and access within an organization.

Light IGA

light-iga-identity-governance-and-administration

Multifactor Authentication (MFA)

Multi-Factor Authentication (MFA) is a security process that requires users to provide two or more verification factors to access an account

Multifactor Authentication (MFA)

mfa

Nudge Security Strategy

A nudge security strategy is an approach that leverages nudges to create behavioral changes in employees to implement cybersecurity...

Nudge Security Strategy

nudge-security-strategy

On-premises

Refers to software deployed within the organization's internal system along with the hardware and other infrastructure necessary for...

On-premises

on-premises

Open Authorization (OAuth)

Open Authorization (OAuth), is a widely used protocol for allowing third-party SaaS to access resources from a user's accounts, devices,...

Open Authorization (OAuth)

what-is-open-authorization-oauth

Open ID Connect (OIDC)

Open ID Connect (IODC), often called “Social Login”, is a standard defined to allow users to use existing authentication method/vehicle...

Open ID Connect (OIDC)

oidc

Password Hygiene

Password hygiene is a set of best practices for creating, managing, and protecting passwords to minimize the risk of unauthorized access.

Password Hygiene

password-hygiene

Password Manager

An application that helps users store and manage their online credentials.

Password Manager

password-manager

Password Rotation

Password rotation is the practice of regularly changing passwords to minimize the risk of unauthorized access to accounts or systems.

Password Rotation

password-rotation

RBAC

Role Based Access Controls. Used to define who can access different types of assets based on their job type and role; often RBAC is used...

RBAC

rbac

Remote Browser Isolation

Remote browser isolation (RBI) is a security technique designed to protect users from browser-based attacks including browser vulnerabili...

Remote Browser Isolation

remote-browser-isolation

Rogue AI

AI that behaves unpredictably, maliciously, or contrary to its original programming.

Rogue AI

rogue-ai

SAML

Security Assertion Markup Language (SAML) is a standard for user authentication to platforms that allows SaaS applications to easily...

SAML

saml

SaaS Identity Risk Management (SIRM)

SaaS Identity Risk Management (SIRM) is a cybersecurity category designed to address the unique challenges and risks of SaaS

SaaS Identity Risk Management (SIRM)

saas-identity-risk-management-sirm

SaaS Identity Sprawl

SaaS identity sprawl is a cybersecurity challenge that arises when an organization uses multiple cloud-based SaaS apps

SaaS Identity Sprawl

saas-identity-sprawl

SaaS Security

SaaS security is a set of architectures, processes, and strategies designed and implemented by companies to protect their data...

SaaS Security

saas-security

SaaS Security Control Plane (SSCP)

A SaaS Security Control Plane (SSCP) is an essential element of modern security architectures—identifying risks and threats within...

SaaS Security Control Plane (SSCP)

saas-security-control-plane-sscp

SaaS Security Posture Management (SSPM)

SaaS Security Posture Management (SSPM) is a category of products that continuously evaluate, measure, and help remediate risks...

SaaS Security Posture Management (SSPM)

saas-security-posture-management-sspm

SaaS Sprawl

SaaS tools are easily accessible, enabling anyone to start a subscription. Uncontrolled SaaS adoption is known as "SaaS sprawl."

SaaS Sprawl

saas-sprawl

SaaS application lifecycle

govern application onboarding, control sanctioned use and access, secure sensitive data, and revoke access when users no longer need acc...

SaaS application lifecycle

saas-application-lifecycle

Savvy Security Strategy

Savvy security strategy is an adaptive approach to cybersecurity that extends beyond conventional measures to mitigate risk

Savvy Security Strategy

savvy-security-strategy

Secure Access Service Edge (SASE)

Secure access service edge is a security framework aimed at guiding practitioners through a series of controls needed to enable the “work...

Secure Access Service Edge (SASE)

sase

Secure Web Gateway (SWG)

Technology deployed to restrict web and internet activity, relationships, and connections to enforce security policy...

Secure Web Gateway (SWG)

secure-web-gateway

Security Service Edge (SSE)

SSE is essentially the security-focused subset of the broader Secure Access Service Edge (SASE) model.

Security Service Edge (SSE)

security-service-edge-sse

Shadow AI

AI technology or AI features within existing apps used by employees to do their job without the knowledge of IT or security.

Shadow AI

shadow-ai

Shadow Data

Shadow data refers to untracked or unmanaged data created, stored, or shared outside the visibility and control of IT and security teams.

Shadow Data

shadow-data

Shadow IT

The use of technology, software, or SaaS used by employees to do their job without the knowledge of IT or security. Shadow IT is acquired

Shadow IT

shadow-it

Shadow Identity

A shadow identity refers to an unmanaged or unmonitored user account within an organization.

Shadow Identity

shadow-identity

Shadow SaaS

Shadow SaaS refers to cloud-based SaaS applications that are used without the knowledge or oversight of the IT or security teams.

Shadow SaaS

shadow-saas

Single Sign On (SSO)

Single sign on (SSO) is an authentication framework that allows users to log in to multiple, unrelated applications with a single ID and...

Single Sign On (SSO)

sso

Software-as-a-Service (SaaS)

Applications owned, delivered, and managed by a provider whether via licensing or consumption. SaaS creates security gaps with limited...

Software-as-a-Service (SaaS)

software-as-a-service-saas

Vulnerability Assessment

The process and outcome of identifying, enumerating, and evaluating of exposures and vulnerabilities in the SaaS attack surface....

Vulnerability Assessment

vulnerability-assessment

Zero Trust Network Access (ZTNA)

Zero Trust Network Access (ZTNA) is designed to provide secure, granular access to applications based on defined access control policies.

Zero Trust Network Access (ZTNA)

zero-trust-network-access-ztna

Zombie Accounts

digital accounts that are no longer in use, but remain available creating risk exposure. Also known as abandoned accounts, zombie account...

Zombie Accounts

zombie-accounts

Don’t compromise

secure SaaS across 100% of applications across devices and users

Make it simple

don’t require incremental expertise or resourcing

Make it cost effective

self explanatory

No marketing fluff

hopefully even more self explanatory

The complete SaaS identity risk management solution.

Grip revealed ten times more cloud accounts than IPG was aware of, and we can achieve similar results for you.

Prioritize SaaS risks for SSO integration.

Address SaaS identity risks promptly with  policy-driven automation.

Leverage your existing tools to include shadow SaaS.

For any request or information please email info@grip.security or fill the form.

Glossary

Access Management

Account Takeover

Attack Surface

Authentication

Authorization

BYOA

BYOAI (Bring Your Own AI)

BYOD

Business-led IT

Cloud Access Security Broker (CASB)

Cloud Security

Cloud Security Posture Management (CSPM)

Cloud environment vs SaaS environment

Configuration Drift

Credential Stuffing

Cybersecurity Mesh Architecture (CSMA)

Data Loss Prevention (DLP)

Dirty Environments

Identity Attack Surface Management (IASM)

Identity Governance and Administration (IGA)

Identity Operations

Identity Proofing Services

Identity Provider

Identity Risk Management

Identity Security

Identity Security Fabric

Identity Security Posture Management (ISPM)

Identity Threat Detection and Response (ITDR)

Identity and Access Management (IAM)

Light IGA

Multifactor Authentication (MFA)

Nudge Security Strategy

On-premises

Open Authorization (OAuth)

Open ID Connect (OIDC)

Password Hygiene

Password Manager

Password Rotation

RBAC

Remote Browser Isolation

Rogue AI

SAML

SaaS Identity Risk Management (SIRM)

SaaS Identity Sprawl

SaaS Security

SaaS Security Control Plane (SSCP)

SaaS Security Posture Management (SSPM)

SaaS Sprawl

SaaS application lifecycle

Savvy Security Strategy

Secure Access Service Edge (SASE)

Secure Web Gateway (SWG)

Security Service Edge (SSE)

Shadow AI

Shadow Data

Shadow IT

Shadow Identity

Shadow SaaS

Single Sign On (SSO)

Software-as-a-Service (SaaS)

Vulnerability Assessment

Zero Trust Network Access (ZTNA)

Zombie Accounts

Don’t compromise

Make it simple

Make it cost effective

No marketing fluff

The complete SaaS identity risk management solution.​

See Grip, the leading SaaS security platform, live:​

The complete SaaS identity risk management solution.

See Grip, the leading SaaS security platform, live: