Glossary

Software security is the practice of designing, building, and running applications that resist attack across development, deployment, and runtime.

Learn what a zero-day exploit is, how it differs from a vulnerability or attack, why known-signature tools miss it, and how to reduce exposure.

Learn what code security is, what it protects, how SAST, SCA, secrets scanning, and code review work, and where runtime security fills the gaps.

A vulnerability is a weakness in software, hardware, or configuration that attackers can exploit to gain access, execute code, or steal data.

Learn what software instrumentation is, how manual and automatic methods work, what data they collect, and how instrumentation supports application security.

A false positive is a security alert that flags harmless activity as malicious. The opposite of a false negative, where a real threat goes undetected.