Security patch management is the ongoing process of finding, testing and applying updates that fix known flaws. It covers operating systems, libraries, applications and infrastructure.
An attack surface is the total set of points where an attacker could try to enter or extract data from a system. It spans exposed services, code, identities, devices and people.
Immutable infrastructure is an approach where servers and containers are never changed after deployment. Any update is made by building a new image and replacing the old instances entirely.
A software bill of materials (SBOM) is a machine-readable inventory of every component and version that makes up a piece of software. It includes indirect, transitive dependencies.
A vulnerability assessment is a systematic review that identifies, ranks and reports known security weaknesses across systems. It usually combines automated scanning with analyst review and prioritisation.
Configuration management is the practice of defining and enforcing the settings and software on servers through automated, version-controlled tooling. It keeps environments consistent instead of hand-configured.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.