Deny by Default
Phrase · Security & Infosec
Definitions
A security principle where access is blocked unless it has been explicitly allowed. Deny-by-default designs reduce accidental exposure because new users, systems, or traffic paths start with no privilege until policy grants it.
In plain English: A rule that nothing is allowed unless someone specifically permits it.
Example: "The new platform is deny by default, so every service-to-service call needs an explicit policy."