attack surface

term

securitycloud

Everything an attacker can reach and try: exposed services, APIs, credentials, people - the sum of ways in.

Every feature adds to it, every decommission subtracts; managing it is subtraction as a discipline.

All glossary entries