Security Visualized
Library

Library

Concepts

One architecture or control per entry: what it is, one diagram of a single request moving through it, what it protects, and — stated as plainly — what it does not solve.

5 concepts published.

Browse by

Category

What you are trying to do

Cloud and networks 3 concepts

  • Concept

    Secure access service edge (SASE)

    How software-defined networking and cloud-delivered security converge at distributed edges, so access policy follows the user, the device and the data.

    Cloud and networks Intermediate 3 min read
    Read the concept

  • Concept

    Security service edge (SSE)

    The cloud-delivered security half of SASE, without the networking half, and what stays unsolved when you buy the security services on their own.

    Cloud and networks Intermediate 4 min read
    Read the concept

  • Concept

    Software-defined WAN (SD-WAN)

    How an application-aware overlay picks a path across mixed transport, why that is a routing decision rather than a security one, and what it leaves for something else to do.

    Cloud and networks Intermediate 4 min read
    Read the concept

Data protection 1 concept

  • Concept

    Cloud access security broker (CASB)

    How a broker gains visibility and control over cloud service use, why its deployment mode decides what it can actually see and stop, and where each mode runs out.

    Data protection Intermediate 4 min read
    Read the concept

Identity and access 1 concept

  • Concept

    Zero trust network access (ZTNA)

    How brokered, application-specific access replaces network-level connectivity, and what an over-broad application definition gives back.

    Identity and access Intermediate 4 min read
    Read the concept

The rest of the library