.svg)
SOAR (Security Orchestration, Automation and Response)
Technology that automates security workflows, orchestrates tools, and accelerates incident response — transforming manual SOC tasks into intelligent, repeatable processes.
SOAR platforms enable security teams to automate repetitive tasks, connect disparate security tools, and respond to incidents faster and at scale. By codifying institutional knowledge into automated playbooks, SOAR reduces analyst fatigue, cuts mean time to respond (MTTR), and ensures consistent handling of threats regardless of alert volume. Modern SOC teams use SOAR alongside SIEM platforms to move from reactive, manual operations to proactive, intelligence-driven defense — turning raw alerts into coordinated, automated action
CyberUp24 helps organizations fine-tune their SOAR platforms — from writing real-world playbooks to integrating with Splunk, Sentinel, and QRadar.
Related terms
Web Application Firewall (WAF)
A security solution that monitors, filters, and blocks HTTP traffic to and from web applications, protecting against application-layer attacks.
Read full description
%201.svg)
W
w
Vulnerability Management
The continuous practice of identifying, classifying, prioritizing, remediating, and mitigating vulnerabilities across an organization's technology environment.
Read full description
V
v
Threat Intelligence
Actionable information about cyber threats, threat actors, and their tactics, techniques, and procedures, used to inform and improve defensive security decisions.
Read full description
T
t
Supply Chain Security
The practice of identifying and mitigating cybersecurity risks introduced through an organization's vendors, suppliers, software dependencies, and third-party services.
Read full description
S
s
Security Operations Center (SOC)
A centralized team and facility that continuously monitors, detects, analyzes, and responds to cybersecurity incidents across an organization's environment.
Read full description
S
s
Security Awareness Training
Educational programs designed to help employees recognize, avoid, and report cybersecurity threats including phishing, social engineering, and policy violations.
Read full description
S
s
Ransomware
Malicious software that encrypts a victim's data or locks systems and demands payment for restoration, representing one of the most damaging cyber threats today.
Read full description
R
r
Privileged Access Management (PAM)
Security solutions that manage, monitor, and control elevated access rights for users, accounts, and systems across an IT environment.
Read full description
P
p
Phishing
A social engineering attack that uses deceptive emails, messages, or websites to trick users into revealing credentials, downloading malware, or transferring funds.
Read full description
P
p
Patch Management
The systematic process of identifying, acquiring, testing, and applying software updates to fix vulnerabilities and improve system security and stability.
Read full description
P
p
OSINT (Open Source Intelligence)
The collection and analysis of information from publicly available sources to support threat intelligence, investigations, and security assessments.
Read full description
O
o
Network Segmentation
The practice of dividing a computer network into smaller subnetworks to improve security and limit the spread of breaches within an organization's environment.
Read full description
N
n
Multi-Factor Authentication (MFA)
A security mechanism requiring users to verify their identity using two or more independent factors before gaining access to a system or application.
Read full description
M
m
Lateral Movement
The techniques attackers use to progressively move through a network after initial compromise, seeking higher-value targets and expanding their access.
Read full description
L
l
Malware
Malicious software designed to disrupt, damage, or gain unauthorized access to computer systems, including viruses, ransomware, trojans, and spyware.
Read full description
M
m
FISMA (Federal Information Security Management Act)
U.S. federal legislation that defines a comprehensive framework for protecting government information, operations, and assets against natural and man-made threats.
Read full description
F
f
Firewall
A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Read full description
F
f
Identity and Access Management (IAM)
The framework of policies and technologies that ensures the right individuals access the right resources at the right times and for the right reasons.
Read full description
I
i
Honeypot
A decoy system or network designed to attract and detect unauthorized access attempts, providing intelligence on attacker techniques and behavior.
Read full description
H
h
Exploit
A piece of software or technique that takes advantage of a vulnerability in a system to cause unintended behavior or gain unauthorized access.
Read full description
E
e
Cyber Kill Chain
A framework developed by Lockheed Martin that describes the stages of a cyberattack from reconnaissance through actions on objectives, used to identify and disrupt attacks.
Read full description
C
c
