# Security Acronyms

This glossary provides a quick reference for common security acronyms and terms used in modern cybersecurity frameworks and tools. Use this guide to better understand security documentation, compliance requirements, and technical discussions related to application and cloud security.

[AICPA SOC 2 - System and Organization Controls 2](https://www.aikido.dev/glossary/aicpa-soc-2)

[CI/CD Pipeline Security](https://www.aikido.dev/glossary/ci-cd-pipeline-security)

[CVE - Common Vulnerabilities and Exposures](https://www.aikido.dev/glossary/common-vulnerabilities-and-exposures-cve)

[ISO 27001:2022](https://www.aikido.dev/glossary/iso-27001-2022)

ASPM - Application Security Posture Management

CSPM - Cloud Security Posture Management

[SAST - Static Application Security Testing](https://www.aikido.dev/glossary/static-application-security-testing-sast)

[SCA - Software Composition Analysis](https://www.aikido.dev/glossary/software-composition-analysis-sca)

[DAST - Dynamic Application Security Testing](https://www.aikido.dev/glossary/dynamic-application-security-testing-dast)

EASM - External Attack Surface Management

[IaC - Infrastructure as Code](https://www.aikido.dev/glossary/infrastructure-as-code-iac-scanning)

CNAPP - Cloud-Native Application Protection Platform

DSPM - Data security posture management

SIEM - Security Information and Event Management

RASP - Runtime Application Self Protection

WAF - Web App Firewall

GRC - Governance Risk & Compliance

MDR - Managed Detection Response

[SBOM - Software Bill of Materials](https://www.aikido.dev/glossary/software-bill-of-materials-sbom)

NIS2 - Network and Information Security Directive 2

[OWASP - Open Worldwide Application Security Project](https://www.aikido.dev/glossary/owasp-top-10)

[XSS Vulnerabilities](https://www.aikido.dev/glossary/xss-vulnerabilities)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.aikido.dev/miscellaneous-info/security-acronyms.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.