Operations Glossary

Browse 328 operations terms defined in plain English, from the cultural dictionary of computing.

328 Operations Terms

Ad Hoc
Created or done for a specific immediate purpose rather than as part of a permanent, well-structured system. In engineering culture, ad hoc solutions are...
Admin
Short for administrator, used informally for someone with elevated control over a system, platform, server, or community. Depending on context it may refer to...
Admin Panel
An internal or restricted interface used by administrators, support staff, or operators to manage settings, accounts, content, and system state. In startup and...
AI Cost
The total expense associated with building, running, or maintaining AI systems, including model usage, compute, storage, evaluation, data labeling, and...
AI Deploy
To release or put an AI model or AI-powered feature into an environment where it can be used for testing or production workloads. AI deploy decisions usually...
AI Monitor
A monitoring system, dashboard, or process used to watch AI behavior in production for issues such as drift, latency, errors, safety events, or quality...
AI Ops
The operational work required to deploy, monitor, govern, and maintain AI systems in real environments. AI ops includes model rollouts, incident response,...
AI Scale
The level of usage, compute demand, model size, or organizational reach at which an AI system operates. Teams talk about AI scale when discussing whether...
AI Version
A specific version of an AI model, prompt set, workflow, or configuration used in evaluation or production. Explicit AI versioning is important because...
Alert Fatigue
The desensitization and reduced response quality that occurs when analysts are overwhelmed by too many alerts, especially low-value or repetitive ones. Alert...
Asset-Light
Describing a business that minimizes ownership of physical infrastructure, inventory, or other capital-heavy assets, often relying more on software, networks,...
Attack Playbook
A structured description of how an attacker or threat group tends to operate, often including tools, sequence of actions, and objectives. Defenders use attack...
Backfill
Re-processing historical data through a pipeline to fill gaps caused by bugs, schema changes, new features, or late-arriving data. Requires idempotent...
Background Process
A process that runs independently of a foreground request or interactive session, often handling scheduled, long-running, or deferred work. Background...
Backup Strategy
The plan for how data and systems are backed up, retained, validated, and restored to meet recovery goals. A strong backup strategy considers frequency, scope,...
Batch Operation
An operation that handles multiple items in one request or execution unit rather than processing each item individually. Batch operations can improve...
batch processing
A method of running programs where jobs are collected into groups (batches) and executed sequentially without user interaction. Dominant in the mainframe era...
Big Red Button
A figurative term for an obvious emergency control that can quickly disable a system, feature, or rollout when things go wrong. It evokes the idea of a...
Blue/Green Deployment
A deployment strategy using two identical production environments (blue and green). The current version runs on blue; the new version is deployed to green and...
Break-Even
The point where revenue equals costs, so the business is no longer losing money on a net basis. Founders and boards track break-even closely when capital is...
Burn Down
To spend down cash reserves over time, often used in discussions of monthly burn and runway. The phrase is especially common when boards evaluate how fast a...
Business Model
The fundamental way a company creates, delivers, and captures value, including who the customer is, what they buy, and how the company makes money. A startup...
Business Unit
A distinct part of a company with its own focus, leadership, customers, or financial accountability. Large startups and scaling companies often create business...
Cache Management
The operational handling of cache population, invalidation, sizing, warm-up, eviction, observability, and failure behavior. Good cache management matters...
Capital Efficiency
How effectively a company converts invested capital into growth, revenue, or durable business value. Capital-efficient startups grow meaningfully without...
Capital Expenditure
Money spent on long-lived assets such as equipment, facilities, or infrastructure that are capitalized rather than treated as immediate operating expense....
Cash Flow
The movement of cash into and out of a business over time. A company can look profitable on paper and still struggle if cash flow timing is poor.
Certificate Management
The administration of digital certificates, including issuance, storage, deployment, renewal, revocation, and inventory. Poor certificate management creates...
Change Management
The process by which proposed system changes are reviewed, approved, scheduled, communicated, and tracked to reduce operational risk. In engineering...
Change Request
A formal proposal to modify a system, application, process, or environment, typically including scope, risk, testing, rollback, and approval information....
Chaos Monkey Culture
A reliability mindset that values failure testing, resilience drills, and systems that can tolerate component loss under realistic conditions.
Chaos Testing
Deliberately injecting failures (network partitions, server crashes, disk full, clock skew, high latency) into a system to verify it handles them gracefully....
Clean Shutdown
A controlled stop sequence in which an application finishes or cancels in-flight work, flushes state, closes resources, and exits without leaving data or...
Cloud Console
The web-based management interface provided by a cloud platform for viewing, configuring, and operating cloud resources. Cloud consoles are useful for ad hoc...
Clown Computing
A mocking phrase for chaotic, error-prone, or obviously unserious technical operations. In engineering humor, clown computing implies systems are being run...
Cluster Management
The operational work of provisioning, scaling, upgrading, monitoring, and healing the nodes and control mechanisms that make up a cluster. Cluster management...
Code Freeze
A period during which no new code changes are merged to the release branch — only critical bug fixes are allowed. Common before major releases, during holiday...
Code Ranch
A wide technical environment where many services, scripts, or components are managed together with practical hands-on routines. In engineering slang, code...
Computer Emergency Response Team
Computer Emergency Response Team is a coordination function that handles vulnerability reports, incident notifications, and security advisories for an...
Config Chaos
A disordered state of configuration sprawl, conflicting defaults, unclear precedence, and environment-specific surprises. In engineering slang, config chaos is...
Config File
A file that stores settings controlling how an application or tool behaves, often in formats like JSON, YAML, TOML, or INI. Config files separate...
Config Source
The origin from which configuration values are loaded, such as environment variables, files, secret stores, service discovery, or command-line flags. Many...
Config Store
A service or system used to store and distribute configuration values to applications, often with versioning, access control, and runtime update support....
configuration drift
The gradual divergence of a system's actual configuration from its intended or documented state, typically caused by ad-hoc manual changes, hotfixes applied...
Configuration Drift
The gradual divergence between the intended configuration of systems and their actual state in different environments or over time. Configuration drift causes...
Connection Leak
A bug where database connections are opened but never returned to the connection pool, eventually exhausting all available connections. The database equivalent...
Container Health
The observed readiness and liveness state of a containerized workload, typically based on probes or checks that determine whether it is functioning correctly...
Container Lifecycle
The sequence of states a container goes through from image build and creation to startup, health checks, restarts, shutdown, and removal. Understanding...
Container Limit
A configured cap on resources such as CPU, memory, file descriptors, or process count that a container may use. Container limits protect neighboring workloads,...
Container Log
The log output emitted by a running container, typically collected from stdout, stderr, or log files and aggregated by the platform. Container logs are central...
Container Monitor
A monitoring tool or service that observes container health, resource use, restarts, and workload behavior across containerized environments. Container...
Container Restart
The termination and subsequent re-launch of a container, whether triggered intentionally, by policy, or due to failure. Container restarts can recover...
Control Panel
An administrative interface where users or operators can view settings, status, and controls for a system or service. Control panels often centralize...
COO
Chief operating officer, the executive responsible for running day-to-day operations and execution across the company. In startups the COO often becomes the...
Copy
To duplicate data, files, objects, or values so the same content exists in another location or memory region. In software discussions, copy can also imply...
Cost Center
A part of the organization that incurs costs but is not directly measured as generating revenue, such as legal, IT, or internal tooling. Calling something a...
Counter-Intelligence
Counter-Intelligence is defensive activity focused on identifying, deceiving, or disrupting hostile intelligence collection and insider risk. Security teams...
Create
To make a new resource, object, record, file, or instance exist in a system. In APIs and databases, create usually refers to the operation that inserts new...
Credential Rotation
The practice of periodically replacing secrets (API keys, database passwords, certificates) with new ones and invalidating the old. Limits the blast radius of...
CRM
Customer relationship management software or system, used to track leads, accounts, pipeline, interactions, and customer lifecycle data. In many companies the...
Cron Schedule
A recurring execution schedule defined using cron-style timing rules for running jobs or maintenance tasks automatically. Teams discuss cron schedules when...
Crontab
The configuration file and command for managing cron jobs on Unix systems. The format uses five fields (minute, hour, day-of-month, month, day-of-week)...
CRUD
Create, Read, Update, Delete — the four basic operations of persistent storage. Nearly every web application is fundamentally a CRUD app with varying amounts...
CTI
Short for cyber threat intelligence, the practice of collecting, analyzing, and using information about threats, adversaries, and attack behavior to improve...
Cyber Incident
A security event that actually threatens or impacts the confidentiality, integrity, or availability of systems or data and therefore requires formal response....
Cyber Range
Cyber Range is a controlled environment for realistic security training, attack simulation, and defensive exercises. Security teams use it to enforce trust,...
Cyber Threat Intelligence
Cyber Threat Intelligence is evidence-based knowledge about adversaries, infrastructure, motives, and tactics used to guide security decisions. Security teams...
Cyberwarfare
Cyberwarfare is state-linked or strategic cyber activity directed at military, governmental, or critical infrastructure objectives. Security teams use it to...
DaemonSet
A Kubernetes workload type that ensures a pod runs on every node or on selected nodes in a cluster.
Dark Web
Dark Web is the portion of internet services reachable through anonymity networks that obscure host and user identity. Security teams use it to enforce trust,...
Deception Technology
Deception Technology is security tooling that deploys decoys, lures, and controlled artifacts to detect attacker interaction early. Security teams use it to...
DNS Propagation
The time it takes for DNS changes to spread across all recursive resolvers worldwide. Controlled by the TTL (Time to Live) of the record -- resolvers cache...
Downtime
A period when a system, service, or component is unavailable or not functioning as intended for users. It is one of the most direct signals of operational...
Economics of Scale
The cost advantages that emerge as a business grows, spreading fixed costs or improving purchasing, infrastructure, and process efficiency at higher volume....
Emergency Access
A controlled way to grant high-privilege access during urgent situations when normal approval paths are too slow or unavailable. Good emergency access...
Employee Experience
The overall experience employees have across tools, policies, management, growth, environment, and day-to-day work. In modern organizations the phrase signals...
Encryption Key Management
Encryption Key Management is the generation, storage, rotation, distribution, archival, and destruction of cryptographic keys. Security teams use it to enforce...
Endpoint Security
Endpoint Security is the practice of protecting laptops, servers, and other endpoints through prevention, detection, and response controls. Security teams use...
ERP
Enterprise resource planning software used to manage core business processes such as finance, procurement, inventory, and operations in a unified system. ERP...
Error Log Reading
The practical art of extracting signal from noisy logs during debugging and incident response. In engineering slang, good error log reading is an...
Extended Runway
A longer operating timeline before cash runs out, usually achieved through fundraising, cost reductions, or stronger revenue collection. Boards often push for...
First Responder
The initial person or team that handles a suspected security incident, containing immediate damage, preserving evidence, and escalating appropriately. In cyber...
Fixed Cost
A cost that does not change directly with short-term sales or usage volume, such as rent, salaries, or long-term software commitments. Fixed costs shape how...
Fix Forward
To respond to a production problem by shipping another fix on top of the bad release instead of rolling back. Teams use it when rollback is harder, riskier, or...
Flight Rules
A set of practical operating rules for how to behave under pressure, often in incidents, launches, or complex workflows. The phrase evokes aviation-style...
Follow the Sun
A global work or support model where tasks, incidents, or operations hand off across time zones so work continues around the clock. In operations culture,...
Forecasting
The process of projecting future revenue, costs, hiring, demand, or other business outcomes based on assumptions and current data. Good forecasting is...
Franchise Model
A model where independent operators run local businesses using a common brand, system, and rules in exchange for fees or revenue share. Startup discussions use...
Free Cash Flow
Cash generated by the business after operating expenses and capital expenditures, showing what remains available for reinvestment, debt service, or...
G&A
General and administrative expense, covering overhead functions such as finance, legal, HR, and office costs that support the company broadly rather than...
GAP Analysis
A structured assessment of the difference between current state and desired future state, used to identify what capabilities, resources, or changes are...
Grace Period
Grace Period is a limited window in which access or configuration remains temporarily valid before stricter enforcement begins. Security teams use it to...
Green IT
The practice of making information technology operations more environmentally sustainable, including hardware choices, energy use, procurement, and end-of-life...
Hardening
Hardening is the reduction of unnecessary functionality, privileges, and weak defaults to lower attack surface. Security teams use it to enforce trust, reduce...
Health Check
An endpoint (typically /health or /healthz) that reports whether a service is running and ready to accept traffic. Used by load balancers, orchestrators, and...
High Priority
Marked as urgent or important enough to receive faster attention, escalation, or queue position than normal work. In many organizations it is both necessary...
Hiring Pipeline
The sequence of stages candidates move through during recruiting, such as sourcing, screening, interviews, debriefs, and offers. Teams treat it like an...
Hybrid Attack
An attack that combines multiple techniques, domains, or vectors such as phishing plus malware, cyber plus physical intrusion, or credential theft plus cloud...
Incident Bridge
A live communication channel, historically a conference bridge and now often a video call or Slack huddle, used to coordinate response during an outage or...
Incident Containment
Incident Containment is the set of actions used to limit the spread and impact of an active security incident. Security teams use it to enforce trust, reduce...
Incident Coordination
The orchestration of people, tasks, systems, and decisions during an incident so investigation, containment, recovery, and communication proceed coherently. It...
Incident Handler
A responder responsible for triaging, investigating, coordinating, and driving containment or recovery during security incidents. Incident handlers need both...
Incident Management
The process of detecting, responding to, mitigating, and learning from production incidents. Includes on-call rotations, runbooks, war rooms, status pages,...
Incident Playbook
Incident Playbook is a predefined response procedure that outlines steps, roles, communications, and escalation during a security event. Security teams use it...
Incident Post-Mortem
A structured analysis written after an outage or operational failure to document timeline, impact, root causes, contributing factors, and follow-up actions....
Incident Tracking
The ongoing recording and management of incident status, owners, evidence, actions, and decisions in a structured system. Good incident tracking prevents lost...
Indicator Management
The process of collecting, validating, normalizing, distributing, aging out, and acting on threat indicators across security tools and teams. Strong indicator...
Infrastructure as Cattle
A phrase emphasizing that infrastructure should be treated as replaceable and standardized rather than cherished and manually maintained like unique pets. In...
Infrastructure as Code Culture
A working style that treats infrastructure changes like software changes, with version control, review, reproducibility, and automation as norms.
Infrastructure Monitoring
The collection and analysis of health, configuration, and activity data from servers, networks, cloud services, and other infrastructure components. In...
Infrastructure Security
Infrastructure Security is the practice of securing networks, hosts, cloud resources, and foundational services that support applications. Security teams use...
Insider Threat
Insider Threat is the risk posed by employees, contractors, or partners who misuse legitimate access intentionally or accidentally. Security teams use it to...
Integrity Monitoring
Integrity Monitoring is the ongoing verification that important data, files, or system states have not changed unexpectedly. Security teams use it to enforce...
IT Asset Management
The process of tracking and managing hardware, software, cloud resources, and related ownership or lifecycle data across an organization. In security, IT asset...
IT Risk
The possibility that failures, misuse, vulnerabilities, or poor technology decisions could harm business operations, compliance, finances, or reputation. IT...
IT Security
The protection of information technology systems, networks, devices, and services against unauthorized access, disruption, misuse, and data loss. The term...
ITSM
Short for IT service management, the discipline of delivering and controlling IT services through processes such as incident management, change management,...
Keep the Lights On
To do the routine reliability, support, and maintenance work required to keep an existing system or business running. It usually contrasts with new feature or...
Key Management
Key Management is the full lifecycle handling of cryptographic keys from generation through rotation, storage, use, and destruction. Security teams use it to...
Key Rotation
Key Rotation is the scheduled or event-driven replacement of cryptographic keys and secrets to reduce long-term exposure. Security teams use it to enforce...
LLMOps
The operational discipline around deploying, monitoring, evaluating, and maintaining large-language-model systems in production.
Load Testing
Simulating expected or peak traffic patterns against a system to verify performance under load. Measures response times, throughput, error rates, and resource...
Log Diving
Digging through logs in search of clues about system behavior, usually deeper and longer than anyone hoped. In engineering slang, log diving is part...
Logging
Logging is the practice of recording timestamped events, errors, warnings, and diagnostic messages from a running application to structured or unstructured...
Log Management
Log Management is the collection, retention, parsing, storage, and analysis of logs for operations and security use. Security teams use it to enforce trust,...
Log Rotation
The process of periodically closing the current log file, renaming or compressing it, and starting a new one — preventing any single log file from growing...
Maintenance Window Security
The security planning and controls applied during approved maintenance windows when systems are intentionally changed, restarted, or exposed to elevated admin...
Maturity Stage
The point in a company's lifecycle when systems, market position, and operating rhythms become more established and less experimental. Mature-stage priorities...
Mean Time to Respond
A metric measuring how long it takes an organization to begin and execute meaningful response actions after an incident is detected. Mean time to respond...
Metrics Dashboard
A visual interface showing important business or product metrics in one place for monitoring and decision-making. Good dashboards support action; bad ones...
Monitoring
Monitoring is the practice of continuously collecting, aggregating, and analyzing metrics, logs, and health signals from applications and infrastructure to...
Monitoring Strategy
The overall plan for what telemetry to collect, where to collect it, how long to retain it, and which behaviors to detect or investigate. A strong monitoring...
MSP
Short for managed service provider, a company that operates or supports IT functions such as infrastructure, endpoints, backups, or help desk services for...
No Downtime
Describing a deployment, migration, or system change intended to occur without causing visible service interruption for users. In practice it usually means...
Noop
Short for 'no operation,' meaning a command, function, or code path that intentionally does nothing. It is useful as a placeholder, default handler, or safe...
Nuclear Option
The most extreme available action to resolve a problem, such as deleting and rebuilding, forcing a failover, or shutting down a system entirely. In engineering...
On-Call
Being designated to respond to production incidents outside business hours. On-call rotation is the price of running things in production. The PagerDuty alert...
Oncall Burnout
Exhaustion caused by repeated pager duty, interrupted sleep, constant incident pressure, or poor production hygiene.
On-Call Culture
The norms and expectations surrounding pager duty, incident ownership, and how teams support engineers who handle production issues.
On-Call Rotation
A schedule where team members take turns being the primary responder for production incidents outside business hours. Good rotations include clear escalation...
OOM Killer
Out-of-Memory Killer — a Linux kernel mechanism that selects and terminates processes when the system runs critically low on memory, preventing a complete...
Operating Expense
An expense associated with running the business, such as payroll, rent, marketing, or software, excluding costs treated as cost of revenue or capital...
Operating Model
The practical design of how a company runs, including structure, decision rights, processes, and resource allocation. An operating model turns strategy into...
Operational Excellence
A discipline of running the business with high consistency, efficiency, reliability, and accountability. In startups, operational excellence often becomes the...
Operational Intelligence
The real-time use of operational data, telemetry, and context to improve decisions about system health, risk, and response. In security settings, operational...
Operational Nightmare
A system or design that may look acceptable in development but becomes miserable to run, support, and recover in real life. In engineering slang, operational...
Operational Risk
The risk of loss or harm caused by failed processes, human error, system breakdowns, poor governance, or external events affecting operations. In security...
Operational Security
Operational Security is the practice of protecting sensitive activities, plans, and capabilities from observation or inference. Security teams use it to...
Ops
Short for operations, referring to the people and practices responsible for running, deploying, monitoring, and supporting systems in production. In...
Page Me
A request to notify someone through the on-call or alerting system when urgent intervention is needed. The phrase survives from pager-era operations even when...
Password Cracking
A security concept covering password cracking and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Password Manager
A security concept covering password manager and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Password Spraying
A security concept covering password spraying and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Patch Cadence
The regular schedule or tempo at which systems, applications, and devices receive updates and security fixes. Patch cadence affects exposure because...
Patch It
A direct instruction to apply a fix quickly, often without broader redesign, because the immediate problem matters more than elegance. It can be practical...
Patch Management
A governance or operations concept focused on patch management as part of ongoing security management. It shows up in application security, identity,...
Patch Pipeline
The end-to-end process and tooling used to ingest, test, approve, deploy, and verify patches across an environment. A strong patch pipeline reduces manual...
Patch Tuesday
A security concept covering patch tuesday and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Patch Tuesday Culture
The organizational habit of orienting patching, testing, and risk review around Microsoft's regular Patch Tuesday release cadence. More broadly, the phrase can...
Payload Delivery
A security concept covering payload delivery and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Penetration Testing Methodology
A defensive security practice involving penetration testing methodology to measure exposure, improve controls, or find malicious activity. It shows up in...
Personal Data
A security concept covering personal data and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Pharming
A security attack or exploit technique associated with pharming in real-world systems and networks. It shows up in application security, identity,...
Physical Security
A security concept covering physical security and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Piggybacking
A security concept covering piggybacking and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Plaintext
A cryptographic concept related to plaintext, secure communication, key handling, or trust establishment. It shows up in application security, identity,...
Platform Security
A security concept covering platform security and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Plausible Deniability
A security concept covering plausible deniability and its role in protecting systems, users, data, or operations. It shows up in application security,...
Playbook
A documented set of step-by-step actions for handling a specific type of security event, threat, or operational scenario. Playbooks help responders move faster...
Point of Presence Security
A security concept covering point of presence security and its role in protecting systems, users, data, or operations. It shows up in application security,...
Pre-Authentication
An identity or access control concept centered on pre-authentication and how systems verify or authorize actions. It shows up in application security,...
Pretexting
A security concept covering pretexting and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Privacy by Design
A security concept covering privacy by design and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Privacy Impact Assessment
A defensive security practice involving privacy impact assessment to measure exposure, improve controls, or find malicious activity. It shows up in application...
Privilege Creep
A security concept covering privilege creep and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Process Hollowing
A security concept covering process hollowing and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Process Injection
A security concept covering process injection and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Production AI
AI systems that are running in real production environments and serving meaningful workloads rather than being confined to demos or prototypes. Production AI...
Production Incident
A failure or degradation in a live system that affects real users, business operations, or service reliability. The term usually implies formal response,...
Production Security
The controls, practices, and protections applied specifically to live production environments where real customers, data, and business operations are at stake....
Profitability
The state of generating profit rather than loss over a defined period or on a particular unit of business. Startups often trade off profitability against...
Prompt Management
The operational practice of organizing, versioning, reviewing, testing, and deploying prompts in a controlled way. Prompt management becomes important once...
Proof of Knowledge
A security concept covering proof of knowledge and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Protocol Downgrade
A security concept covering protocol downgrade and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Pseudo-Random Number Generator
A security concept covering pseudo-random number generator and its role in protecting systems, users, data, or operations. It shows up in application security,...
Purchase Order
A formal document issued by a buyer authorizing the purchase of goods or services under specified terms. In enterprise startups, getting the purchase order...
Rainbow Table
A security concept covering rainbow table and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Random Number Generator
A security concept covering random number generator and its role in protecting systems, users, data, or operations. It shows up in application security,...
Rate Limiting Security
A security concept covering rate limiting security and its role in protecting systems, users, data, or operations. It shows up in application security,...
Real-Time Monitoring
The continuous observation of systems, identities, traffic, or applications with minimal delay so teams can see changes and suspicious activity as they happen....
Real-Time Threat Detection
A defensive security practice involving real-time threat detection to measure exposure, improve controls, or find malicious activity. It shows up in...
Reclassification
A security concept covering reclassification and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Red Alert
An emergency state indicating severe risk, outage, or immediate attention required. It often appears in incident language, monitoring, and operations...
Red Line
A hard boundary or limit that should not be crossed, whether technical, operational, legal, or organizational. In engineering it often marks unacceptable risk...
Red Team Exercise
A defensive security practice involving red team exercise to measure exposure, improve controls, or find malicious activity. It shows up in application...
Reflected XSS
A security concept covering reflected xss and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Regression Testing Security
A defensive security practice involving regression testing security to measure exposure, improve controls, or find malicious activity. It shows up in...
Rehire
To bring back a former employee into the company, often because they already understand the product, culture, and context. Rehires can ramp faster, though...
Release Day
The day a feature, version, or product is officially shipped or made available, often accompanied by extra scrutiny, nerves, and coordination. For many teams...
Remediation
A governance or operations concept focused on remediation as part of ongoing security management. It shows up in application security, identity,...
Remote Administration
The management of systems from another location using remote shells, desktop sessions, management consoles, or automation tools. Remote administration...
Remote Code Execution
A security concept covering remote code execution and its role in protecting systems, users, data, or operations. It shows up in application security,...
replication lag
The delay between when data is written to a primary database and when it appears on its read replicas. Replication lag causes the classic 'write then...
Response Team
The group of people responsible for investigating, containing, coordinating, and helping recover from security incidents. Depending on the organization, the...
Response Time
The time it takes to begin or complete a response action after an alert, request, or incident is recognized. In security operations, response time is a...
Return Oriented Programming
A security concept covering return oriented programming and its role in protecting systems, users, data, or operations. It shows up in application security,...
Reverse Engineering
A security concept covering reverse engineering and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Revocation List
A security concept covering revocation list and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Risk Assessment
A defensive security practice involving risk assessment to measure exposure, improve controls, or find malicious activity. It shows up in application security,...
Risk Matrix
A governance or operations concept focused on risk matrix as part of ongoing security management. It shows up in application security, identity,...
Risk Register
A governance or operations concept focused on risk register as part of ongoing security management. It shows up in application security, identity,...
Rollout
The staged introduction of a product, feature, pricing change, or program to users or markets. Rollouts can be gradual, segmented, or region-based to manage...
Runaway Process
A process that consumes excessive CPU, memory, disk, or other resources because it is stuck, looping, leaking, or otherwise behaving uncontrollably. In...
runbook
A documented set of step-by-step procedures for handling specific operational scenarios, from routine maintenance tasks to incident response. Runbooks reduce...
Runbook
A documented set of step-by-step procedures for handling specific operational tasks or incidents. Good runbooks include the alert that triggers them,...
Run the Business
Work required to keep an existing business or product operating reliably, as opposed to net-new feature or innovation work.
Runtime Application Self-Protection
A security concept covering runtime application self-protection and its role in protecting systems, users, data, or operations. It shows up in application...
Sales Ops
The function that supports the sales team with process, systems, forecasting, territory design, reporting, and compensation mechanics. Sales ops becomes...
Sandbox Escape
A security concept covering sandbox escape and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Scale
To grow a company, product, or system without letting complexity or cost rise so fast that progress collapses. In startup language, scaling implies...
Scale AI
The challenge or practice of operating AI systems at large usage levels, larger model sizes, or across many teams and products. The phrase can also appear...
Scale Stage
The phase where a company moves beyond proving demand and focuses on expanding a repeatable engine across customers, teams, and systems. Scale-stage companies...
Scaling
The process of growing capacity, customers, and organization while trying to preserve quality, economics, and speed. Scaling challenges are usually as much...
Scaling Challenge
A problem that emerges when a business or system grows beyond what its current processes, tools, or structure can comfortably handle. Scaling challenges often...
Secondment
A temporary assignment where an employee is placed into another team, partner organization, or function for a defined period. In startup and corporate...
Secret Rotation
The practice of periodically changing secrets (API keys, passwords, certificates) to limit the damage window if a secret is compromised. The thing everyone...
Secrets Management
A governance or operations concept focused on secrets management as part of ongoing security management. It shows up in application security, identity,...
Secrets Vault
A security concept covering secrets vault and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Secure Boot
A security concept covering secure boot and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Secure Coding
A security concept covering secure coding and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Secure Enclave
A security concept covering secure enclave and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Secure Multi-Party Computation
A security concept covering secure multi-party computation and its role in protecting systems, users, data, or operations. It shows up in application security,...
Secure Shell
A security concept covering secure shell and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Secure Software Development Lifecycle
A security concept covering secure software development lifecycle and its role in protecting systems, users, data, or operations. It shows up in application...
Security Assertion Markup Language
A security concept covering security assertion markup language and its role in protecting systems, users, data, or operations. It shows up in application...
Security Audit
A defensive security practice involving security audit to measure exposure, improve controls, or find malicious activity. It shows up in application security,...
Security Awareness Training
A defensive security practice involving security awareness training to measure exposure, improve controls, or find malicious activity. It shows up in...
Security by Obscurity
A security concept covering security by obscurity and its role in protecting systems, users, data, or operations. It shows up in application security,...
Security Champion
A security concept covering security champion and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Security Control
A security concept covering security control and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Security Group
A security concept covering security group and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Security Monitoring
A defensive security practice involving security monitoring to measure exposure, improve controls, or find malicious activity. It shows up in application...
Security Operations Center
A security concept covering security operations center and its role in protecting systems, users, data, or operations. It shows up in application security,...
Security Orchestration
A security concept covering security orchestration and its role in protecting systems, users, data, or operations. It shows up in application security,...
Security Posture
A governance or operations concept focused on security posture as part of ongoing security management. It shows up in application security, identity,...
Sensitive Data Exposure
A security concept covering sensitive data exposure and its role in protecting systems, users, data, or operations. It shows up in application security,...
Server Room
A physical room that houses servers, networking gear, storage, and supporting equipment such as cooling and power systems. In modern cloud-heavy organizations...
Server-Side Request Forgery
A security concept covering server-side request forgery and its role in protecting systems, users, data, or operations. It shows up in application security,...
Service Level
A defined standard for performance, availability, response time, or other operational commitments in a service relationship. Service levels matter because...
Service Model
The overall way a company delivers and supports its offering, including what is automated, what is human-driven, and how responsibility is divided. Service...
Session Fixation
A security concept covering session fixation and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Session Management
A governance or operations concept focused on session management as part of ongoing security management. It shows up in application security, identity,...
Session Replay
A security concept covering session replay and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Shadow IT
A security concept covering shadow it and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Shift Left Security
A security concept covering shift left security and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Shutdown
The act or state of stopping a system, service, or organization process. In engineering slang, shutdowns can be routine operations, emergency moves, or...
Signal Intelligence
A security concept covering signal intelligence and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Signature-Based Detection
A defensive security practice involving signature-based detection to measure exposure, improve controls, or find malicious activity. It shows up in application...
Silent Deploy
A deployment designed to minimize external visibility and user disruption, often by releasing infrastructure, code paths, or toggled-off features before public...
Single Sign-On Security
A security concept covering single sign-on security and its role in protecting systems, users, data, or operations. It shows up in application security,...
Site Reliability
The discipline of keeping services reliable through engineering approaches to operations, including automation, observability, incident response, and...
SLA
Service Level Agreement — a formal commitment defining the expected level of service (usually uptime). 99.9% sounds great until you realize it allows 8.7 hours...
SLA Slang
An informal use of 'SLA' to mean any expectation of response time or service quality, even when no formal service-level agreement exists. It shows how contract...
Smoke Test
Smoke Test is a preliminary, broad-but-shallow test run performed to verify that the most critical functions of a software system work before committing to...
Software Bill of Materials
A security concept covering software bill of materials and its role in protecting systems, users, data, or operations. It shows up in application security,...
Software Composition Analysis
A defensive security practice involving software composition analysis to measure exposure, improve controls, or find malicious activity. It shows up in...
Software Supply Chain
A security concept covering software supply chain and its role in protecting systems, users, data, or operations. It shows up in application security,...
SRE
Site Reliability Engineering (SRE) is a discipline, originated at Google, that applies software engineering principles to infrastructure and operations. SRE...
Stack Smashing
A security concept covering stack smashing and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Status Green
A simple way to say things appear healthy, stable, or within expected bounds. In engineering slang, status green can be reassuring or suspicious depending on...
Status Meeting
A recurring meeting focused on checking progress, blockers, responsibilities, and next steps across a project or function. Status meetings can be useful for...
Steganography Detection
A defensive security practice involving steganography detection to measure exposure, improve controls, or find malicious activity. It shows up in application...
Stored XSS
A security concept covering stored xss and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Supply Chain Compromise
A security concept covering supply chain compromise and its role in protecting systems, users, data, or operations. It shows up in application security,...
Support Tier
A defined level of support service, usually differing by response time, coverage, access, or obligations. In product and operations settings, support tiers...
Symlink
A symbolic link — a special file that acts as a pointer to another file or directory. Unlike hard links, symlinks can cross filesystems and point to...
Sysadmin
System Administrator — the person responsible for maintaining and operating computer servers and networks. The title has been evolving toward 'DevOps engineer'...
Sysadmin Culture
The shared norms, humor, habits, and expectations of system administrators and infrastructure operators, including shell fluency, automation, incident...
Sysadmin Slang
Informal language shaped by systems administration habits, humor, and operational experience. In engineering slang, sysadmin slang often carries blunt realism...
System Hardening
A governance or operations concept focused on system hardening as part of ongoing security management. It shows up in application security, identity,...
Tabletop Exercise
A defensive security practice involving tabletop exercise to measure exposure, improve controls, or find malicious activity. It shows up in application...
Tailgating
A security concept covering tailgating and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Threat Detection
A defensive security practice involving threat detection to measure exposure, improve controls, or find malicious activity. It shows up in application...
Threat Feed
A security concept covering threat feed and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Threat Hunting
A defensive security practice involving threat hunting to measure exposure, improve controls, or find malicious activity. It shows up in application security,...
Threat Intelligence Platform
A security concept covering threat intelligence platform and its role in protecting systems, users, data, or operations. It shows up in application security,...
Threat Landscape
A governance or operations concept focused on threat landscape as part of ongoing security management. It shows up in application security, identity,...
Threat Surface
A governance or operations concept focused on threat surface as part of ongoing security management. It shows up in application security, identity,...
Tiered Support
A support model that offers different levels of service, response times, or guarantees depending on plan, contract, or user category. In open source...
toil
Repetitive, manual, automatable operational work that scales linearly with service size and provides no enduring value. Google's SRE framework defines toil...
Toil
Manual, repetitive, automatable operational work that scales linearly with service growth and provides no enduring value. A key SRE concept — Google's SRE book...
Toil
Manual, repetitive, automatable work required to run a production service. Google's SRE philosophy dictates that no more than 50% of an SRE's time should be...
Traffic Analysis
A defensive security practice involving traffic analysis to measure exposure, improve controls, or find malicious activity. It shows up in application...
Trapdoor
A security concept covering trapdoor and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Turnaround
A major shift that moves a struggling business, product, or metric from decline toward recovery and healthier performance. Turnarounds require more than...
Turnover
The rate at which employees leave and are replaced, though in some regions and industries the term can also refer to revenue. In startup people operations,...
Two-Person Integrity
A security concept covering two-person integrity and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Type Confusion
A security concept covering type confusion and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Underfunded
Operating with less capital than the business realistically needs to pursue its plan at an acceptable level of risk. Being underfunded can force discipline,...
Unplanned Work
Interrupt-driven tasks such as outages, support escalations, and urgent fixes that were not on the original plan.
URL Filtering
A security concept covering url filtering and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Use After Free
A security concept covering use after free and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Utilization Rate
The percentage of available capacity, billable time, or allocated resources that are actually being used productively. Utilization rate is especially important...
Value Chain
The sequence of activities through which value is created, delivered, and captured, from sourcing and production to distribution and customer support....
Vertical Integration
A strategy where a company owns or controls multiple stages of the value chain rather than relying entirely on external suppliers or distributors. Vertical...
Virtual CFO
A part-time or outsourced finance leader who provides CFO-level support without joining full-time. Startups often use a virtual CFO before their complexity...
Vulnerability
A security concept covering vulnerability and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Vulnerability Assessment
A defensive security practice involving vulnerability assessment to measure exposure, improve controls, or find malicious activity. It shows up in application...
Vulnerability Chaining
A security concept covering vulnerability chaining and its role in protecting systems, users, data, or operations. It shows up in application security,...
Vulnerability Disclosure
A security concept covering vulnerability disclosure and its role in protecting systems, users, data, or operations. It shows up in application security,...
Vulnerability Management
A governance or operations concept focused on vulnerability management as part of ongoing security management. It shows up in application security, identity,...
Vulnerability Scanning
A defensive security practice involving vulnerability scanning to measure exposure, improve controls, or find malicious activity. It shows up in application...
war room
A dedicated physical or virtual space where engineers gather to collaborate intensively during a major incident or critical project deadline. In the age of...
War Story Tech
A dramatic story from past outages, launches, migrations, or production disasters used to teach or entertain other engineers.
Watering Hole
A security concept covering watering hole and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Web Cache Poisoning
A security concept covering web cache poisoning and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Web Shell
A security concept covering web shell and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Weekend Deploy
A deployment performed on a weekend, usually because business constraints, maintenance windows, or risky migrations made normal hours undesirable. The term...
Whack-a-Mole
A situation where fixing one issue causes another similar issue to appear elsewhere, so the team keeps reacting without solving the underlying pattern. The...
White Box Testing
A defensive security practice involving white box testing to measure exposure, improve controls, or find malicious activity. It shows up in application...
Whitelisting
A security concept covering whitelisting and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Who's On Call
The urgent question asked when something breaks and ownership matters immediately. In engineering slang, who is on call is really a question about...
Wi-Fi Deauthentication
An identity or access control concept centered on wi-fi deauthentication and how systems verify or authorize actions. It shows up in application security,...
Windows Defender
A security concept covering windows defender and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Wire Fraud
A security concept covering wire fraud and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Wireshark Filter
A security concept covering wireshark filter and its role in protecting systems, users, data, or operations. It shows up in application security, identity,...
Workaround
A temporary method for avoiding or reducing the impact of a problem without actually fixing the underlying cause. In engineering culture, workarounds are often...
Working Capital
Current assets minus current liabilities, representing short-term liquidity available to operate the business. Working capital matters especially in companies...

Related Topics