Glossary

What is Valid Report? A submission that identifies a real, reproducible vulnerability within program scope and policy. Expanded Explanation Only valid reports are eligible for bounty rewards. Validity depends on factors like uniqueness, impact, clarity, and adherence to rules of …

What is Vulnerability? A weakness in a system, application, or network that can be exploited by a threat actor. Expanded Explanation Vulnerabilities may result from software bugs, misconfigurations, or human error. Identifying and patching vulnerabilities is a key part of …

What is Vulnerability Assessment? Identifying and prioritizing system weaknesses. Expanded Explanation Vulnerability assessment involves scanning systems and applications to detect security flaws. It helps organizations evaluate exposure and prioritize remediation efforts based on risk and impact. Related Terms Vulnerability Scanning, …

What is Vulnerability Reporting? Documenting and submitting discovered flaws. Expanded Explanation Vulnerability reporting is the process of notifying stakeholders or vendors about identified security issues. This often involves structured formats like CVEs or responsible disclosure through bug bounty platforms. Related …

What is Vulnerability Scanning? Automated scanning for security flaws. Expanded Explanation Vulnerability scanning uses automated tools to identify known weaknesses in systems, networks, or applications. It’s a key part of proactive security strategies and regulatory compliance. Related Terms Nessus, OpenVAS, …

What is Web Application Firewall (WAF) A security solution that filters, monitors, and blocks HTTP traffic to and from a web application. Expanded Explanation WAFs protect web apps from common attacks like SQL injection and XSS. Ethical hackers test the …