Security Glossary The FireCompass Security Glossary Plain-language definitions of the attack techniques, testing methods, and program frameworks security teams reference most, reviewed against source frameworks like OWASP, MITRE ATT&CK, NIST, and Gartner. By the FireCompass Team · Updated July 10, 2026 What This Glossary Covers This glossary defines the concepts that come up most often… Read More »Security Glossary
Security Glossary / Penetration Testing Report Example Penetration Testing Report Example: What a Real, Actionable Report Looks Like The standard structure, a full findings table, and the exact questions to ask before you sign a contract for one. Security Glossary · Reviewed by the FireCompass security team · Updated July 2026 What a Penetration Testing… Read More »Penetration Testing Report Example
Security Glossary / Vulnerability Management What Is Vulnerability Management, and Where Does It Stop Short of Proving Risk? A practitioner’s guide to the full lifecycle, prioritization beyond CVSS, the failure modes that quietly bankrupt AppSec teams, and the questions to ask any vendor before you sign. Published by the FireCompass Security Team · Reviewed for… Read More »Vulnerability Management
Security Glossary / Business Logic Testing Business Logic Testing: Finding the Flaws Scanners Can’t See The most damaging vulnerabilities in production applications often have no CVE, trigger no WAF alert, and pass every automated scan. They live in the rules of the application itself. Security Glossary · Application Security · Updated July 2026 · 14… Read More »Business Logic Testing
Security Glossary / Lateral Movement Lateral Movement: Why a Clean Web App Pentest Report Can Still Miss the Attack That Ends Your Company MITRE ATT&CK TA0008 in practice: how one leaked credential becomes domain admin, why single-asset scoping structurally cannot catch it, and what to require from any vendor who claims they test for it.… Read More »Lateral Movement