Runtime Protection

Definitions

1. Security controls that monitor or block suspicious behavior while software is actively running rather than only during build or deployment. Runtime protection is used in endpoints, containers, applications, and workloads to catch attacks that static scanning alone cannot prevent.

   In plain English: Security that works while software is running, not just before deployment.

   Example: "The service passed all pre-release checks, but runtime protection was what ultimately blocked the in-memory code injection attempt in production."

Related Terms

• Automated Threat Detection
• Canary
• Continuous Monitoring
• Detection Rule
• IOC
• IPS
• Mean Time to Detect
• Network Traffic Analysis