Online Safety
Account Security
Controls and habits that keep login credentials, sessions, and account recovery options from being abused.
Read full definitionShouldEye Trust Intelligence Glossary
Online Safety Terms
Online-safety definitions for malware, authentication, malicious links, domain risk, and safe browsing.
Educational information only. ShouldEye does not provide legal, banking, or individualized financial advice. Dispute rights, deadlines, and outcomes depend on your payment method, card network, issuer, processor, jurisdiction, and the facts of your case. Legal Disclaimers
65 published definitions in this topic.
Online Safety
Adware
Software that delivers unwanted advertising and may also track browsing or degrade device performance.
Read full definitionOnline SafetySecurity risk
API Key Leak
An API key leak is accidental publication of a secret token that can unlock paid services, private data, or admin actions.
Read full definitionOnline Safety
Attachment Sandboxing
Attachment sandboxing opens files in an isolated environment to reduce malware detonation risk.
Read full definitionOnline SafetySecurity risk
Attack Surface
Attack surface is the set of exposed interfaces—apps, APIs, emails, and people—where an attacker can try to get in.
Read full definitionOnline SafetySecurity risk
CAA Record
A CAA DNS record restricts which certificate authorities may issue TLS certificates for a domain.
Read full definitionOnline Safety
Certificate Pinning
Certificate pinning restricts which TLS certificates an app will trust for a given host to reduce some MITM risks.
Read full definitionOnline SafetySecurity risk
Compromised Account
A compromised account is one an attacker can access because credentials, cookies, reset links, or MFA were stolen or guessed.
Read full definitionOnline SafetySecurity risk
Content Security Policy
Content Security Policy is a browser header that restricts which scripts and resources a page may load to reduce XSS impact.
Read full definitionOnline SafetySecurity risk
Credential Stuffing Attack
A credential stuffing attack automates login attempts using breached username/password pairs against other sites.
Read full definitionOnline Safety
Credential Stuffing Defense
Credential stuffing defense includes unique passwords, MFA, breach monitoring, and login anomaly detection.
Read full definitionOnline SafetySecurity risk
Data Exfiltration
Data exfiltration is unauthorized transfer of sensitive data out of a system—often the goal of ransomware and insider attacks.
Read full definitionOnline SafetySecurity risk
Defense in Depth
Defense in depth stacks multiple security controls so one failure does not fully expose users or systems.
Read full definitionOnline Safety
Device Attestation
Device attestation cryptographically checks whether a client device is genuine and in an expected state.
Read full definitionOnline Safety
DNS Hijacking
DNS hijacking redirects domain lookups to attacker-controlled destinations so victims land on malicious sites.
Read full definitionOnline Safety
DNS over HTTPS
DNS over HTTPS encrypts DNS lookups so network observers cannot easily see which domains you resolve.
Read full definitionOnline SafetySecurity risk
Drive-By Download
Malware installation triggered merely by visiting a compromised page, often without a clicked installer.
Read full definitionOnline SafetySecurity risk
Endpoint Detection
Endpoint detection monitors devices for malware and suspicious behavior after preventive controls fail.
Read full definitionOnline Safety
Hardware Security Key
A hardware security key is a physical authenticator used for phishing-resistant sign-in.
Read full definitionOnline SafetySecurity risk
Homograph Domain
A homograph domain uses lookalike Unicode characters so a fake domain appears identical to a trusted brand.
Read full definitionOnline Safety
Incident Response
Incident response is the organized process of detecting, containing, and recovering from security events.
Read full definitionOnline SafetySecurity risk
Info Stealer
An info stealer is malware designed to harvest passwords, cookies, crypto wallets, and autofill data from a victim’s device.
Read full definitionOnline Safety
Lateral Movement
Lateral movement is an attacker’s progression from one compromised account or system to others inside a network.
Read full definitionOnline Safety
Least Privilege
Least privilege grants only the minimum access needed for a task, limiting blast radius after compromise.
Read full definitionOnline SafetyLink risk
Malicious Link
A Malicious Link is a URL that leads to phishing, malware, scams, or other harmful destinations disguised as something legitimate.
Read full definitionOnline SafetySecurity risk
Malware Distribution Site
A malware distribution site delivers malicious downloads via fake updates, cracks, ads, or compromised pages.
Read full definitionOnline Safety
Man-in-the-Middle
A man-in-the-middle attack intercepts communications between two parties to steal or alter data.
Read full definitionOnline SafetySecurity risk
Man-in-the-Middle Attack
An attack that intercepts communications between two parties to steal or alter data in transit.
Read full definitionOnline SafetySecurity risk
MFA Fatigue Attack
An MFA fatigue attack spams push approvals until a tired user accepts, granting the attacker access.
Read full definitionOnline SafetySecurity risk
Mixed Content
Mixed content is insecure HTTP resources loaded inside an HTTPS page, weakening encryption and enabling injection.
Read full definitionOnline Safety
Online Safety
Practices and protections that reduce harm from scams, malware, harassment, and other digital risks.
Read full definitionOnline Safety
Passkey Phishing Resistance
Passkey phishing resistance comes from cryptographic origin binding that blocks classic “type your password on a fake site” attacks.
Read full definitionOnline Safety
Password Manager
A password manager stores unique credentials securely so people avoid reuse across sites.
Read full definitionOnline SafetySecurity risk
Password Reuse Risk
Password reuse risk is the chance that one breached site unlocks many others because the same password was reused.
Read full definitionOnline SafetySecurity risk
Password Spray Attack
A password spray attack tries a few common passwords across many accounts to avoid lockouts while finding weak credentials.
Read full definitionOnline Safety
Password Spraying
Trying a few common passwords against many accounts to avoid lockouts while finding weak credentials.
Read full definitionOnline Safety
Patch Lag
Patch lag is the delay between a fix becoming available and systems actually applying it.
Read full definitionOnline Safety
Privilege Escalation
Privilege escalation is gaining higher access rights than originally granted after an initial compromise.
Read full definitionOnline SafetySecurity risk
Rate Limiting
Rate limiting caps how often an action can be attempted, slowing brute-force, stuffing, and abuse.
Read full definitionOnline Safety
Safe Browsing
Browser and threat-intelligence protections that warn users about known phishing, malware, and deceptive sites.
Read full definitionOnline SafetySecurity risk
Safe Browsing Match
A Safe Browsing match means a URL or resource was flagged by a malware/phishing protection list used by browsers.
Read full definitionOnline Safety
Safe Link Scanning
Safe link scanning checks URLs against threat intelligence before a user opens them.
Read full definitionOnline SafetySecurity risk
Secret Scanning
Secret scanning automatically searches code and logs for leaked keys, tokens, and credentials before attackers find them.
Read full definitionOnline Safety
Secure by Default
Secure by default means products ship with strong security settings enabled without requiring expert configuration.
Read full definitionOnline Safety
Secure Enclave
A secure enclave is isolated hardware that protects keys and sensitive operations from the main operating system.
Read full definitionOnline Safety
Security Awareness Training
Security awareness training teaches people to recognize phishing, social engineering, and unsafe practices.
Read full definitionOnline Safety
Security Breach
An incident where unauthorized parties access, exfiltrate, or disrupt systems or sensitive data.
Read full definitionOnline SafetySecurity risk
Security Header
A security header is an HTTP response directive that hardens browsers against clickjacking, XSS, and mixed-content risks.
Read full definitionOnline SafetySecurity risk
Security Posture
Security posture is the overall strength of an organization’s defenses, configurations, and response readiness.
Read full definitionOnline SafetySecurity risk
Security.txt
security.txt is a standard file that tells researchers how to report vulnerabilities to a site’s security team.
Read full definitionOnline SafetySecurity risk
Session Cookie Theft
Session cookie theft steals authenticated browser cookies so attackers can hijack accounts without knowing the password.
Read full definitionOnline SafetySecurity risk
Session Replay Attack
A session replay attack reuses stolen cookies or tokens to act as a logged-in user without the password.
Read full definitionOnline SafetySecurity risk
Software Supply Chain Attack
Compromising upstream packages, build systems, or updates to infect downstream users at scale.
Read full definitionOnline Safety
Spyware
Software that secretly monitors activity or steals information from a device without informed consent.
Read full definitionOnline Safety
SSL Certificate
An SSL/TLS certificate enables HTTPS encryption for a website and helps browsers verify the site’s cryptographic identity.
Read full definitionOnline SafetySecurity risk
Supply Chain Compromise
A supply chain compromise inserts malicious code into trusted dependencies, build systems, or update channels.
Read full definitionOnline Safety
Suspicious URL
A link that shows warning signs such as typosquatting, unexpected domains, or known malicious patterns.
Read full definitionOnline SafetySecurity risk
Threat Model
A threat model identifies what you protect, who might attack it, and which controls matter most for those risks.
Read full definitionOnline SafetySecurity risk
Typosquat Domain
A typosquat domain is a lookalike URL registered to catch mistyped traffic for phishing or brand abuse.
Read full definitionOnline Safety
URL Scanner
A tool that analyzes a link’s destination, reputation, and payload risk before a user clicks through.
Read full definition