GLOSSARY

App security terms, explained in plain English.

Your AI tool, a scanner or a developer just used a word you don't know. Look it up here, see why it matters, and find out if your app is affected.

42 TERMS

A

API key exposureSecurityA secret key for a paid service ends up where the public can see it.
Authentication vs authorizationAuthenticationChecking who someone is, versus checking what they're allowed to do.

B

Broken access controlSecurityA logged-in user can reach data or actions that should belong to someone else.
Brute-force attackAuthenticationSomeone tries thousands of passwords until one works.

C

D

E

F

Firebase security rulesDatabasesThe rules that decide who can read and write data in Firebase.

G

GitHub secret scanningDeploymentA GitHub feature that warns you when a password or API key is pushed to your repository.

H

I

J

JSON Web Token (JWT)AuthenticationA signed pass your app hands a user after they log in.

K

Key rotationSecurityReplacing a secret key with a new one and switching off the old one.

L

Least privilegeSecurityGiving each person, key or app only the access it needs, and nothing more.

M

N

NoSQL injectionSecurityAn attacker sends a special query object instead of normal text to get around your checks.

O

OAuthAuthenticationThe standard behind "Sign in with Google" and similar buttons.

P

Q

Quota and spending limitsAI codingCaps on how much of a paid service your app, or one user, can use.

R

S

T

Two-factor authentication (2FA)AuthenticationA second step at login, like a code from your phone.

U

V

Vibe codingAI codingBuilding software by describing what you want to an AI tool.

W

X

X-Frame-OptionsSecurityA header that stops other websites from showing your site inside a hidden frame.

Y

YOLO modeAI codingLetting an AI coding tool run commands and edit files without asking you first.

Z

Zero-day vulnerabilitySecurityA security hole that attackers know about before a fix exists.

Not sure which of these affect your app?

Run a free check. We'll tell you which ones apply, in plain English, in about a minute.