Filter by category
22 terms
- Authentication vs AuthorizationAuthentication verifies who you are (identity).
- CAPTCHA / reCAPTCHA / TurnstileCAPTCHA and its modern alternatives (reCAPTCHA, Cloudflare Turnstile) are challenge-response tests used to distinguish human users from…
- Cookie Attributes (Secure/HttpOnly/SameSite)Cookie attributes (Secure, HttpOnly, SameSite) are flags set on HTTP cookies to control their security properties: encryption in transit…
- CORSCORS (Cross-Origin Resource Sharing) is a browser security mechanism that controls how web pages from one origin can request resources…
- CSPContent Security Policy (CSP) is a browser security standard that uses HTTP headers to control which resources (scripts, styles, images…
- CSRFCross-Site Request Forgery (CSRF) is an attack that tricks an authenticated user into performing unintended actions on a web application…
- DDoS ProtectionDistributed Denial-of-Service (DDoS) protection is a set of techniques and services that defend against attacks attempting to overwhelm a…
- HSTSHTTP Strict Transport Security (HSTS) is a security header that tells browsers to always connect to a website over HTTPS, never plain HTTP.
- HTTPS / TLSHTTPS (HTTP Secure) is the encrypted version of HTTP, secured by TLS (Transport Layer Security).
- JWTJSON Web Token (JWT) is a compact, URL-safe token format for representing claims between parties.
- MFA / 2FAMulti-Factor Authentication (MFA) requires users to present two or more pieces of evidence to verify their identity.
- OAuth 2.0OAuth 2.0 is an authorization framework that enables third-party applications to obtain limited access to a user's resources without…
- Passkeys / WebAuthnPasskeys are a passwordless authentication standard using public-key cryptography.
- Security HeadersSecurity headers are HTTP response headers that instruct browsers to enable security protections.
- SQL InjectionSQL Injection (SQLi) is a code injection technique where an attacker inserts malicious SQL statements into application queries…
- SRISubresource Integrity (SRI) is a browser security feature that verifies externally hosted resources (scripts, stylesheets) have not been…
- SSHSSH (Secure Shell) is a cryptographic network protocol that lets you securely log into a remote server, execute commands, transfer files…
- SSL CertificateAn SSL certificate (technically a TLS certificate) is a digital file that binds a cryptographic key pair to an organization or domain…
- SSOSingle Sign-On (SSO) is an authentication method that allows users to log in once and access multiple applications without re-entering…
- Vulnerability ScanningVulnerability scanning is the automated process of identifying security weaknesses in applications, systems, and networks.
- WAFA Web Application Firewall (WAF) filters, monitors, and blocks HTTP traffic to and from a web application.
- XSSCross-Site Scripting (XSS) is a security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other…
Other categories
- SEO52 terms
- AI41 terms
- Web development32 terms
- CRO30 terms
- Front-end29 terms
- Analytics28 terms
- General27 terms
- Design26 terms
- Accessibility25 terms
- Performance25 terms
- Backend21 terms
- CMS19 terms
- Marketing16 terms
- Mobile development15 terms
- Infrastructure13 terms
- AEO11 terms
- DevOps8 terms
- Content strategy5 terms
- Ecommerce5 terms
- GEO5 terms
- Marketing automation5 terms
- Business4 terms
- Privacy4 terms
- UX4 terms
- Architecture1 term
- Software engineering1 term