[GLOSSARY]

Code Review & Security Terms,
Explained Simply

Code Review & Security Terms,
Explained Simply

Code Review & Security Terms,
Explained Simply

Explore our comprehensive glossary of terms and definitions.

A

Adversarial Exposure Validation (AEV)

Agent Personas

Agentic AI Pentesting

Agentic DAST

AI Chat

AI Code Review

AI Learnings

AI Penetration Testing

Anti-Pattern

AST (Abstract Syntax Tree) Engine

B

Binary Reverse Engineering

Black Box Penetration Testing

Blast Radius

BOLA (Broken Object Level Authorization)

Business Logic Vulnerability

C

Capability Envelope

CI/CD Pipeline Risk

CI/CD Review Hook

CLI

Cloud Attack Path

Cloud Threat Detection

Code Complexity

Code Memory

Code Security Gating

Code Smell

D

DAST (Dynamic Application Security Testing)

Data Leak

Dataflow Tracing

Dead Code

Defensive vs Offensive Security

Developer 360

Developer Productivity Metrics

Docstrings

DORA Metrics

Duplicate Code

E

End-of-Life (EOL) Dependency

EPSS (Exploit Prediction Scoring System)

Exploit-Proven Security

F

False Positive

Fix in IDE

Frontend QA Agent

Full Assessment

Full Codebase Context

G

Git History Secret Scanning

Git Hooks

Gray Box Penetration Testing

I

IaC (Infrastructure as Code) Scanning

IAM Privilege Escalation

IDE Integration

IDOR (Insecure Direct Object Reference)

IMDS (Instance Metadata Service)

Infrastructure Scan

Inline Review

J

JS Bundle Analysis

JWT Manipulation

K

Kubernetes Pod Security

L

Lambda Function Abuse

Leaked Credentials

License Compliance

M

Managed Identity Over-Scope

MCP Server

Measure-Only Control

Multi-Tenant SaaS Penetration Testing

O

Origin-less Deep Link

Outcome-Based Penetration Testing

OWASP Top 10

P

Passive Reconnaissance

PDF Compliance Report

Penetration Testing

PR Summary

Proof-of-Concept (PoC) Exploit

Protection Score

Q

Quality Gate

R

Reachability Analysis

Retesting

Review Dashboard

S

SAST (Static Application Security Testing)

SBOM (Software Bill of Materials)

SCA (Software Composition Analysis)

Secret Scanning

Security Dashboard

Security Hotlist

Sequence Diagram

SQL Injection (SQLi)

SSRF (Server-Side Request Forgery)

Steps of Reproduction

T

Technical Debt

Tenant Isolation

Test Coverage

Threat Actor Monitoring

Types of Penetration Testing

V

VM Scanning

W

White Box Penetration Testing

Workload Identity Confusion

X

XSS (Cross-Site Scripting)

Z

Zero Data Retention

Zero False Positives

[GET STARTED]

Find out what's already

exploitable in your codebase.

Find out what's already

exploitable in your codebase.

Find out what's already

exploitable in your codebase.