Glossary

bcrypt

A widely used password-hashing algorithm designed to be deliberately slow and to include a built-in salt, making stored passwords expensive to crack at scale. It remains a solid, well-supported choice for password storage.

eBPF-Based Observability

Using eBPF, a technology that safely runs custom programs inside the Linux kernel, to observe system and network activity at a deep level for security, capturing process, file, and network events with low overhead.

mTLS in Mesh

Mutual TLS between microservices, automatically managed by a service mesh, so each service authenticates the other and traffic is encrypted, providing identity-based, zero-trust-style protection of east-west communication.

Zero Trust Assumptions

Zero trust assumptions document what an architecture treats as potentially hostile, what critical services it depends on, and how compromise or outage affects access.

Zero Trust Definition

Zero trust is a security model that minimizes uncertainty in least-privilege resource access without granting implicit trust solely from location, ownership, affiliation, or prior authentication.

Zero Trust Maturity Assessment

A zero trust maturity assessment compares evidenced current and target capabilities across defined resources and use cases without claiming a binary certification or unsupported precision.

Zero Trust Networking

Applying zero-trust principles to the network layer, never trust the network position, verify and authorize each connection, that contrasts sharply with traditional perimeter-trust models.

Zero Trust Outcome Metrics

Zero trust outcome metrics measure resource coverage, reduced implicit access, enforcement quality, revocation, bypass, resilience, exceptions, unsafe grants, false denials, and user remediation with defined denominators and data health.

Zero Trust Roadmap

A planned, phased path to adopt zero-trust architecture, identity first, then device, network, applications, that recognizes ZTA is multi-year and best implemented incrementally rather than all at once.