IT Glossary(2012 terms)
Every IT term and short explanation shown on ITBGM, listed in full by genre.
Use the search box below to filter by term name.
Each term links to a page with a more detailed, engineer-oriented explanation.
No terms match "
AI120
AWS218
Azure138
Database167
GCP125
Linux256
Networking315
Programming177
Security181
OSS164
Companies151
Adobe Firefly AI Image Generation ☆ An image-generation AI from Adobe, integrated directly into its image-editing software.
Aider AI Coding Assistants ☆ An open-source AI pair-programming tool that runs in the terminal.
Amp AI Coding Assistants ☆ An autonomous coding agent from Sourcegraph that emphasizes deep context understanding.
Augment Code AI Coding Assistants ☆ An AI coding assistant that specializes in understanding large, complex existing codebases.
AutoGen AI Agents ☆ An open-source framework from Microsoft for coordinating multiple AI agents working together.
AutoGPT AI Agents ☆ An open-source platform where AI autonomously breaks down and executes tasks from a natural-language goal.
Baseten AI Development Platforms ☆ A model-serving platform for deploying custom models as production API endpoints.
Bolt.new AI Development Platforms ☆ A service that builds and runs a web app from a prompt, right in the browser.
Canva Magic Studio AI Image Generation ☆ A suite of AI-powered image generation and editing features built into the design tool Canva.
Character.AI Chat AI / Assistants ☆ A conversational AI service where you chat with AI characters that have distinct personalities.
ChatGPT Chat AI / Assistants ☆ OpenAI's flagship conversational generative-AI service.
Claude Chat AI / Assistants ☆ Anthropic's conversational generative-AI service.
Claude Code AI Coding Assistants ☆ An AI coding agent from Anthropic that runs in the terminal.
Cline AI Coding Assistants ☆ An open-source AI coding agent that runs as a VS Code extension.
Codex AI Coding Assistants ☆ An AI agent from OpenAI specialized in coding.
Cohere AI Development Platforms ☆ A company and platform providing enterprise-focused large language models via API.
ComfyUI AI Image Generation ☆ An open-source tool for building image-generation AI workflows by connecting nodes.
Consensus AI Search & Research ☆ An AI academic search engine for checking scientific consensus across peer-reviewed papers.
Continue AI Coding Assistants ☆ An open-source AI coding assistant that plugs into VS Code and JetBrains IDEs.
Copilot Chat AI / Assistants ☆ Microsoft's AI assistant, integrated into Windows, Office, and other Microsoft products.
Copy.ai AI Translation & Writing ☆ An AI writing service for quickly generating short-form copy like ads and email text.
CrewAI AI Development Platforms ☆ An open-source framework for coordinating multiple AI agents, each with a defined role.
Cursor AI Coding Assistants ☆ A code editor with built-in AI-powered code completion and editing.
DALL-E AI Image Generation ☆ An image-generation AI from OpenAI.
DeepL AI Translation & Writing ☆ A translation-focused AI service known for high-accuracy output.
DeepSeek Chat AI / Assistants ☆ A generative-AI service from China's DeepSeek, which drew attention for its low-cost training approach.
Descript AI Video Generation ☆ A service for editing video and audio like editing text, based on automatic transcription.
Devin AI Coding Assistants ☆ An AI agent from Cognition that autonomously handles coding tasks.
Devin Desktop AI Coding Assistants ☆ Formerly Windsurf (formerly Codeium). An AI-integrated development editor from Cognition, the maker of Devin.
Dia Chat AI / Assistants ☆ A web browser from The Browser Company designed around conversing with AI.
Dust AI Agents ☆ A platform for connecting to internal data and tools to run multiple AI agents across an organization.
ElevenLabs AI Voice/Music Generation ☆ An AI service for high-quality voice synthesis and voice cloning.
Elicit AI Search & Research ☆ An AI research assistant for researchers, specialized in searching and summarizing academic papers.
ERNIE Bot Chat AI / Assistants ☆ A conversational AI service developed by Baidu.
Felo AI Search & Research ☆ An AI search platform that supports cross-lingual search and summarization.
Fireflies.ai Chat AI / Assistants ☆ An AI assistant that joins web meetings to automatically transcribe and summarize them.
Fireworks AI AI Development Platforms ☆ An AI inference platform specialized in serving open-weight models with low latency.
Flowise AI Development Platforms ☆ An open-source, no-code tool for assembling LLM app workflows visually.
FLUX AI Image Generation ☆ An image generation model from Black Forest Labs known for high prompt fidelity.
Gamma AI Translation & Writing ☆ An AI tool that automatically generates presentations and documents from a prompt.
Gemini Chat AI / Assistants ☆ Google's generative-AI service.
Genspark AI Agents ☆ An AI-agent workspace that autonomously handles research, document creation, and task delegation.
GitHub Copilot AI Coding Assistants ☆ An AI pair-programming tool from GitHub that suggests and completes code.
Glean AI Search & Research ☆ An enterprise AI search tool for searching across information scattered throughout a company.
Google AI Studio AI Development Platforms ☆ A free, browser-based developer tool from Google for trying out Gemini models.
Google Colab AI Development Platforms ☆ Google's free execution environment that gives you Python and GPU access from just a browser.
Google Flow AI Video Generation ☆ An AI creative suite for filmmaking that unifies Google's Veo and Nano Banana models.
Grammarly AI Translation & Writing ☆ A writing-assistance service where AI checks English grammar and phrasing and suggests improvements.
Grok Chat AI / Assistants ☆ A generative-AI service from xAI.
Hailuo AI AI Video Generation ☆ An AI video generation service from China's MiniMax, known for physically natural motion.
HeyGen AI Video Generation ☆ A service that generates videos of an AI avatar speaking.
Higgsfield AI Video Generation ☆ An AI video platform that bundles access to multiple video generation models under a single subscription.
Hugging Face AI Development Platforms ☆ A leading platform for sharing and publishing AI models and datasets.
HuggingChat Chat AI / Assistants ☆ A chat service from Hugging Face for trying open-weight models for free.
Ideogram AI Image Generation ☆ An image-generation AI known for rendering text accurately within images.
Jasper AI Translation & Writing ☆ An AI writing service specialized in producing long-form brand content.
JetBrains AI Assistant AI Coding Assistants ☆ A coding-assistant AI feature built into JetBrains IDEs.
Julius AI AI Search & Research ☆ An AI tool for data analysis and chart creation using only natural-language instructions.
Kimi Chat AI / Assistants ☆ A conversational AI and large language model developed by China's Moonshot AI.
Kiro AI Coding Assistants ☆ Formerly Amazon Q Developer, an AI coding tool from AWS that writes a spec before implementing.
Kling AI AI Video Generation ☆ A high-quality video-generation AI service from China's Kuaishou.
Krea AI AI Image Generation ☆ An image-generation AI service that generates and edits images in real time.
LangChain AI Development Platforms ☆ A leading development framework that makes it easier to build applications on top of LLMs.
LangGraph AI Development Platforms ☆ A framework from LangChain for controlling AI agent workflows as a graph structure.
Le Chat Chat AI / Assistants ☆ A conversational generative-AI service from France's Mistral AI.
Leonardo AI AI Image Generation ☆ An image-generation AI service with a particular strength in assets for games and design.
Lindy AI Agents ☆ A service for building AI "assistant" agents that handle work like email triage and meeting prep.
LlamaIndex AI Development Platforms ☆ An open-source framework focused on connecting your own data to LLMs.
LM Studio AI Development Platforms ☆ A desktop app for easily running and trying out open-source LLMs on your local PC.
Lovable AI Development Platforms ☆ A service that automatically generates a web app from a simple prompt.
Luma AI AI Video Generation ☆ An AI service known for its Dream Machine video-generation model.
Manus AI Agents ☆ A general-purpose AI agent that autonomously handles research, document creation, and app development.
MCP AI Development Platforms ☆ A standard protocol (Model Context Protocol) connecting AI models to external tools and data.
Meta AI Chat AI / Assistants ☆ Meta's AI assistant, integrated into Instagram, WhatsApp, and other Meta products.
Midjourney AI Image Generation ☆ A leading text-to-image generation AI service.
Modal AI Development Platforms ☆ An AI infrastructure service that runs Python code directly on serverless cloud compute.
Murf AI AI Voice/Music Generation ☆ An AI voice generation service specialized in text-to-speech for narration production.
n8n AI Development Platforms ☆ A tool for building AI-powered workflow automation without code.
NotebookLM AI Search & Research ☆ An AI service from Google that summarizes and answers questions based on documents you upload to it.
Notion AI AI Translation & Writing ☆ An AI feature built into Notion that helps write, summarize, and proofread text.
Ollama AI Development Platforms ☆ A local-execution tool that makes it easy to run LLMs on your own PC.
OpenCode AI Coding Assistants ☆ An open-source AI agent that autonomously handles coding tasks.
OpenHands AI Agents ☆ An open-source AI coding agent that autonomously handles everything from code edits to running commands.
OpenRouter AI Development Platforms ☆ A model-routing service that lets you call LLMs from many providers through a single API.
Otter.ai AI Voice/Music Generation ☆ An AI service that transcribes and summarizes meeting audio in real time.
Perplexity AI Search & Research ☆ A search-focused service where the AI answers while citing its sources.
Perplexity Comet AI Search & Research ☆ A browser from Perplexity where AI can autonomously operate the web on your behalf.
Pi Chat AI / Assistants ☆ A conversational AI assistant from Inflection AI that emphasizes emotionally supportive conversation.
Pika AI Video Generation ☆ An AI service that generates short videos from text or images.
Pinecone AI Development Platforms ☆ A fully managed vector database for storing and managing vector data used in RAG and similarity search.
Pixverse AI Video Generation ☆ A cloud-based AI video generation platform specialized in generating short, cinematic-style clips.
Poe Chat AI / Assistants ☆ A chat platform from Quora that lets you switch between multiple AI models in one place.
Qodo AI Coding Assistants ☆ An AI development platform focused on verifying and reviewing code quality rather than just generating code.
QuillBot AI Translation & Writing ☆ An AI writing tool specialized in paraphrasing, summarizing, and grammar-checking existing text.
Qwen Chat AI / Assistants ☆ A large language model and chat service developed by Alibaba.
Recraft AI Image Generation ☆ An image-generation AI service that also supports generating logos and vector graphics.
Replicate AI Development Platforms ☆ A model hosting service that lets you run tens of thousands of public AI models directly via API.
Replit Agent AI Coding Assistants ☆ An AI agent on Replit that autonomously builds an app from a set of requirements.
RunPod AI Development Platforms ☆ A GPU cloud service for AI that rents out GPUs with per-second billing.
Runway AI Video Generation ☆ An AI service specialized in video generation and editing.
Seedream AI Image Generation ☆ An AI model from ByteDance for multilingual image generation and editing.
Sora AI Video Generation ☆ OpenAI's AI model that generates video from text.
Sourcegraph Cody AI Coding Assistants ☆ An AI coding assistant from the code search engine Sourcegraph that understands an entire codebase.
Stable Diffusion AI Image Generation ☆ A leading image-generation AI whose model weights are publicly released.
Suno AI Voice/Music Generation ☆ An AI service that generates songs from text.
Synthesia AI Video Generation ☆ A service that generates videos of an AI avatar speaking, widely used by businesses.
Tabnine AI Coding Assistants ☆ An AI coding-assistance tool that predicts and completes code as you type.
Together AI AI Development Platforms ☆ A cloud inference platform that hosts open-weight LLMs with fast, low-cost serving.
Trae AI Coding Assistants ☆ A free, AI-native integrated development environment from ByteDance.
Udio AI Voice/Music Generation ☆ A music-generation AI service that creates songs from text.
v0 AI Development Platforms ☆ A Vercel service that generates UI and apps from a prompt.
Veo AI Video Generation ☆ Google's AI model that generates video from text.
Vidu AI Video Generation ☆ An AI video generation service developed by Shengshu Technology, a startup founded by Tsinghua University researchers.
Warp AI Coding Assistants ☆ A modern terminal app with built-in AI features.
Weights & Biases AI Development Platforms ☆ An experiment-tracking platform for logging, comparing, and visualizing machine learning training runs.
Whisper AI Voice/Music Generation ☆ A highly accurate speech-recognition AI model released by OpenAI.
Windsurf AI Coding Assistants ☆ An AI-native code editor from Codeium built for collaborating with an AI agent.
Writesonic AI Translation & Writing ☆ An AI writing service with built-in SEO workflows.
You.com AI Search & Research ☆ A search service with built-in AI summarization and conversation.
Zed AI Coding Assistants ☆ A Rust-based code editor built AI-native, known for fast startup and responsiveness.
Access Key IAM ☆ Credentials used to operate AWS programmatically.
ACM Security Services ☆ A service for issuing, renewing, and managing SSL/TLS certificates.
Alarm Monitoring & Operations ☆ A feature that notifies or takes action when a specified threshold is crossed.
Amazon Corretto Other Services ☆ A free, production-ready OpenJDK distribution provided by AWS.
Amazon Kendra AI/ML ☆ An enterprise search service that can answer natural-language questions.
Amazon Lex AI/ML ☆ A service for building conversational interfaces for voice and text.
Amazon Managed Grafana Monitoring & Operations ☆ A fully managed AWS service for the open-source visualization tool Grafana.
Amazon Managed Service for Prometheus Monitoring & Operations ☆ A fully managed service for using open-source Prometheus.
Amazon MSK Other Services ☆ A fully managed AWS service for running Apache Kafka.
Amazon Nova AI/ML ☆ A family of foundation models developed in-house by AWS.
Amazon OpenSearch Service Other Services ☆ A fully managed AWS service for the open-source search and analytics engine, OpenSearch.
Amazon Q Business AI/ML ☆ A generative-AI assistant for business use that answers based on internal company data.
Amazon Q Developer AI/ML ☆ A generative AI assistant from AWS focused on coding support.
AMI Compute ☆ A template, including OS and software, used to launch an EC2 instance.
Amplify Deployment ☆ A full-stack development service for building and deploying both frontend and backend together.
API Gateway Serverless ☆ A service for creating an API endpoint and connecting it to backends such as Lambda.
App Mesh Containers ☆ A service mesh for visualizing and controlling communication between microservices.
App Runner Compute ☆ A service for quickly publishing a containerized web app with no infrastructure management.
AppFlow Other Services ☆ A service for integrating data between SaaS applications and AWS services.
AppSync Other Services ☆ A managed service for building and running a GraphQL API.
Athena Other Services ☆ A service for analyzing data in S3 directly with SQL.
Aurora Database ☆ AWS's own high-performance, relational-database-compatible engine.
Aurora Serverless Database ☆ A serverless version of Aurora that automatically scales database capacity up and down based on load.
Auto Scaling Compute ☆ A mechanism that automatically increases or decreases the number of servers based on load.
Auto Scaling Group Compute ☆ A collection of EC2 instances managed as a unit for auto scaling.
AWS AppConfig Monitoring & Operations ☆ A service for dynamically changing and rolling out an application's configuration without redeploying it.
AWS Backup Storage ☆ A service for centrally managing backups across multiple AWS services.
AWS Fault Injection Simulator Monitoring & Operations ☆ A chaos-engineering service that intentionally injects faults to verify a system's resilience.
AWS Firewall Manager Security Services ☆ A service for centrally managing firewall settings across multiple accounts and resources.
AWS IoT Greengrass Other Services ☆ A service that lets you run a subset of AWS capabilities locally on edge devices.
AWS Local Zones Other Services ☆ AWS infrastructure sites placed in major metro areas that are geographically distant from a parent region.
AWS Network Firewall Security Services ☆ A managed firewall service that performs stateful traffic inspection at the VPC level.
AWS Nitro System Compute ☆ The underlying architecture of EC2 that offloads virtualization overhead onto dedicated hardware.
AWS Resilience Hub Monitoring & Operations ☆ A service for assessing and improving an application's resilience.
AWS Verified Access Security Services ☆ A service that provides zero-trust access to applications without requiring a VPN.
AWS Well-Architected Tool Monitoring & Operations ☆ A free tool for self-assessing a workload against the Well-Architected Framework.
Batch Compute ☆ A service that runs a large number of batch jobs, automatically procuring the compute resources needed.
Bedrock AI/ML ☆ A generative-AI service that provides access to multiple foundation models via API.
Bedrock AgentCore AI/ML ☆ A set of Bedrock capabilities that support safely running AI agents in production.
Billing Alert Cost Management ☆ A mechanism that notifies you when usage charges cross a threshold.
Blue/Green Deployment Deployment ☆ A deployment technique that prepares two environments, old and new, and releases by switching between them.
Bucket Storage ☆ The container used to store objects in S3.
Budgets Cost Management ☆ A service for setting a budget and receiving alerts when it's about to be exceeded.
Canary Release Deployment ☆ A technique for gradually rolling out a new version to only a subset of users.
CDK Deployment ☆ An infrastructure-as-code tool that lets you define infrastructure in a programming language.
Client VPN Networking ☆ A service that lets an individual device connect securely to a VPC over VPN.
Cloud9 Deployment ☆ A cloud-based integrated development environment usable in a browser.
CloudFormation Monitoring & Operations ☆ A service for defining and provisioning infrastructure as code.
CloudFront Networking ☆ AWS's CDN service for delivering content across the world.
CloudFront Functions Serverless ☆ A feature that runs lightweight JavaScript code with ultra-low latency at CloudFront's edge locations.
CloudShell Deployment ☆ A browser-based command-line shell for AWS, available at no additional cost.
CloudTrail Monitoring & Operations ☆ A service that records the history of actions taken within an AWS account.
CloudWatch Monitoring & Operations ☆ A service for collecting and monitoring metrics and logs from AWS resources.
CloudWatch Logs Insights Monitoring & Operations ☆ A feature for interactively analyzing logs accumulated in CloudWatch Logs using queries.
Cluster Containers ☆ A collection of resources that runs containers.
CodeArtifact Deployment ☆ A managed repository service for storing and sharing software packages.
CodeBuild Deployment ☆ A managed service for building and testing source code.
CodeCommit Deployment ☆ A managed Git repository service from AWS.
CodeDeploy Deployment ☆ A service that automates application deployment.
CodePipeline Deployment ☆ A service that automates the flow from build to deployment.
CodeStar Deployment ☆ A service for managing the full set of tools from development through deployment together.
Cognito Security Services ☆ A service providing user authentication and access management for apps.
Cold Start Serverless ☆ The delay incurred the first time a function is invoked after a period of inactivity.
Comprehend AI/ML ☆ An NLP service that performs sentiment analysis and entity extraction on text.
Compute Optimizer Monitoring & Operations ☆ A service that analyzes actual usage and recommends the optimal resource size.
Concurrency Serverless ☆ The upper limit on how many instances of a Lambda function can run at once.
Config Monitoring & Operations ☆ A service that records and evaluates the history of resource configuration changes.
Control Tower Monitoring & Operations ☆ A service for building and managing an entire multi-account AWS environment in a governed way.
Cost and Usage Report Cost Management ☆ A reporting feature that outputs detailed AWS usage and cost data.
Cost Explorer Cost Management ☆ A tool for visualizing and analyzing AWS usage charges.
Cross-Account Access IAM ☆ Accessing a resource in a different AWS account through a role.
Cross-Region Replication Storage ☆ A feature that automatically copies S3 objects to a bucket in a different region.
DAX Database ☆ An in-memory caching service that speeds up DynamoDB reads.
Dedicated Host Compute ☆ An EC2 arrangement where you get exclusive use of an entire physical server.
Detective Security Services ☆ A service for investigating the root cause of a security issue based on related data.
Direct Connect Networking ☆ A service for connecting to AWS over a dedicated line, bypassing the internet.
Directory Service Security Services ☆ A service providing Active Directory as a managed offering.
DMS Other Services ☆ A service for migrating data between different databases.
DocumentDB Database ☆ A MongoDB-compatible, document-oriented database service.
DynamoDB Database ☆ AWS's fast, scalable NoSQL database.
DynamoDB Streams Database ☆ A feature that captures a time-ordered sequence of changes (inserts, updates, deletes) made to a DynamoDB table.
EBS Compute ☆ Persistent block storage attached to an EC2 instance.
EC2 Compute ☆ AWS's flagship service for spinning up as many virtual servers as needed.
EC2 Image Builder Deployment ☆ A service that automates the pipeline for creating, testing, and distributing AMIs (machine images).
ECR Containers ☆ AWS's registry service for storing and managing container images.
ECS Containers ☆ AWS's own container-orchestration service.
EFS Storage ☆ Shared file storage that can be mounted from multiple EC2 instances at once.
EKS Containers ☆ AWS's managed Kubernetes service.
Elastic Beanstalk Deployment ☆ A service that automates infrastructure provisioning just from your application code.
Elastic IP Compute ☆ A fixed global IP address you can keep using.
Elastic Load Balancing Networking ☆ AWS's load-balancing service for distributing traffic across multiple EC2 instances and more.
ElastiCache Database ☆ A caching service that provides managed Redis and Memcached.
EMR Other Services ☆ A service that provides big-data processing platforms such as Hadoop and Spark as a managed offering.
ENI (Elastic Network Interface) Networking ☆ A virtual network interface card used within a VPC.
EventBridge Serverless ☆ An integration service that triggers another service in response to an event from inside or outside AWS.
Event-Driven Serverless ☆ A design philosophy where processing is triggered by some occurrence (an event).
Fargate Containers ☆ A service for running containers with no server management required.
Federation IAM ☆ A mechanism that lets an external identity provider's credentials be used to access AWS resources.
Forecast AI/ML ☆ A service for time-series forecasting, such as demand forecasting, based on historical data.
Free Tier Cost Management ☆ A perk for new AWS customers that lets them use a certain amount for free.
FSx Storage ☆ A service providing purpose-built file systems, such as for Windows or Lustre.
Global Accelerator Networking ☆ A service that uses AWS's global network to optimize the path to an application.
Global Database Database ☆ An Aurora feature that performs low-latency replication across multiple regions.
Glue Other Services ☆ A managed service for extracting, transforming, and loading data (ETL).
GuardDuty Security Services ☆ A threat-detection service that analyzes logs to detect signs of malicious activity.
Hibernation Compute ☆ A feature for stopping and resuming an EC2 instance while preserving its memory state.
IAM IAM ☆ The mechanism for managing access permissions that users and services have on AWS resources.
IAM Group IAM ☆ A unit for managing permissions across multiple IAM users together.
IAM Identity Center IAM ☆ A service for centrally managing single sign-on across multiple AWS accounts.
IAM Policy IAM ☆ A rule document that defines which actions are allowed or denied.
IAM Role IAM ☆ A bundle of permissions granted to a service or a temporary user.
IAM User IAM ☆ An individual account that logs into AWS and operates it.
Infrastructure as Code Deployment ☆ The idea (IaC) of defining and managing infrastructure configuration as code.
Inspector Security Services ☆ A service that automatically scans EC2 instances and containers for vulnerabilities.
Instance Type Compute ☆ The EC2 spec category that determines a performance configuration, such as CPU and memory.
Intelligent-Tiering Storage ☆ A feature that automatically optimizes an S3 object's storage class based on access frequency.
Internet Gateway Networking ☆ The gateway connecting a VPC to the internet.
IoT Core Other Services ☆ A service for securely connecting a large number of IoT devices to AWS services.
Karpenter Containers ☆ An open-source autoscaler for EKS that adds and removes nodes (EC2 instances) quickly and flexibly.
Key Pair Compute ☆ A public/private key pair for connecting to EC2 securely over SSH.
Kinesis Other Services ☆ A service for processing large volumes of streaming data in real time.
KMS Other Services ☆ A service for creating and managing keys used for encryption.
Lambda Serverless ☆ AWS's service for running just your code, with no server to manage.
Lambda Extensions Serverless ☆ A mechanism for adding capabilities such as monitoring or log forwarding to a Lambda's execution environment.
Lambda@Edge Serverless ☆ A feature that lets you run Lambda functions at CloudFront's edge locations.
Launch Template Compute ☆ A template that predefines the launch configuration for an EC2 instance.
Layers Serverless ☆ A mechanism for sharing common libraries across Lambda functions.
Lifecycle Policy Storage ☆ A feature for setting rules that automatically archive or delete data after a set period.
Lightsail Compute ☆ A small-scale virtual server service with simplified pricing and settings.
Macie Security Services ☆ A service that uses machine learning to detect sensitive data within S3.
MediaConvert Other Services ☆ A file-based service for converting video files into various formats.
MemoryDB Database ☆ A Redis-compatible, in-memory database service that also offers durability.
Metrics Monitoring & Operations ☆ Time-series measurement data, such as CPU utilization.
MFA IAM ☆ Multi-factor authentication that verifies identity with an additional factor beyond a password.
MQ Other Services ☆ A service providing existing message brokers, such as ActiveMQ, as a managed offering.
Multi-AZ Database ☆ A configuration that makes a database redundant across multiple data centers.
Multipart Upload Storage ☆ A mechanism for splitting a large file and uploading the parts in parallel.
NAT Gateway Networking ☆ An egress point for a private subnet to communicate with the outside securely.
Neptune Database ☆ A managed service for working with a graph database.
Network ACL Networking ☆ A virtual firewall that controls traffic on a per-subnet basis.
Object Storage Storage ☆ A storage format that treats files as objects with attached metadata.
On-Demand Capacity Reservation Compute ☆ A feature that lets you reserve launch capacity in advance for a specified instance type in a particular Availability Zone.
Organizations Other Services ☆ A service for managing multiple AWS accounts together.
Outposts Compute ☆ A service that brings AWS infrastructure directly into an on-premises environment.
Parameter Group Database ☆ A mechanism for managing RDS database-engine settings together.
Parameter Store Other Services ☆ A service for managing configuration values and secrets in a hierarchical structure.
Pay-as-You-Go Cost Management ☆ A billing model where charges accrue only for what you use.
Personalize AI/ML ☆ A service for delivering recommendations personalized per user.
Placement Group Compute ☆ A setting that controls the physical placement of instances to improve performance or availability.
Polly AI/ML ☆ A service that converts text into natural-sounding speech.
Presigned URL Storage ☆ A URL that grants temporary access for a limited time.
Principle of Least Privilege IAM ☆ The idea that only the minimum permission necessary for a task should be granted.
Private Subnet Networking ☆ A subnet configured so it can't be reached directly from the internet.
PrivateLink Networking ☆ A mechanism for securely connecting between VPCs or to a service without going over the internet.
Provisioned Concurrency Serverless ☆ A setting that pre-initializes a Lambda function to prevent a cold start.
Public Subnet Networking ☆ A subnet that can communicate externally through an internet gateway.
QLDB Database ☆ A ledger-style database service capable of tamper detection.
QuickSight Other Services ☆ A BI service for visualizing data and sharing it as a dashboard.
RDS Database ☆ A service providing major relational databases such as MySQL as a managed offering.
RDS Proxy Database ☆ A service that pools database connections to reduce load under heavy access.
Read Replica Database ☆ A mechanism that creates a read-only copy of a database to spread load.
Redshift Database ☆ AWS's data-warehouse service for large-scale data analytics.
Rekognition AI/ML ☆ An AI service that recognizes objects, faces, and more in images and video.
Reserved Instances Compute ☆ An EC2 purchase option contracted at a discounted price on the assumption of long-term use.
Resource-Based Policy IAM ☆ A policy that sets access permissions on a resource, such as an S3 bucket, rather than on an IAM user.
Rollback Deployment ☆ Reverting to the pre-change state when a problem occurs.
Route 53 Networking ☆ AWS's DNS service.
Route Table Networking ☆ A routing table defining where a subnet's traffic is forwarded.
S3 Storage ☆ AWS's object storage service, letting you store files with no capacity limit.
S3 Glacier Storage ☆ Low-cost, long-term storage for infrequently accessed data.
S3 Object Lock Storage ☆ A feature that locks S3 objects so they cannot be overwritten or deleted for a set period, or indefinitely.
S3 Select Storage ☆ A feature that lets you filter the contents of an S3 object directly using an SQL-like query.
S3 Transfer Acceleration Storage ☆ A feature that speeds up transfers to S3 by routing through CloudFront edge locations.
SageMaker AI/ML ☆ A service for building, training, and deploying machine-learning models end-to-end.
SAM Serverless ☆ A framework that simplifies building and deploying serverless applications.
Savings Plans Cost Management ☆ A pricing plan that gives a discount in exchange for committing to a certain amount of usage.
SCP (Service Control Policy) IAM ☆ A policy that restricts, organization-wide, which services and actions the accounts under AWS Organizations are allowed to use.
Secrets Manager Other Services ☆ A service for securely managing secrets such as passwords.
Security Group Compute ☆ An instance-level virtual firewall applied to EC2 and similar resources.
Security Hub Security Services ☆ A service for centrally aggregating and reviewing findings from multiple security services.
Service Catalog Monitoring & Operations ☆ A mechanism for cataloging approved IT services and offering them to users.
Service Discovery Containers ☆ A mechanism for automatically finding the location of containers that change dynamically.
Service Role IAM ☆ An IAM role assumed by an AWS service itself to operate other resources.
SES Other Services ☆ A managed AWS service for sending and receiving email from applications.
Shield Security Services ☆ A service that protects resources from DDoS attacks.
Sidecar Container Containers ☆ An auxiliary container placed in the same task alongside the main one, to support it.
Snowball Storage ☆ A service that stores large volumes of data on a physical device and ships it to AWS to migrate it.
SNS Other Services ☆ A service for delivering notification messages to multiple destinations.
Spot Fleet Compute ☆ A feature that combines multiple Spot Instances (and optionally On-Demand Instances) to maintain a target amount of compute capacity.
Spot Instance Compute ☆ An EC2 purchase option that's cheap because it uses spare capacity, but can be interrupted.
SQS Other Services ☆ A queuing service for exchanging work asynchronously.
Step Functions Serverless ☆ A service for executing multiple steps in order as a workflow.
Storage Class Storage ☆ An S3 storage tier chosen based on access frequency and cost.
Storage Gateway Storage ☆ A service for connecting an on-premises environment seamlessly to AWS storage.
STS IAM ☆ AWS's service for issuing temporary credentials.
Subnet Networking ☆ A network segment that further divides a VPC.
Systems Manager Monitoring & Operations ☆ A service for centralizing the operational management of EC2 and more.
Tag Monitoring & Operations ☆ A named label attached to a resource, used for organization and cost reporting.
Task Definition Containers ☆ A template describing the configuration of containers to run in ECS.
Task Role Containers ☆ An IAM role attached to an ECS/Fargate task that grants access to other AWS resources.
Timestream Database ☆ A database service specialized for storing and analyzing time-series data.
Transcribe AI/ML ☆ A speech-recognition service that converts audio to text.
Transit Gateway Networking ☆ A service that interconnects multiple VPCs and on-premises sites through a single hub.
Translate AI/ML ☆ A service that automatically translates text into another language.
Trust Policy IAM ☆ A policy that defines who is allowed to assume an IAM role.
Trusted Advisor Monitoring & Operations ☆ A service that suggests improvements to your environment from perspectives such as cost and security.
User Data Compute ☆ An initialization script that runs automatically when an EC2 instance launches.
Versioning Storage ☆ A feature that retains an object's update history so an earlier version can be restored.
VPC Networking ☆ A service for building your own private virtual network space on AWS.
VPC Endpoint Networking ☆ A mechanism for accessing an AWS service directly from within a VPC, without going over the internet.
VPC Flow Logs Networking ☆ A feature that records information about the IP traffic going into and out of a VPC.
VPC Peering Networking ☆ A feature for connecting different VPCs directly and privately.
VPN Gateway Networking ☆ The AWS-side gateway for connecting a VPC to an on-premises environment via VPN.
WAF Other Services ☆ AWS's firewall service that protects applications from web attacks.
Well-Architected Framework Cost Management ☆ AWS's set of best practices for good architectural design.
WorkSpaces Other Services ☆ A service that provides a virtual desktop environment in the cloud.
X-Ray Monitoring & Operations ☆ A service for visualizing the flow of requests through a distributed system.
Access Tier Storage ☆ A cost tier for Blob Storage, chosen based on access frequency.
AKS Compute ☆ Azure's managed Kubernetes service.
API Management Other Services ☆ A service that handles publishing, authenticating, and tracking usage of APIs in one place.
App Service Compute ☆ A managed service for easily deploying and running web apps.
Application Gateway Networking ☆ An L7 load balancer that handles URL-based routing and more.
Application Insights Operations Management ☆ An Azure Monitor feature for application performance monitoring (APM).
Application Security Groups Networking ☆ A feature that groups VMs according to their role, letting you write simpler Network Security Group rules.
ARM Template Operations Management ☆ An IaC mechanism for defining Azure resource configuration in JSON.
Automatic Tuning Database ☆ A feature that automatically analyzes and optimizes query performance.
Availability Set Compute ☆ A VM grouping configuration that spreads the impact of hardware failure.
Availability Zone Compute ☆ A mechanism that physically separates data centers to increase fault tolerance.
Azure AD B2C Identity Management ☆ An identity service that provides user authentication for consumer-facing apps.
Azure Advisor Operations Management ☆ A feature that suggests cost and performance improvements.
Azure AI Document Intelligence AI/ML ☆ An AI service that automatically extracts text and data from documents.
Azure AI Language AI/ML ☆ A natural-language-processing service for text analysis, translation, and more.
Azure AI Search AI/ML ☆ A search service combining vector search and keyword search, built for AI use cases.
Azure AI Speech AI/ML ☆ An AI service that provides speech recognition and speech synthesis.
Azure AI Vision AI/ML ☆ An AI service that provides image analysis and recognition.
Azure API Center Other Services ☆ A service for centrally cataloging and governing APIs scattered across an organization.
Azure App Configuration Other Services ☆ An Azure service for centrally managing an application's configuration values and feature flags.
Azure Arc Compute ☆ A service that brings on-premises and other-cloud resources under Azure management.
Azure Automation Operations Management ☆ A service for automating routine operational tasks.
Azure Backup Other Services ☆ A service that automates backups of VMs and data.
Azure Bastion Other Services ☆ A bastion service for securely connecting to VMs without a public IP.
Azure Batch Compute ☆ An Azure service that runs large numbers of parallel jobs using an automatically scaled pool of virtual machines.
Azure Blueprints Operations Management ☆ A mechanism for templating resource configuration and policy for repeated deployment.
Azure Cache for Redis Database ☆ A caching service that provides managed Redis.
Azure CDN Networking ☆ A content delivery service using Microsoft's global network.
Azure Chaos Studio Operations Management ☆ A chaos-engineering service that intentionally injects faults to verify a system's resilience.
Azure Communication Services Other Services ☆ An API service for embedding voice/video calling and chat features into an app.
Azure Compute Gallery Compute ☆ An Azure service for centrally managing and sharing customized VM images across an organization.
Azure Confidential Computing Compute ☆ Technology that keeps data encrypted and protected even while it's being processed (in use, in memory).
Azure Container Registry Other Services ☆ A private registry service for storing and managing container images.
Azure Copilot Operations Management ☆ An agentic interface for Azure where AI assists with cloud operations.
Azure Data Box Storage ☆ A service that ships physical storage appliances for transferring large amounts of data offline.
Azure Data Explorer Analytics & Data Integration ☆ A large-scale data-analytics service for quickly analyzing logs and time-series data.
Azure Database for MySQL Database ☆ A database service that provides MySQL as a managed service.
Azure Database for PostgreSQL Database ☆ A database service that provides PostgreSQL as a managed service.
Azure Databricks Analytics & Data Integration ☆ A service that brings an Apache Spark-based analytics platform to Azure.
Azure Deployment Environments Other Services ☆ A service that lets developers self-service provision environments for testing and development.
Azure DevOps Operations Management ☆ An integrated service supporting everything from planning and development to CI/CD.
Azure DNS Networking ☆ Azure's managed DNS service.
Azure DocumentDB Database ☆ A fully managed NoSQL database designed for vector search and RAG workloads.
Azure Elastic SAN Storage ☆ A service that provides a SAN (storage area network) equivalent environment in the cloud.
Azure Files Storage ☆ A managed file-share service accessible over the SMB protocol.
Azure Firewall Other Services ☆ A managed firewall service that protects an entire VNet.
Azure Front Door Networking ☆ A delivery service combining global load balancing and a CDN.
Azure Functions Compute ☆ Azure's serverless function-execution service.
Azure Key Vault Other Services ☆ A service for securely managing secrets such as certificates and passwords.
Azure Kubernetes Fleet Manager Compute ☆ A service for centrally managing multiple AKS clusters as a single unit.
Azure Lighthouse Identity Management ☆ A mechanism for managing multiple customer tenants from a single view.
Azure Load Balancer Networking ☆ A load balancer that distributes traffic across multiple VMs.
Azure Load Testing Operations Management ☆ A service for running application load tests in the cloud.
Azure Local Compute ☆ A hybrid cloud platform that brings the same Azure management experience into your own data center.
Azure Machine Learning AI/ML ☆ A service for building, training, and deploying machine-learning models.
Azure Managed Grafana Operations Management ☆ A fully managed Azure service for the open-source visualization tool Grafana.
Azure Managed HSM Other Services ☆ A fully managed Azure service that generates and stores encryption keys using dedicated hardware (an HSM).
Azure Migrate Operations Management ☆ A service that supports the whole journey from assessing an on-premises environment to migrating it to Azure.
Azure Monitor Operations Management ☆ A service for collecting and monitoring metrics and logs from Azure resources.
Azure NetApp Files Storage ☆ A high-performance file share service built on NetApp's technology.
Azure OpenAI Service Other Services ☆ A service that lets you securely use OpenAI's models on Azure.
Azure Policy Operations Management ☆ A mechanism for enforcing and auditing settings that comply with organizational rules.
Azure Private Link Networking ☆ A mechanism for exposing your own service so it can be reached privately from other virtual networks.
Azure Resource Manager Operations Management ☆ The management layer that centrally handles operations like creating, updating, and deleting resources in Azure.
Azure Site Recovery Operations Management ☆ An Azure service for disaster recovery of on-premises servers and VMs.
Azure Spring Apps Compute ☆ A fully managed Azure service for hosting Spring Boot applications.
Azure SQL Database Database ☆ A managed relational database built on SQL Server.
Azure SQL Managed Instance Database ☆ A managed database service with compatibility close to an on-premises SQL Server.
Azure Static Web Apps Compute ☆ A frontend-focused service for hosting a static site and its API together.
Azure Virtual Desktop Compute ☆ An Azure service for virtualizing and delivering a Windows desktop environment from the cloud.
Azure Virtual WAN Networking ☆ A managed wide-area networking service that centrally manages branch, VPN, and ExpressRoute connections in a hub-and-spoke topology.
Azure Web PubSub Other Services ☆ A fully managed Azure service for real-time communication using WebSockets.
Azure Well-Architected Framework Operations Management ☆ A set of best practices for reviewing an Azure design from multiple angles, including reliability, security, and cost optimization.
Bicep Operations Management ☆ A language that makes ARM templates easier to write concisely.
Blob Storage Storage ☆ Azure's object storage for unstructured data.
Bot Service AI/ML ☆ A service for building and publishing conversational chatbots.
Conditional Access Identity Management ☆ A feature that controls access based on conditions such as location and device.
Container Apps Other Services ☆ A service for running containerized apps without dealing with Kubernetes details.
Container Instances Compute ☆ A service for quickly launching containers without server management.
Cosmos DB Database ☆ Azure's multi-model NoSQL database with global distribution.
Cost Management Operations Management ☆ A feature for visualizing and analyzing Azure usage charges.
Custom Role Identity Management ☆ A custom-defined access-permission role, used when the built-in roles aren't sufficient.
Data Factory Analytics & Data Integration ☆ A service for building data-integration and transformation pipelines across various data sources.
Data Lake Storage Storage ☆ Storage for analytics that can accumulate large volumes of data in any format.
DDoS Protection Networking ☆ A service that protects resources from large-scale DDoS attacks.
Dedicated Host Compute ☆ A VM arrangement where you get exclusive use of a specific physical server.
Disk Storage Storage ☆ Block storage attached to a virtual machine.
Elastic Pool Database ☆ A mechanism for sharing resources across multiple databases to optimize cost.
Ephemeral OS Disk Compute ☆ A temporary OS disk created on the host machine that resets to its initial state on reboot.
Event Grid Other Services ☆ A mechanism that detects events and notifies other services.
ExpressRoute Networking ☆ A service for connecting to Azure over a dedicated line, bypassing the internet.
Failover Group Database ☆ A configuration that automatically switches over to a secondary on failure.
Geo-Redundant Storage Storage ☆ A redundancy option that also replicates data to a data center in a distant region.
Hierarchical Namespace Storage ☆ A setting that adds folder-based directory management to Blob Storage.
Lifecycle Management Storage ☆ A feature for setting rules that automatically move or delete data to another tier after a set period.
Locally Redundant Storage Storage ☆ A basic redundancy option that keeps replicas within the same data center.
Log Analytics Operations Management ☆ A service for analyzing collected logs with queries.
Logic Apps Other Services ☆ A service for building workflows that combine multiple services.
Managed Disk Compute ☆ A disk offering where storage management is handled by Azure.
Managed Identity Identity Management ☆ A mechanism for securely accessing Azure resources without managing credentials.
Microsoft Defender for Cloud Security ☆ A service that assesses the security posture of a cloud environment and detects threats.
Microsoft Entra ID Identity Management ☆ The identity foundation for Azure user and access management (formerly Azure AD).
Microsoft Fabric Analytics & Data Integration ☆ A data platform that unifies data integration, analytics, and BI in one place.
Microsoft Foundry AI/ML ☆ Formerly Azure AI Foundry, a platform for developing, evaluating, and operating generative-AI apps in one place.
Microsoft Sentinel Security ☆ A cloud-native SIEM/SOAR service.
NAT Gateway Networking ☆ An egress service that lets private resources reach the internet securely.
Network Security Group Networking ☆ A virtual firewall that controls traffic per subnet or NIC.
Notification Hubs Other Services ☆ A service for delivering push notifications to multiple platforms.
Power BI Analytics & Data Integration ☆ A business intelligence tool from Microsoft known for building interactive dashboards.
Private Endpoint Networking ☆ A mechanism for connecting privately to a PaaS service from a closed network.
Privileged Identity Management Identity Management ☆ A mechanism for temporarily activating administrative privileges only when needed.
Purview Analytics & Data Integration ☆ A data-governance service that gives visibility and control over data across an organization.
Queue Storage Storage ☆ A queue service for exchanging messages asynchronously.
RBAC Identity Management ☆ A mechanism for assigning permissions on resources based on roles.
Region Pair Operations Management ☆ Two Azure regions that are predetermined to be paired together for data redundancy and disaster recovery.
Reserved Instances Compute ☆ A VM purchase option contracted at a discounted price on the assumption of long-term use.
Resource Group Identity Management ☆ A container for managing related resources together.
Resource Lock Operations Management ☆ A protection feature that prevents important resources from being accidentally deleted or changed.
Service Bus Other Services ☆ A service for exchanging messages asynchronously between applications.
Service Health Operations Management ☆ A feature for checking Azure-side outages and maintenance information.
Service Principal Identity Management ☆ An identity applications use to access Azure resources.
Service Tags Networking ☆ Named groups that represent the range of IP addresses used by a specific Azure service.
Shared Access Signature Storage ☆ A time-limited token that grants scoped access (SAS).
SignalR Service Other Services ☆ A service for embedding real-time, bidirectional communication into an app.
Spot VM Compute ☆ A VM that uses spare capacity cheaply but can be interrupted.
Storage Account Storage ☆ The Azure management unit that groups together various storage services.
Stream Analytics Analytics & Data Integration ☆ A service for processing and analyzing data as it streams in real time.
Subscription Identity Management ☆ The Azure contract unit used for billing and resource management.
Synapse Analytics Analytics & Data Integration ☆ An analytics service unifying data warehousing and big-data analytics.
Table Storage Storage ☆ NoSQL storage for storing structured data as key-value pairs.
Tenant Identity Management ☆ The unit of directory and identity management dedicated to an organization.
Traffic Manager Networking ☆ A DNS-based service for distributing traffic across multiple regions.
Update Management Operations Management ☆ A feature for centrally managing OS updates across a fleet of servers.
Virtual Machines Compute ☆ Azure's virtual server service.
Virtual Network Networking ☆ A virtual, private network space built on Azure.
VM Scale Set Compute ☆ A mechanism that automatically scales a group of identically configured VMs in and out.
VNet Peering Networking ☆ A feature that connects separate virtual networks so they can communicate with each other.
VPN Gateway Networking ☆ A gateway that securely connects an on-premises environment to Azure.
ACID Properties Transactions ☆ The umbrella name for the four properties a transaction should satisfy.
Apache Iceberg Analytics Platforms ☆ An open table format that lets you work with huge data-lake tables the way you would a relational database.
AVG Function SQL ☆ An aggregate function that computes the average of a column's values.
Backup Operations Management ☆ Keeping a separate copy of data stored elsewhere.
BASE Properties NoSQL ☆ A NoSQL design philosophy that prioritizes always being responsive and eventually reaching consistency.
BETWEEN Operator SQL ☆ An operator that checks whether a value falls within a specified range.
B-Tree Index Performance ☆ A tree-structured indexing method adopted as the default in most relational databases.
Buffer Pool Performance ☆ A region that caches disk data in memory to speed up access.
Cache-Aside Performance ☆ A caching pattern where the application reads from and writes to the cache and the database separately.
Candidate Key RDBMS Fundamentals ☆ A column (or set of columns) that can uniquely identify a row and could serve as the primary key.
CAP Theorem NoSQL ☆ The theory that consistency, availability, and partition tolerance can't all be satisfied at once.
CASE Expression SQL ☆ Conditional logic usable within SQL that returns different values based on conditions.
Cassandra Major Products ☆ A column-oriented NoSQL database that manages large-scale data in a distributed fashion.
CDC (Change Data Capture) Analytics Platforms ☆ A mechanism for detecting database changes in real time and relaying them to other systems.
CHECK Constraint RDBMS Fundamentals ☆ A constraint that guarantees a column's value satisfies a specified condition.
ClickHouse Major Products ☆ A column-oriented analytics database strong at aggregating large volumes of data.
Clustered Index Performance ☆ An indexing method that keeps the physical order of the stored data aligned with the index's own ordering.
CockroachDB Major Products ☆ A SQL-compatible distributed database strong at spreading across multiple locations.
Column-Oriented Database NoSQL ☆ A database that stores data by column, strong at aggregate processing.
Commit Transactions ☆ The operation that finalizes a transaction's changes.
Composite Index Performance ☆ An index built from a combination of multiple columns.
Composite Key RDBMS Fundamentals ☆ A primary key formed by combining multiple columns.
Connection Leak Performance ☆ A bug where an acquired database connection is not properly released, gradually exhausting the connection pool.
Connection Pool Performance ☆ A mechanism that pre-establishes multiple DB connections and reuses them.
Constraint RDBMS Fundamentals ☆ A rule set to keep data consistent.
COUNT Function SQL ☆ An aggregate function that counts rows.
Covering Index Performance ☆ An index containing every column a query needs, avoiding a read of the underlying table.
CTE SQL ☆ A common table expression usable within a query under a temporary name.
Data Lake Analytics Platforms ☆ A repository that stores raw data as-is, regardless of format.
Data Mart Analytics Platforms ☆ A small-scale data platform tailored to a specific department or use case.
Data Warehouse Analytics Platforms ☆ A mechanism for consolidating and accumulating large volumes of data for analysis.
DB2 Major Products ☆ A commercial RDBMS from IBM, also used on mainframes.
DDL (Data Definition Language) SQL ☆ A general term for the SQL statements that define or change the structure of a database itself, such as tables and indexes.
Deadlock Transactions ☆ A state where multiple processes wait on each other's locks and none can proceed.
DELETE Statement SQL ☆ A SQL statement for deleting data.
Denormalization RDBMS Fundamentals ☆ A design technique that deliberately combines normalized tables, tolerating duplicate data to avoid the need for joins.
Differential Backup Operations Management ☆ A backup method that captures only what changed since the most recent full backup.
Dimension Table Analytics Platforms ☆ A table holding attribute information, such as dates or product names, that serves as an angle for analysis.
Dirty Read Transactions ☆ A phenomenon where a transaction reads changes made by another transaction that hasn't been committed yet.
DISTINCT SQL ☆ A qualifier that retrieves results with duplicate rows removed.
Distributed Transaction Transactions ☆ A mechanism for treating an operation that spans multiple databases or services as a single atomic unit.
Document-Oriented Database NoSQL ☆ A kind of NoSQL database that stores data in a JSON-like structure.
DuckDB Major Products ☆ An embeddable, column-oriented database specialized for analytics.
Elasticsearch Major Products ☆ An engine for fast full-text search and analysis over large volumes of data.
ELT Analytics Platforms ☆ A data-integration approach that loads data first and transforms it inside the database.
ER Diagram RDBMS Fundamentals ☆ A diagram representing the relationships between tables.
ETL Analytics Platforms ☆ A pipeline that extracts, transforms, and loads data.
Eventual Consistency NoSQL ☆ A consistency model that tolerates a temporary gap until an update reaches every node.
Exclusive Lock Transactions ☆ A lock that prevents other processes from accessing something at the same time.
Execution Plan Performance ☆ A plan showing how SQL will be executed.
EXISTS Operator SQL ☆ An operator that checks only whether one or more rows exist in the result of a subquery.
Fact Table Analytics Platforms ☆ A table holding the numeric data being analyzed, such as sales or counts.
Foreign Key RDBMS Fundamentals ☆ A field that references another table's primary key, representing a relationship between tables.
Full Backup Operations Management ☆ A backup method that captures the entire database in one go.
FULL OUTER JOIN SQL ☆ A JOIN that keeps all rows from both tables, including the parts that don't match.
Full Scan Performance ☆ Scanning every row without using an index.
Full-Text Search Index Performance ☆ An index that treats words within text as searchable, enabling fast keyword search.
Graph Database NoSQL ☆ A database well suited to representing and querying connections between data.
Greenplum Major Products ☆ An open-source MPP analytics database built on top of PostgreSQL.
GROUP BY SQL ☆ A clause that groups data by specified fields.
Hash Index Performance ☆ An index specialized for exact-match lookups, using a value produced by running the search key through a hash function.
Hash Join Performance ☆ A JOIN execution method that builds a hash table from the join key and uses it to quickly find matching rows.
HAVING Clause SQL ☆ A clause that filters grouped results.
HBase Major Products ☆ A distributed, wide-column NoSQL database for large-scale data that runs on top of HDFS.
Hot Standby Operations Management ☆ A standby system kept running at all times, ready to switch over the moment there's a failure.
HTAP Analytics Platforms ☆ An approach that handles both transactional and analytical processing within a single database.
Idempotency Transactions ☆ The property where performing the same operation multiple times produces the same result as performing it once.
IN Operator SQL ☆ An operator that checks whether a value matches any item in a specified list.
Incremental Backup Operations Management ☆ A backup method that captures only what changed since the previous backup.
Index Performance ☆ A table-of-contents-like data structure created to speed up searches.
InfluxDB Major Products ☆ A database specialized for recording and analyzing time-series data.
INNER JOIN SQL ☆ A join method that combines only the data matching on both sides.
INSERT Statement SQL ☆ A SQL statement for adding new data.
Isolation Level Transactions ☆ The degree to which concurrent transactions can affect one another.
JOIN SQL ☆ An operation that associates and combines multiple tables.
Key-Value Store NoSQL ☆ A simple NoSQL store that saves data as key-value pairs.
Lakehouse Analytics Platforms ☆ A platform combining a data lake's flexibility with a data warehouse's management features.
LEFT JOIN SQL ☆ A JOIN based on the left table that fills unmatched rows with NULL.
LIKE Operator SQL ☆ An operator for searching strings by partial or prefix match, among others.
LIMIT Clause SQL ☆ A clause that limits the number of result rows returned.
MariaDB Major Products ☆ A highly compatible RDBMS developed as a fork of MySQL.
Master-Slave Configuration Operations Management ☆ A configuration that consolidates writes onto one node and propagates them to replicas.
Materialized View Analytics Platforms ☆ A view that stores a query's result as an actual copy, letting it be read back quickly.
Migration Operations Management ☆ Moving a schema or data to another environment or version.
Milvus Major Products ☆ An open-source vector database specialized for searching large-scale embedding vectors.
MongoDB Major Products ☆ A leading document-oriented NoSQL database that handles data in a JSON-like format.
MVCC Transactions ☆ A mechanism that shows readers a different version of data being updated, to reduce contention.
MySQL Major Products ☆ The most widely used open-source RDBMS in the world.
N+1 Problem Performance ☆ An inefficient state where a query that could be batched is instead issued repeatedly.
Neo4j Major Products ☆ A graph database specialized for handling connections between data.
Nested Loop Join Performance ☆ A JOIN execution method that, for each row in one table, scans through the other table looking for matching rows.
Non-Clustered Index Performance ☆ An indexing method that keeps a separate sort order and pointers to the data, independent of the data's physical storage order.
Non-Repeatable Read Transactions ☆ A phenomenon where reading the same row twice within one transaction returns different content because another transaction updated it in between.
Normalization RDBMS Fundamentals ☆ Organizing table structure to reduce data duplication and inconsistency.
NoSQL NoSQL ☆ An umbrella term for databases handling a variety of data models other than the relational one.
NOT NULL Constraint RDBMS Fundamentals ☆ A constraint that disallows NULL in a specified column.
OLAP Analytics Platforms ☆ A processing style for aggregating and analyzing data multidimensionally.
OLTP Analytics Platforms ☆ A processing style that handles a high volume of small data operations, such as day-to-day transactions.
Optimistic Locking Transactions ☆ A locking approach that checks for consistency only at update time, assuming conflicts are rare.
Oracle Database Major Products ☆ A leading commercial RDBMS widely used in the enterprise space.
ORDER BY SQL ☆ A clause that sorts results by a specified field.
OUTER JOIN SQL ☆ A join method that includes data even when it doesn't match.
Parquet Analytics Platforms ☆ An open, column-oriented data file format optimized for analytics.
Partition Key NoSQL ☆ The key that determines which node data is placed on.
Partition Pruning Performance ☆ An optimization that automatically excludes partitions from a search when a query's conditions show they can't contain relevant data.
Partitioning Performance ☆ Splitting one large table into multiple physical units for management.
Pessimistic Locking Transactions ☆ A locking approach that acquires a lock up front, assuming a conflict will occur.
Phantom Read Transactions ☆ A phenomenon where running the same query twice within one transaction returns a different number of rows because another transaction committed in between.
Pinecone Major Products ☆ A leading managed vector-database service, used in AI applications such as RAG.
Point-in-Time Recovery Operations Management ☆ A feature for restoring data to its state at any given point in time.
PostgreSQL Major Products ☆ A feature-rich, highly extensible open-source RDBMS.
Primary Key RDBMS Fundamentals ☆ A field for uniquely identifying a row within a table.
Qdrant Major Products ☆ An open-source vector database specialized for fast similarity search.
Query Optimizer Performance ☆ The internal database component that determines the most efficient way to actually execute a SQL statement and builds its execution plan.
Query Tuning Performance ☆ The work of improving how efficiently SQL executes.
Redis Major Products ☆ A fast key-value data store that handles data in memory.
Referential Integrity RDBMS Fundamentals ☆ A constraint that guarantees the data a foreign key points to always exists.
Relational Database RDBMS Fundamentals ☆ A database that manages data in tables and links them through relationships.
Replication NoSQL ☆ A mechanism that copies data to multiple locations to increase availability.
Replication Lag Operations Management ☆ The time gap between when the master and a replica reflect data.
Restore Operations Management ☆ Restoring data from a backup.
RIGHT JOIN SQL ☆ A JOIN based on the right table that fills unmatched rows with NULL.
RocksDB Major Products ☆ An embedded key-value store designed for high-performance reads and writes.
Rollback Transactions ☆ An operation that cancels a transaction and reverts to its pre-execution state.
Row Level Security RDBMS Fundamentals ☆ A feature that controls access to a table with fine-grained control down to the individual row.
Row-Level Locking Transactions ☆ A locking method that locks only the rows being updated, rather than the whole table.
Row-Oriented Database RDBMS Fundamentals ☆ The traditional database storage approach that stores data grouped together by row (record).
Savepoint Transactions ☆ A marker set partway through a transaction that lets you partially roll back to it.
Schema RDBMS Fundamentals ☆ A definition of a database's structure (tables and fields).
Schemaless NoSQL ☆ The property of being able to store data without defining a strict structure up front.
Schema-on-Read Analytics Platforms ☆ A design approach where the schema is applied at read time rather than at write time.
ScyllaDB Major Products ☆ A Cassandra-compatible database built to deliver higher performance.
Secondary Index NoSQL ☆ An additional index that enables efficient searching on columns other than the primary key.
SELECT Statement SQL ☆ A SQL statement for retrieving data from a database.
Sharding NoSQL ☆ A mechanism for distributing data across multiple servers.
Shared Lock Transactions ☆ A lock that allows multiple readers but restricts writing.
SingleStore Major Products ☆ A database for real-time analytics that handles both OLTP and OLAP in a single system.
Slow Query Log Performance ☆ A log that records queries that took a long time to execute.
Snapshot Isolation Transactions ☆ An isolation level that guarantees the view of data as it stood when a transaction began.
Snowflake Schema Analytics Platforms ☆ A design that further normalizes the dimension tables of a star schema.
Sort Key NoSQL ☆ A key that determines the order data is stored in within the same partition.
SQL Server Major Products ☆ A commercial RDBMS from Microsoft.
SQLite Major Products ☆ A lightweight RDBMS that requires no server and can be embedded in an app.
Star Schema Analytics Platforms ☆ A data design where a central fact table is surrounded by multiple dimension tables.
Stored Procedure RDBMS Fundamentals ☆ A sequence of logic registered ahead of time on the database side.
Subquery SQL ☆ A SQL statement embedded inside another SQL statement.
SUM Function SQL ☆ An aggregate function that sums a column's values.
Supabase Major Products ☆ An open-source Backend-as-a-Service (BaaS) built on PostgreSQL.
SurrealDB Major Products ☆ A multi-model database that handles relational, document, and graph data in one.
Table RDBMS Fundamentals ☆ A table made up of rows and columns that stores data.
TiDB Major Products ☆ A MySQL-compatible distributed database that scales horizontally with ease.
Time Travel Query Analytics Platforms ☆ A feature that lets you query a table's state as it existed at any point in the past.
TimescaleDB Major Products ☆ A time-series database implemented as a PostgreSQL extension.
Transaction Transactions ☆ A unit that treats multiple operations as one indivisible group.
Trigger RDBMS Fundamentals ☆ Logic that automatically runs in response to a specific operation.
Two-Phase Commit Transactions ☆ A procedure for keeping transactions consistent across multiple databases.
UNION SQL ☆ An operator that stacks multiple SELECT results together, removing duplicates.
Unique Constraint RDBMS Fundamentals ☆ A constraint that prevents a specified column's values from being duplicated within a table.
UPDATE Statement SQL ☆ A SQL statement for updating existing data.
UPSERT SQL ☆ An operation that updates a row if it already exists, or inserts it if it doesn't, all in a single statement.
Valkey Major Products ☆ A BSD-licensed fork that emerged in response to Redis's license change.
Vector Database NoSQL ☆ A database that stores embedding vectors and lets you search by semantic closeness. Widely used in RAG.
Vertica Major Products ☆ A column-oriented MPP database built specifically for large-scale analytics.
View RDBMS Fundamentals ☆ A virtual table that lets you treat a SELECT statement's result as if it were a table.
Weaviate Major Products ☆ An open-source vector database known for hybrid search that combines vector search with keyword search.
Window Function SQL ☆ A function that attaches a per-group aggregate value to each row without collapsing them.
YugabyteDB Major Products ☆ A distributed SQL database with a PostgreSQL-compatible API.
AlloyDB Database ☆ A PostgreSQL-compatible database service built for high performance.
Anthos Other Services ☆ A Google Cloud platform for managing Kubernetes environments centrally, including on-premises and other clouds.
Anthos Service Mesh Other Services ☆ A fully managed service mesh from GCP that manages communication between microservices.
Apigee Other Services ☆ An API management service for publishing, managing, and analyzing APIs.
App Engine Compute ☆ A PaaS service for running applications without managing infrastructure.
Application Default Credentials Identity Management ☆ A mechanism that automatically finds the appropriate credentials for the current environment, without embedding credentials directly in code.
Archive Storage Storage ☆ The lowest-cost storage class, meant for data accessed extremely infrequently.
Artifact Registry Other Services ☆ A service for storing and managing artifacts such as container images.
Assured Workloads Security ☆ A Google Cloud feature that enforces data residency and access controls to meet compliance requirements for regulated industries.
Audit Logs Identity Management ☆ Logs that record who did what, and when.
Backup and DR Service Storage ☆ A service for centrally managing backup and disaster recovery for GCP workloads as well as on-premises environments.
Batch Compute ☆ A service that runs large batch-processing jobs, automatically provisioning the VMs needed.
BigQuery Database ☆ A data warehouse for fast SQL analysis of large-scale data.
BigQuery ML AI/ML ☆ A BigQuery feature for training and running machine learning models using only SQL syntax.
Bigtable Database ☆ A high-performance, column-oriented NoSQL database for large-scale data.
Binary Authorization Security ☆ A mechanism that ensures only approved container images can be deployed.
Budget Alerts Operations Management ☆ A feature that notifies you when usage charges are about to exceed a set amount.
Certificate Manager Security ☆ A service for centrally managing the creation, renewal, and deployment of SSL/TLS certificates.
Chronicle Security ☆ A Google-provided SIEM for quickly searching and analyzing large volumes of log data.
Cloud Armor Security ☆ A service that protects applications from DDoS and web attacks.
Cloud Asset Inventory Operations Management ☆ A service that inventories resources across an organization and tracks changes to them.
Cloud Billing Operations Management ☆ A feature for managing usage charges and setting budget alerts.
Cloud Build Other Services ☆ A CI/CD service that automatically runs builds and tests.
Cloud CDN Networking ☆ A content delivery service that uses Google's global network.
Cloud Composer Other Services ☆ A workflow-management service based on Apache Airflow.
Cloud Data Fusion Other Services ☆ A Google Cloud data integration service for building ETL/ELT pipelines without code.
Cloud Deploy Other Services ☆ A continuous-delivery service that manages deployment pipelines to targets such as GKE.
Cloud Deployment Manager Operations Management ☆ An infrastructure-as-code service that provisions resources from templates.
Cloud DLP Security ☆ A Google Cloud data-protection service that detects, classifies, and masks sensitive data.
Cloud DNS Networking ☆ GCP's managed DNS service.
Cloud Domains Networking ☆ A service for registering and managing domains directly from the Google Cloud console.
Cloud Endpoints Other Services ☆ A service for managing and monitoring APIs.
Cloud Functions Compute ☆ GCP's serverless function-execution service.
Cloud HSM Security ☆ A service that provides access to a hardware security module (HSM) in the cloud.
Cloud IAM Identity Management ☆ The mechanism for managing access permissions to GCP resources.
Cloud Identity Identity Management ☆ A service that provides identity-management infrastructure for users and devices.
Cloud IDS Security ☆ A Google Cloud intrusion detection service that monitors network traffic to detect known threats.
Cloud Interconnect Networking ☆ A service for connecting directly to GCP over a dedicated line.
Cloud KMS Security ☆ A service for generating and managing encryption keys.
Cloud Load Balancing Networking ☆ A load-balancing service that can receive globally distributed load through a single IP.
Cloud Logging Operations Management ☆ A service for collecting, storing, and searching various logs.
Cloud Monitoring Operations Management ☆ A service for collecting and monitoring metrics from GCP resources.
Cloud NAT Networking ☆ A mechanism that lets VMs without an external IP reach the internet.
Cloud Profiler Operations Management ☆ A GCP service that continuously analyzes an application's CPU usage and memory consumption at the function level.
Cloud Router Networking ☆ A Google Cloud routing service that dynamically exchanges routes using BGP.
Cloud Run Compute ☆ A service for running containers serverlessly.
Cloud Run jobs Compute ☆ A Cloud Run feature for running one-off batch processing, as opposed to always-on web request handling.
Cloud Scheduler Operations Management ☆ A managed service that runs recurring jobs, like cron.
Cloud Shell Other Services ☆ A temporary virtual machine environment, accessible through the browser, with the gcloud CLI pre-installed.
Cloud Source Repositories Other Services ☆ A private Git repository service hosted on GCP.
Cloud Spanner Database ☆ An RDB service that combines global distribution with strong consistency.
Cloud SQL Database ☆ A managed service providing major RDBs such as MySQL.
Cloud Storage Storage ☆ GCP's object storage service.
Cloud Tasks Other Services ☆ A service that queues asynchronous tasks and ensures their execution.
Cloud TPU AI/ML ☆ A custom chip designed by Google specifically for AI training and inference.
Cloud Trace Operations Management ☆ A tracing service for analyzing request latency.
Cloud VPN Networking ☆ A service that connects an on-premises environment to GCP with encryption.
Committed Use Discounts Compute ☆ A GCP discount program that offers reduced pricing in exchange for committing to a certain level of usage over a set period.
Compute Engine Compute ☆ GCP's virtual machine service.
Confidential Computing Compute ☆ A Google Cloud security capability that keeps data encrypted in memory even while it's being processed.
Container-Optimized OS Compute ☆ A lightweight OS image provided by Google, built solely for running containers.
Custom Image (Compute Engine) Compute ☆ A custom VM image for Compute Engine that captures a specific OS and middleware configuration.
Custom Machine Type Compute ☆ A VM configuration approach that lets you freely specify CPU and memory.
Dataflow Other Services ☆ A data-processing service that handles batch and streaming processing under one model.
Dataform Other Services ☆ A Google Cloud service for managing SQL-based data transformation pipelines in BigQuery.
Dataplex Other Services ☆ A data-governance service for centrally discovering and managing data spread across multiple sources.
Dataproc Other Services ☆ A service for running Hadoop and Spark in a managed way.
Datastore Database ☆ A document-oriented NoSQL database, the predecessor to Firestore.
Document AI AI/ML ☆ A service that automatically extracts text and data from documents.
Error Reporting Operations Management ☆ A service that aggregates and analyzes application errors.
Eventarc Other Services ☆ An event-routing service that triggers services based on events inside and outside GCP.
Filestore Storage ☆ Managed file storage that can be shared across multiple VMs.
Firestore Database ☆ A document-oriented NoSQL database with strong real-time sync capabilities.
Firewall Rule Networking ☆ A rule that controls allowing or denying traffic on a per-VPC basis.
GCP Workflows Other Services ☆ A serverless orchestration service that executes a series of service calls in a defined order.
Gemini Enterprise AI/ML ☆ Formerly Vertex AI, an integrated platform for building and operating AI agents.
GKE Compute ☆ GCP's managed Kubernetes service.
GKE Autopilot Compute ☆ A GKE operating mode that hands node management over to Google.
Google Cloud Architecture Framework Operations Management ☆ A set of best practices for reviewing a GCP design from multiple angles, including reliability, security, and cost optimization.
Google Cloud Marketplace Other Services ☆ A catalog for finding and deploying third-party software and services with one click.
Google Cloud VMware Engine Compute ☆ A service that lets you run an on-premises VMware environment as-is on GCP.
Google Distributed Cloud Compute ☆ Formerly Anthos, a platform for centrally managing Kubernetes environments across on-premises and other clouds.
Identity-Aware Proxy Identity Management ☆ A mechanism that lets you securely access internal apps via identity authentication, without a VPN.
Instance Template Compute ☆ A blueprint for creating virtual machines with an identical configuration.
Label Operations Management ☆ A named tag attached to a resource, used for organization and cost reporting.
Lifecycle Rule Storage ☆ A rule that automatically changes an object's class or deletes it after a set period.
Looker Other Services ☆ A BI platform for visualizing and analyzing data.
Managed Instance Group Compute ☆ A mechanism that automatically scales and repairs a group of identically configured VMs.
Memorystore Database ☆ A caching service that provides managed Redis and Memcached.
Multi-Region Storage Storage ☆ A storage approach that replicates data across multiple geographic regions.
Natural Language AI AI/ML ☆ A natural-language-processing service that analyzes text structure and sentiment.
Nearline/Coldline Storage ☆ Low-cost storage classes for infrequent access and long-term retention.
Network Connectivity Center Networking ☆ A GCP networking service that centrally manages hub-based connectivity across on-premises sites and multiple VPCs.
Network Intelligence Center Networking ☆ A suite of Google Cloud tools for visualizing network topology, monitoring performance, and diagnosing connectivity in one place.
Organization Policy Identity Management ☆ A mechanism for defining constraint rules applied across an organization.
Persistent Disk Storage ☆ A persistent disk attached to a Compute Engine instance.
Preemptible VM Compute ☆ A VM purchase option that's cheap but can be forcibly terminated.
Private Google Access Networking ☆ A setting that allows access to Google APIs without an external IP.
Private Service Connect Networking ☆ A mechanism for connecting to services privately, without going over the internet.
Project Networking ☆ The basic unit in GCP for organizing resources and managing billing.
Pub/Sub Other Services ☆ GCP's messaging service for exchanging messages asynchronously.
reCAPTCHA Enterprise Security ☆ Google's enterprise service for detecting and blocking fraudulent access and bot activity on a website.
Recommender Operations Management ☆ A service that suggests optimizations from a cost and security perspective.
Resource Hierarchy Identity Management ☆ The structure that organizes resources into a hierarchy of organization, folder, and project.
Secret Manager Security ☆ A GCP service that encrypts and centrally manages sensitive information such as API keys and passwords.
Security Command Center Security ☆ A service that provides a central view of security risks and threats.
Service Account Identity Management ☆ An identity that applications or VMs use to operate GCP.
Service Account Impersonation Identity Management ☆ A mechanism where a user or service account temporarily borrows the permissions of another service account to perform an operation.
Service Account Key Identity Management ☆ Key material used to authenticate as a service account.
Shared VPC Networking ☆ A mechanism where multiple projects share a single VPC network.
Shielded VM Compute ☆ A hardened virtual machine that, among other things, detects tampering during the boot process.
Sole-Tenant Node Compute ☆ A VM arrangement where you get exclusive use of a specific physical server.
Speech-to-Text AI/ML ☆ A service that converts speech to text.
Storage Class Storage ☆ A storage tier you choose based on access frequency and cost.
Text-to-Speech AI/ML ☆ A service that converts text into natural-sounding speech.
Traffic Director Networking ☆ A control plane for managing traffic in a service-mesh environment.
Transfer Service Storage ☆ A service for migrating data into Cloud Storage from other clouds or on-premises.
Translation AI AI/ML ☆ A service that automatically translates text.
Vertex AI AI/ML ☆ Google Cloud's machine learning platform, covering everything from training a model to deploying it.
Vision AI AI/ML ☆ An AI service that recognizes objects and text in images.
VPC Networking ☆ A virtual, private network space built on GCP.
VPC Flow Logs Networking ☆ A Google Cloud logging feature that captures records of traffic flowing through a VPC.
VPC Service Controls Identity Management ☆ A mechanism that restricts data exfiltration between services by setting up a boundary.
Workload Identity Identity Management ☆ A mechanism for securely granting GCP permissions to workloads such as those on Kubernetes.
Workload Identity Federation Identity Management ☆ A mechanism that lets external systems outside of GCP (other clouds, CI/CD platforms, etc.) access GCP resources without using a service account key.
/etc/fstab File Systems ☆ A configuration file that defines which file systems to mount at boot.
/etc/hosts Network Configuration ☆ A configuration file for manually registering hostname-to-IP-address mappings.
/etc/passwd User Management ☆ A file recording basic information about user accounts.
/etc/shadow User Management ☆ A file recording users' encrypted password information.
/var/log Log Management ☆ The standard directory where various system and service logs are stored.
ACL Permissions ☆ A mechanism for setting permissions individually, beyond just the owner and group.
Alias Shell / Commands ☆ A feature that gives a frequently used command a shorter, alternative name.
AlmaLinux Distributions ☆ A distribution also built to be RHEL-compatible.
Alpine Linux Distributions ☆ A distribution known for being lightweight, also commonly used as a container base image.
Amazon Linux Distributions ☆ A distribution optimized for use on AWS.
AppArmor Permissions ☆ A mandatory access control mechanism that restricts what each program can access.
AppImage Package Management ☆ A portable app-distribution format that runs from a single file.
apt Package Management ☆ A package-management command used on Debian-based distributions.
Arch Linux Distributions ☆ A distribution that prioritizes simplicity, letting you build up what you need yourself.
auditctl Log Management ☆ A command for adding or changing the audit daemon auditd's monitoring rules while it's running.
auditd Log Management ☆ An auditing mechanism that records a system's operation history in detail.
awk Shell / Commands ☆ A command handy for processing and aggregating text column by column.
bash Shell / Commands ☆ A shell (a program that interprets commands) commonly used as the default on Linux.
Bind Mount File Systems ☆ A mount method that also makes a directory's contents visible at another location.
blkid Storage Management ☆ A command that displays the UUID and filesystem type of a block device.
Bonding Network Configuration ☆ A feature that bundles multiple network interfaces together for redundancy or higher throughput.
Bootloader Kernel ☆ A small program that, after power-on, loads and starts the OS kernel.
Bridge Network Configuration ☆ A feature that virtually joins multiple network interfaces into one segment.
Btrfs File Systems ☆ A relatively new file system with advanced features such as snapshots.
cat Shell / Commands ☆ A command that outputs a file's contents as-is.
cd Shell / Commands ☆ A command for changing the working directory.
CentOS Distributions ☆ A distribution that has been used as a Red Hat Enterprise Linux-compatible option.
cgroup systemd ☆ A mechanism that groups processes to limit and manage their CPU and memory usage.
chattr Permissions ☆ A command for setting special attributes on a file, such as making it unchangeable.
chgrp Permissions ☆ A command for changing a file's group ownership.
chmod Shell / Commands ☆ A command for changing the access permissions of a file or directory.
chown Shell / Commands ☆ A command for changing a file's owner or group.
chroot Container Platforms ☆ A mechanism that changes the root directory a process sees, isolating it.
Cockpit Development Environment ☆ A web-based management console from Red Hat that lets you check the status of a Linux server and operate it through a browser.
Command Substitution Shell / Commands ☆ A feature for embedding one command's output as part of another command.
Core Dump Process Management ☆ A file that captures a process's in-memory state at the moment it crashed.
cp Shell / Commands ☆ A command for copying files or directories.
cron Shell / Commands ☆ A mechanism for automatically running commands at a set time or interval.
Cross-Compilation Development Environment ☆ Building software for an environment different from the one doing the building.
curl Shell / Commands ☆ A command for sending and receiving data by specifying a URL.
cut Shell / Commands ☆ A command that extracts a specified column or character position from each line.
Daemon Process Management ☆ A process that runs continuously, resident in the background.
Debian Distributions ☆ An OS that prioritizes stability and forms the basis of many other distributions.
Dependency Resolution Package Management ☆ The process of automatically installing the other packages a package needs.
Device Driver Kernel ☆ Software the OS uses to control hardware.
df File Systems ☆ A command that shows disk usage per file system.
diff Shell / Commands ☆ A command that shows the difference between two files.
dig Network Configuration ☆ A command for making a DNS query and reviewing the result in detail.
disown Shell / Commands ☆ A shell command that detaches a running background job from the shell's job control.
dmesg Log Management ☆ A command that displays messages output by the kernel.
dnf Package Management ☆ A Red Hat-family package-management command used as the successor to yum.
dpkg Package Management ☆ The package format used on Debian-based systems, and its management command.
dracut Kernel ☆ A tool that generates the initramfs image used temporarily during boot.
du File Systems ☆ A command that shows the space used by a directory or file.
Dynamic Linking Development Environment ☆ A method that loads the needed libraries at run time.
eBPF Kernel ☆ A technology for safely extending the kernel without recompiling it, heavily used by monitoring and security tools.
Emacs Editors ☆ A leading text editor known for its extensibility, alongside Vim.
Environment Variable Shell / Commands ☆ A named setting that a shell or process can reference.
ext4 File Systems ☆ The standard file system widely used on Linux.
fdisk Storage Management ☆ A command for manipulating a disk's partitions.
Fedora Distributions ☆ A Red Hat-family distribution that's quick to adopt new technology.
File Descriptor File Systems ☆ A number identifying a file a process has open.
find Shell / Commands ☆ A command for searching for files or directories by condition.
firewalld Network Configuration ☆ A service that dynamically manages firewall rules using the concept of zones.
Flatpak Package Management ☆ A mechanism for distributing and running apps in a distribution-independent format.
free Shell / Commands ☆ A command that displays how much physical memory and swap a system is using.
fsck Storage Management ☆ A command for checking and repairing a file system's consistency.
gcc Development Environment ☆ A leading compiler for compiling languages such as C.
gdb Development Environment ☆ A debugger that lets you step through a program's behavior line by line.
getenforce / setenforce Permissions ☆ Commands for checking and changing SELinux's operating mode (Enforcing or Permissive).
getfacl Permissions ☆ A command for displaying the ACL set on a file.
grep Shell / Commands ☆ A command for searching for lines that match a string pattern.
groupadd User Management ☆ A command for creating a new group.
GRUB Kernel ☆ One of the bootloaders widely used on Linux.
gzip Shell / Commands ☆ A command for compressing and decompressing files.
Hard Link File Systems ☆ A mechanism that lets multiple file names reference the same underlying data.
Heredoc Shell / Commands ☆ A notation for passing multi-line text as a command's input.
history Shell / Commands ☆ A command that shows the history of previously run commands.
hostname Network Configuration ☆ A command for displaying and setting a system's hostname.
hostnamectl systemd ☆ A systemd command for viewing and setting the system's hostname.
htop Shell / Commands ☆ An interactive, improved version of the top command for viewing processes and resource usage.
id User Management ☆ A command that shows information such as user ID and group ID.
ifconfig Network Configuration ☆ A classic command for configuring and checking network interfaces.
initramfs Kernel ☆ A temporary root file system unpacked into memory early in the boot process.
initrd Kernel ☆ An initial RAM disk image used temporarily when the kernel boots.
inode File Systems ☆ A structure that holds a file's metadata -- name, permissions, location -- separately from its actual data.
inode Number File Systems ☆ A number that uniquely identifies each inode.
inotify Kernel ☆ A kernel mechanism for notifying applications of changes to files and directories.
insmod Kernel ☆ A command for manually loading a kernel module.
iostat Shell / Commands ☆ A command that displays CPU usage and disk I/O statistics.
ip a Network Configuration ☆ The current command for displaying network interface information.
ip route Network Configuration ☆ A command for displaying and modifying the routing table.
iptables Network Configuration ☆ A traditional firewall feature that performs packet filtering.
iSCSI Storage Management ☆ A technology for using storage as a block device over an IP network.
Job Control Shell / Commands ☆ A feature for controlling processes in the foreground or background.
journalctl systemd ☆ A command for viewing logs collected by systemd.
Journaling File Systems ☆ A file-system mechanism that records an update log to speed up recovery after a failure.
jq Shell / Commands ☆ A command-line tool for formatting, extracting, and transforming JSON data.
Kali Linux Distributions ☆ A Debian-based distribution that comes preloaded with tools for penetration testing and security assessment.
Kernel Kernel ☆ The core of the OS, bridging hardware and applications.
Kernel Module Kernel ☆ A unit of functionality that can be dynamically loaded into the kernel.
Kernel Panic Kernel ☆ A state where the kernel detects a fatal error and the system halts.
Kernel Parameters Kernel ☆ Settings for tuning kernel behavior at boot time or at runtime.
kill Process Management ☆ A command that sends a signal to a specified process, such as instructing it to terminate.
last Log Management ☆ A command that shows login history.
ldconfig Development Environment ☆ A command for updating the shared-library cache.
ldd Development Environment ☆ A command that shows the shared libraries an executable depends on.
less Shell / Commands ☆ A command for viewing a file's contents while scrolling.
Linux Capabilities Permissions ☆ A mechanism that splits the powerful privileges of root into fine-grained units that can be granted individually.
logger Log Management ☆ A command that sends log messages to syslog, for example from a shell script.
Logical Volume Storage Management ☆ In LVM, the unit carved out of a volume group for use.
logrotate Log Management ☆ A mechanism for periodically rotating, compressing, and deleting log files.
Loopback Device File Systems ☆ A virtual device that lets a file be treated like a disk.
ls Shell / Commands ☆ A command for listing a directory's contents.
lsattr Permissions ☆ A command that displays special attributes set on a file.
lsblk Storage Management ☆ A command that lists connected block devices (disks).
lsmod Kernel ☆ A command that lists the currently loaded kernel modules.
lsns Kernel ☆ A command that lists the Linux namespaces present on a system.
lsof Shell / Commands ☆ A command that lists currently open files and the processes using them.
LVM Storage Management ☆ A logical-volume-management feature that flexibly bundles multiple disks together.
LXC Container Platforms ☆ A container technology that uses Linux kernel features to achieve a lightweight virtual environment.
make Development Environment ☆ A tool for automating the steps to build source code.
Makefile Development Environment ☆ The file, read by make, that describes the build steps.
man Shell / Commands ☆ A command for displaying the manual to look up a command's usage and options.
mdadm Storage Management ☆ A command for building and managing software RAID.
mkdir Shell / Commands ☆ A command for creating a new directory.
mkfs Storage Management ☆ A command for creating a file system on a partition.
Mount File Systems ☆ Making storage usable as part of the directory tree.
Mount Point File Systems ☆ The directory a storage device is attached to.
mv Shell / Commands ☆ A command for moving or renaming files and directories.
namespace Container Platforms ☆ A mechanism that isolates the resources a process can see, underlying container technology.
nano Editors ☆ A text editor with simple operation, easy for beginners to use.
ncdu Storage Management ☆ A tool for interactively viewing disk usage in a text-based interface.
netcat Shell / Commands ☆ A general-purpose network utility for easily reading and writing TCP/UDP traffic.
netstat Network Configuration ☆ A classic command for displaying network connection status.
Network Interface Network Configuration ☆ A virtual or physical port serving as the OS's connection point to the network.
Network Namespace Network Configuration ☆ A mechanism for giving each process its own independent network environment.
NetworkManager Network Configuration ☆ A network-configuration management service used in desktop environments and elsewhere.
NFS Storage Management ☆ A mechanism for sharing a file system over a network.
nftables Network Configuration ☆ A packet-filtering mechanism that succeeds iptables.
nice Process Management ☆ A command for adjusting a process's CPU priority.
nmcli Network Configuration ☆ A tool for operating NetworkManager from the command line.
nohup Shell / Commands ☆ A command for keeping a process running even after you log out.
nslookup Network Configuration ☆ A long-standing command for resolving domain names.
objdump Development Environment ☆ A tool for analyzing and displaying an executable's internal structure.
OOM Killer Kernel ☆ A kernel mechanism that forcibly terminates a process to protect the system when memory runs out.
openssl Shell / Commands ☆ A command-line tool for encryption and certificate-related operations.
openSUSE Distributions ☆ A German-originated distribution based on SUSE.
overlayfs File Systems ☆ A file system that layers multiple directories to present them as one, commonly used in container technology.
pacman Package Management ☆ The package-management command used on Arch Linux.
Page Cache Kernel ☆ A kernel caching mechanism that keeps data read from disk in memory.
Partition Storage Management ☆ A division of a single disk into multiple regions.
passwd User Management ☆ A command for setting or changing a user's password.
perf Development Environment ☆ A profiling tool built into the Linux kernel for analyzing system-wide performance.
Permission Bits Permissions ☆ A bit string representing read, write, and execute permissions.
Physical Volume Storage Management ☆ In LVM, the unit corresponding to an actual disk or partition.
PID Process Management ☆ The identifying number assigned to each running process.
Pipe Shell / Commands ☆ A mechanism for connecting one command's output directly to another command's input.
Podman Container Platforms ☆ A container engine with no daemon, built for rootless execution by default.
proc File System Kernel ☆ A mechanism for viewing running-process and kernel information as virtual files.
Process Process Management ☆ A unit of a running program.
ps Process Management ☆ A command that lists running processes.
pstree Process Management ☆ A command that displays running processes as a tree, showing their parent-child relationships.
RAID Storage Management ☆ A technology that combines multiple disks to increase performance or fault tolerance.
Red Hat Enterprise Linux Distributions ☆ A leading commercial Linux offering with enterprise support.
Redirection Shell / Commands ☆ Switching a command's input or output to a file or similar destination.
renice Process Management ☆ A command that changes the priority (nice value) of an already-running process.
Repository Package Management ☆ The place where packages are distributed and stored.
resolv.conf Network Configuration ☆ A configuration file that specifies which DNS server to use.
rm Shell / Commands ☆ A command for deleting files or directories.
rmmod Kernel ☆ A command for removing a kernel module.
Rocky Linux Distributions ☆ A RHEL-compatible distribution created as a successor to CentOS.
Root Privileges Permissions ☆ The top-level administrator privilege that allows any operation on the system.
rpm Package Management ☆ The package format used on Red Hat-family systems, and its management command.
rsync Shell / Commands ☆ A command that efficiently transfers and syncs only the differences.
rsyslog Log Management ☆ A daemon that extends syslog for flexible log collection.
Samba Storage Management ☆ Software for sharing files and printers with Windows.
scp Shell / Commands ☆ A command for transferring files using the SSH mechanism.
sed Shell / Commands ☆ A command for text substitution and editing via stream processing.
SELinux Permissions ☆ A kernel security mechanism that applies mandatory access control to processes and files.
Service Unit systemd ☆ A type of unit for managing the startup and shutdown of a resident process.
setfacl Permissions ☆ A command for setting an ACL on a file.
SGID Permissions ☆ A setting that carries over group permissions when a file is executed or created.
Shebang Shell / Commands ☆ A notation written on a script's first line to specify which interpreter runs it.
Shell Script Shell / Commands ☆ A script that lists out commands to automate a sequence of tasks.
Signal Process Management ☆ A lightweight message delivered to a process as an interrupt.
snap Package Management ☆ A relatively new distribution format that packages a program together with its dependencies.
Snapshot Storage Management ☆ A feature for preserving a disk's state as of a particular point in time.
sort Shell / Commands ☆ A command for sorting text line by line.
ss Network Configuration ☆ A command for displaying socket state, the successor to netstat.
ssh Shell / Commands ☆ A command for connecting securely to a remote server.
stat Shell / Commands ☆ A command that displays detailed information about a file, such as size, timestamps, and permissions.
Static Linking Development Environment ☆ A method that embeds the needed libraries directly into an executable.
Sticky Bit Permissions ☆ A setting on a shared directory that prevents deleting files owned by others.
strace Development Environment ☆ A tool for tracing the system calls a program issues.
su User Management ☆ A command for switching to another user.
Subshell Shell / Commands ☆ A shell spawned as a child process, separate from the current one.
sudo Shell / Commands ☆ A command for temporarily running a command with administrator privileges.
sudoers Permissions ☆ The configuration file defining who can use what privileges via sudo.
SUID Permissions ☆ A setting that makes a program run with its file owner's privileges, rather than the running user's.
SUSE Linux Enterprise Server Distributions ☆ A commercially supported, enterprise-grade Linux distribution provided by SUSE.
Swap File Systems ☆ A mechanism that uses disk as virtual memory when physical memory runs short.
Symbolic Link File Systems ☆ A shortcut-like file that points to another file or directory elsewhere.
sysctl Kernel ☆ A command for checking and changing kernel parameters while the system is running.
syslog Log Management ☆ An umbrella term for mechanisms that collect and record system logs.
System Call Kernel ☆ The mechanism by which an application calls into kernel functionality.
systemctl systemd ☆ A command for starting, stopping, and checking systemd services.
systemd systemd ☆ A boot and service-management system used by many Linux distributions.
systemd-analyze systemd ☆ A command for analyzing how long the boot process took.
systemd-networkd systemd ☆ systemd's component for managing network configuration.
systemd-resolved systemd ☆ systemd's component responsible for name resolution.
tail Shell / Commands ☆ A command that displays the end of a file, commonly used for watching logs.
tar Shell / Commands ☆ A command for creating and extracting archives that bundle multiple files into one.
Target systemd ☆ A concept representing a system state, grouping together multiple units.
tcpdump Network Configuration ☆ A command for capturing and analyzing packets on the network.
tee Shell / Commands ☆ A command that sends standard input to both a file and standard output.
Thread Process Management ☆ A further-subdivided unit of execution within a process.
timedatectl systemd ☆ A systemd command for viewing and setting the system date, time, and timezone.
Timer Unit systemd ☆ A type of unit that triggers a task by time or interval, like cron.
tmpfs File Systems ☆ A file system built in memory -- fast, but wiped on reboot.
tmux Shell / Commands ☆ A terminal multiplexer that lets you create multiple sessions and split panes within a single terminal.
top Process Management ☆ A command that displays CPU and memory usage in real time.
touch Shell / Commands ☆ A command for creating an empty file or changing its modification time.
tr Shell / Commands ☆ A command for translating or deleting characters.
Ubuntu Distributions ☆ A popular Linux distribution that's also easy for beginners to use.
udev Kernel ☆ A mechanism that detects devices being connected or disconnected and dynamically manages device files.
ulimit Process Management ☆ A shell built-in command for setting and viewing the resource limits a single process can use.
umask Permissions ☆ A setting that specifies which bits to exclude from a newly created file's default permissions.
umount File Systems ☆ A command for detaching a mounted file system.
uname Kernel ☆ A command that displays system information such as the kernel version.
uniq Shell / Commands ☆ A command that collapses consecutive duplicate lines.
unit systemd ☆ The unit of work systemd manages, such as a service or a timer.
useradd User Management ☆ A command for creating a new user account.
userdel User Management ☆ A command for deleting a user account.
usermod User Management ☆ A command for changing an existing user account's settings.
vi Editors ☆ A long-standing Unix text editor notable for switching between modes.
Vim Editors ☆ A text editor that extends and enhances vi.
vmlinuz Kernel ☆ The file name referring to the Linux kernel itself, in compressed executable form.
vmstat Shell / Commands ☆ A command that displays virtual memory, process, and CPU usage statistics together.
Volume Group Storage Management ☆ In LVM, a unit that bundles multiple physical volumes together.
watch Shell / Commands ☆ A command that repeatedly runs a given command at a fixed interval and keeps displaying the result on screen.
Wayland Kernel ☆ A next-generation display server protocol intended to replace X11.
wc Shell / Commands ☆ A command for counting lines, words, bytes, and the like.
wget Shell / Commands ☆ A command for downloading a file from a specified URL.
which Shell / Commands ☆ A command for finding where a command's executable is located.
Wildcard Shell / Commands ☆ Symbols such as * and ? for specifying multiple file names at once.
WSL Development Environment ☆ A mechanism for running a Linux environment on Windows.
wtmp Log Management ☆ A file where login and logout history is recorded.
X11 Kernel ☆ The traditional display server protocol that has long been used in Linux desktop environments.
xargs Shell / Commands ☆ A command that passes standard input's contents as arguments to another command.
XFS File Systems ☆ A high-performance file system strong at handling large volumes of data.
yum Package Management ☆ A package-management command long used on Red Hat-family distributions.
ZFS File Systems ☆ A feature-rich file system strong at snapshots and data-protection capabilities.
Zombie Process Process Management ☆ A process whose work has finished but that its parent hasn't cleaned up yet.
zsh Shell / Commands ☆ A shell that serves as an alternative to bash, with enhanced completion and more.
zypper Package Management ☆ A package-management command used on openSUSE and similar distributions.
2.4GHz Band Wireless LAN ☆ A Wi-Fi frequency band that resists obstacles well but is prone to interference from other devices.
2N Redundancy Network Redundancy & Design ☆ A generous redundancy configuration where the full set of required equipment is duplicated.
5GHz Band Wireless LAN ☆ A Wi-Fi frequency band with less interference and higher speed, but weaker against obstacles.
802.1Q Switching ☆ A tagging standard for adding VLAN information to Ethernet frames.
802.1X Authentication & Access Control ☆ A standard that authenticates devices on a per-port basis, used on both wired and wireless LANs.
A Record DNS ☆ A DNS record that maps a domain name to an IPv4 address.
Access Point Wireless LAN ☆ A device that relays wireless devices onto a wired network.
Access Port Switching ☆ A port that belongs to only a single VLAN, used to connect end devices.
Active-Active Load Balancing ☆ A redundancy configuration where multiple systems run simultaneously, also serving as load balancing.
Active-Standby Load Balancing ☆ A redundancy configuration where normally only one system runs, switching to the other on failure.
Administrative Distance Routing ☆ A value indicating the trustworthiness of a route between different routing protocols.
Anycast Address TCP/IP Basics ☆ A communication method that assigns the same address to multiple devices and delivers to the topologically nearest one.
Anycast DNS DNS ☆ A setup where the same IP address is assigned to DNS servers at multiple locations, automatically routing users to the nearest one.
APIPA TCP/IP Basics ☆ A 169.254.0.0/16 address automatically assigned when no DHCP server can be found.
Application Layer OSI Reference Model ☆ OSI layer 7, handling communication for applications the user interacts with directly.
Area 0 Routing ☆ The central backbone area in OSPF to which all other areas connect.
ARP TCP/IP Basics ☆ A protocol that resolves a MAC address on the same segment from an IP address.
ARP Spoofing Troubleshooting ☆ An attack technique that maliciously redirects traffic using forged ARP replies.
AS Number BGP ☆ A number identifying an autonomous system (an organization-level network) on the internet.
AS Path BGP ☆ An attribute showing which autonomous systems a route has passed through, also used for loop detection.
Asymmetric Routing Troubleshooting ☆ A state where outbound and inbound traffic take different routes.
Authoritative DNS Server DNS ☆ A DNS server responsible for returning the official answer for a specific domain.
Auto-negotiation Optical & Physical Layer ☆ A mechanism where two connected devices automatically agree on communication speed and duplex (full/half) settings.
Bandwidth QoS ☆ A metric expressing the maximum amount of data that can be transmitted in a given time.
Bandwidth Control QoS ☆ Controlling the upper limit of bandwidth available per communication.
BDR Routing ☆ OSPF's backup designated router, standing by in case the DR fails.
Beamforming Wireless LAN ☆ A technology that concentrates radio waves in a specific direction to improve communication quality.
BFD Routing ☆ A protocol that detects link failures at millisecond speed.
BGP BGP ☆ A routing protocol that exchanges route information between networks of different organizations.
BGP Convergence BGP ☆ The process by which BGP route information stabilizes after a network change.
BGP Neighbor BGP ☆ A router configured as a partner for exchanging route information over BGP.
BPDU Switching ☆ A control frame exchanged between switches in Spanning Tree.
Bridge Switching ☆ A device that connects two network segments based on MAC addresses.
Broadcast TCP/IP Basics ☆ A communication method that sends to all devices within the same network at once.
Broadcast Domain Switching ☆ The network range that a broadcast reaches.
Broadcast Storm Troubleshooting ☆ A phenomenon where broadcasts multiply endlessly due to a loop and communication becomes impossible.
Cable Tester Troubleshooting ☆ A measuring device that checks LAN cable wiring or breaks.
Captive Portal Wireless LAN ☆ A mechanism that displays an authentication screen in a browser when connecting to a wireless LAN.
CDP Network Management ☆ A Cisco-proprietary protocol for exchanging information between neighboring Cisco devices.
CE Router MPLS & Carrier Technology ☆ A router installed at the customer site that connects to the carrier network.
Channel Bonding Wireless LAN ☆ A technology that combines multiple wireless channels to widen bandwidth.
CIDR TCP/IP Basics ☆ A notation that flexibly expresses an IP address range using a prefix length.
CMTS Access Network ☆ An aggregation device on the CATV operator's side that terminates subscriber cable modems.
CNAME Record DNS ☆ A DNS record that sets one domain name as an alias for another.
Collision Switching ☆ A phenomenon in half-duplex communication where signals clash because multiple devices transmit data at the same time.
Collision Domain Switching ☆ The network range within which communication collisions can occur.
Connection Draining Load Balancing ☆ A mechanism that waits for existing connections to finish before removing a server.
Control Plane SD-WAN & SDN ☆ The part responsible for controlling communication, such as calculating route information.
Convergence (routing) Routing ☆ The state where all routers agree on the current routing information after a change in network topology.
CoS QoS ☆ A value attached to Ethernet frames indicating communication priority.
DAA Access Network ☆ An architecture that distributes some CMTS functions out to the node, closer to subscribers.
DAD IPv6 Details ☆ A mechanism that checks whether an IPv6 address is already in use on the same segment.
Data Link Layer OSI Reference Model ☆ OSI layer 2, which handles communication between neighboring devices using MAC addresses.
Data Plane SD-WAN & SDN ☆ The part that actually forwards packets.
Default Gateway Routing ☆ The address of the device that serves as the exit point out of your own network.
Default Route Advertisement BGP ☆ Advertising a default route to a BGP neighbor.
DHCP TCP/IP Basics ☆ A protocol that automatically distributes network settings such as IP addresses.
DHCP Relay Agent TCP/IP Basics ☆ A function that relays requests to a DHCP server located on a different segment.
DHCP Snooping Authentication & Access Control ☆ A switch security feature that permits DHCP responses only from a legitimate server, filtering out rogue DHCP servers.
DMVPN VPN ☆ A Cisco VPN technology that dynamically builds full-mesh connections between sites.
DNS DNS ☆ A mechanism, like an internet address book, that maps domain names to IP addresses.
DNS Cache DNS ☆ A mechanism that temporarily stores resolved domain name results to reduce repeat queries.
DNS Cache Poisoning DNS ☆ An attack that injects false information into a DNS cache to redirect users to a malicious site.
DNS Round Robin DNS ☆ A load-balancing technique that assigns multiple IP addresses to one domain name and returns them in turn.
DNS Tunneling DNS ☆ A technique that embeds other data within DNS traffic to abuse it as a communication channel.
DNSSEC DNS ☆ An extension that lets DNS response tampering be detected using digital signatures.
DOCSIS Access Network ☆ A communication standard for cable modems that delivers internet access over coaxial cable.
DoH DNS ☆ A method that encrypts DNS queries using HTTPS.
DoT DNS ☆ A method that encrypts DNS queries using TLS.
DR Routing ☆ In an OSPF multi-access network, the router that serves as the central point for exchanging route information.
DSCP QoS ☆ A mechanism that sets a priority value in the header of an IP packet.
DSR Load Balancing ☆ A method where the server returns responses directly to the client, bypassing the load balancer.
Dual Homing Network Redundancy & Design ☆ A configuration that connects a site or device to two separate routes or devices.
Dual Stack IPv6 Details ☆ A method that enables both IPv4 and IPv6 simultaneously on the same device.
Duplex Mismatch Troubleshooting ☆ A problem where connected devices' full-duplex/half-duplex settings don't match, degrading communication quality.
Dynamic ARP Inspection Authentication & Access Control ☆ A switch security feature that validates the contents of ARP packets to prevent ARP spoofing attacks.
Dynamic Routing Routing ☆ A method where route information is automatically exchanged and updated via a routing protocol.
EAP Wireless LAN ☆ An authentication framework used in wireless LANs and elsewhere that supports a variety of authentication methods.
East-West Traffic Data Center Networking ☆ Traffic exchanged between servers within a data center.
eBGP BGP ☆ BGP exchanged between routers with different AS numbers.
ECMP Data Center Networking ☆ A technology that distributes traffic across multiple routes of equal cost.
ECN QoS ☆ A mechanism that notifies both endpoints of network congestion before packets actually need to be dropped.
EIGRP Routing ☆ A Cisco routing protocol combining characteristics of distance-vector and link-state protocols.
ESP VPN ☆ A protocol in IPsec that performs packet encryption and authentication.
Ethernet TCP/IP Basics ☆ The most widely used data-link-layer standard for wired LANs.
EVPN Data Center Networking ☆ A BGP-based technology used to control overlays such as VXLAN.
Extended ACL Authentication & Access Control ☆ An ACL that filters on detailed criteria such as source, destination, and port number.
Failover Load Balancing ☆ A mechanism that automatically switches to a standby system when a failure occurs.
Fiber Optic Cable Optical & Physical Layer ☆ A communication cable made of glass or plastic that transmits data as pulses of light.
Floating Static Route Routing ☆ A backup static route that normally isn't used, activating only when the primary route fails.
Forward Lookup DNS ☆ Looking up an IP address from a domain name.
Fragmentation TCP/IP Basics ☆ Splitting data exceeding the MTU into multiple packets for transmission.
FTTH Access Network ☆ A fiber access method that runs fiber optic cable all the way to the subscriber's home.
Full Duplex / Half Duplex Optical & Physical Layer ☆ A distinction based on whether a communication channel can send and receive data at the same time, or only alternately.
Full-Service Resolver (Caching DNS Server) DNS ☆ A caching DNS server that performs name resolution on behalf of a client.
GLBP Network Redundancy & Design ☆ A Cisco proprietary protocol that provides redundancy for the default gateway across multiple routers while also load-balancing traffic between them.
Global IP Address TCP/IP Basics ☆ An IP address uniquely identified on the internet.
Global Unicast Address IPv6 Details ☆ An IPv6 address uniquely reachable on the internet.
Glue Record DNS ☆ A record used to resolve an authoritative DNS server's own name, avoiding a circular reference.
GRE Tunneling & Overlay ☆ A tunneling technology that encapsulates packets of various protocols within IP for transport.
GSLB Load Balancing ☆ Global load balancing that distributes traffic across multiple geographically distant sites.
Health Check Load Balancing ☆ A mechanism that periodically checks whether a server is operating normally.
HFC Access Network ☆ A CATV network design that uses fiber for the trunk and coaxial cable for the run to subscriber homes.
Hop Count Routing ☆ The number of routers a packet passes through to reach its destination.
HSRP Routing ☆ A Cisco-proprietary protocol for making the default gateway redundant.
Hub Switching ☆ A physical-layer relay device that simply repeats incoming data out to every connected port.
iBGP BGP ☆ BGP exchanged between routers within the same AS number.
ICMP TCP/IP Basics ☆ A protocol used for connectivity checks and error notification, used by ping.
IGMP Multicast ☆ A protocol by which a host informs the network of joining or leaving a multicast group.
IKE VPN ☆ A protocol used in IPsec to safely exchange encryption keys.
IKEv2 VPN ☆ The second version of IKE, the protocol used for key exchange in IPsec VPNs.
IP Address TCP/IP Basics ☆ A number, like an address, that identifies a device on a network.
IPoE Access Network ☆ A newer fiber-internet connection method that carries IP packets directly over Ethernet without using PPP.
IPsec VPN ☆ A group of VPN protocols that encrypt and authenticate at the IP packet level.
IPv4 TCP/IP Basics ☆ The version of IP addressing with a 32-bit address space that's widely used across the internet.
IPv6 TCP/IP Basics ☆ A next-generation IP address standard created to address IPv4 address exhaustion.
IS-IS Routing ☆ A link-state routing protocol, in the same family as OSPF, used to exchange routing information.
Iterative Query DNS ☆ A query method between servers, in which the response points to another DNS server.
Jitter QoS ☆ Variation in the interval at which packets arrive.
Jumbo Frame TCP/IP Basics ☆ An Ethernet frame larger than the standard 1500 bytes.
L2TP VPN ☆ A data-link-layer tunneling protocol with no encryption of its own.
L4 Load Balancing Load Balancing ☆ A method that distributes traffic based on IP address and port number.
L7 Load Balancing Load Balancing ☆ A method that distributes traffic by inspecting content such as URLs and HTTP headers.
Label Switching MPLS & Carrier Technology ☆ A method that forwards packets using a short label instead of an IP address.
LACP Switching ☆ A protocol that automatically bundles multiple physical links into a link aggregation.
LAN Cable Categories (Cat5e/Cat6) Optical & Physical Layer ☆ Standards that describe the performance of twisted-pair (LAN/Ethernet) cables, distinguished by a category number.
Latency QoS ☆ The delay time between sending data and receiving a response.
Layer 2 Switch Switching ☆ A switch that forwards frames based on MAC address.
Layer 3 Switch Switching ☆ A switch with routing capability, able to also handle IP addresses.
LDP MPLS & Carrier Technology ☆ A protocol that distributes MPLS label information between adjacent routers.
Least Connections Load Balancing ☆ A method that distributes to the server with the fewest connections at that moment.
Link Aggregation Switching ☆ A technology that bundles multiple physical links to treat them as a single, faster link.
Link Down Troubleshooting ☆ A state where a link is physically or logically disconnected.
Link-Local Address IPv6 Details ☆ An IPv6 address valid only within the same segment.
LLDP Network Management ☆ A protocol for exchanging information between neighboring devices regardless of vendor.
Load Balancer Load Balancing ☆ A device that distributes traffic across multiple servers to balance the load.
Local Preference BGP ☆ A BGP priority metric used when choosing a route from your own organization outward.
Longest Match Routing ☆ The principle of preferring the route with the longest matching prefix when multiple routes apply.
Loopback Address Routing ☆ A special address (such as 127.0.0.1) that refers to the device itself.
LSA Routing ☆ Advertisement information conveying link state, exchanged between routers in OSPF.
MAC Address Switching ☆ A unique 48-bit identifier assigned to a network device's physical interface.
MAC Address Table Switching ☆ A table a switch keeps to record the mapping between MAC addresses and ports.
MACsec Switching ☆ A Layer 2 encryption standard that encrypts Ethernet traffic on a per-frame basis.
MED Attribute BGP ☆ A metric that tells a neighboring AS which route it should preferably use to enter your network.
Mesh Wi-Fi Wireless LAN ☆ A wireless LAN configuration in which multiple access points cooperate to cover a wide area.
Metric Routing ☆ An evaluation value used to determine the priority of a route.
MIB Network Management ☆ A database defining the structure of information managed by SNMP.
Microburst QoS ☆ A momentary spike in traffic that doesn't show up in average bandwidth utilization.
MIMO Wireless LAN ☆ A technology that uses multiple antennas to send and receive multiple signals simultaneously.
MPLS MPLS & Carrier Technology ☆ A technology commonly used in carrier networks that uses labels to determine routes quickly.
MPLS VPN MPLS & Carrier Technology ☆ A service that uses an MPLS network to virtually connect multiple sites as if over a dedicated line.
MSS TCP/IP Basics ☆ The maximum size of the data portion TCP can send at once.
MSTP Switching ☆ A standard that groups multiple VLANs into instances to improve STP efficiency.
MTU TCP/IP Basics ☆ The maximum size of data that can be sent at once; anything larger is split.
MTU Mismatch Troubleshooting ☆ A problem where MTU settings differ along a path, causing packet fragmentation or drops.
Multicast TCP/IP Basics ☆ A communication method that sends to a specific set of multiple recipients simultaneously.
Multicast Group Address Multicast ☆ A special IP address range that serves as the destination for multicast communication.
Multi-Chassis Link Aggregation Data Center Networking ☆ A technology that forms link aggregation across different physical switches.
Multihop BGP BGP ☆ A configuration that establishes a BGP neighbor relationship with a peer that isn't directly connected.
Multi-Mode Fiber Optical & Physical Layer ☆ An optical fiber suited to short distances, at lower cost.
MU-MIMO Wireless LAN ☆ An advancement of MIMO that can send data to multiple devices simultaneously.
MX Record DNS ☆ A DNS record that specifies the server that receives mail addressed to a domain.
N+1 Redundancy Network Redundancy & Design ☆ A redundant configuration that provisions one more unit than the number required.
NAPT TCP/IP Basics ☆ A NAT method that shares a single global IP address among multiple devices using port numbers.
NAT TCP/IP Basics ☆ A technology that translates between private and global IP addresses.
NAT64 IPv6 Details ☆ A translation technology that allows access from an IPv6-only network to IPv4 resources.
Native VLAN Switching ☆ The default VLAN that passes through a trunk port without being tagged.
NDP IPv6 Details ☆ A protocol in IPv6, equivalent to ARP, that handles tasks such as MAC address resolution.
NetFlow Network Management ☆ A technology that collects statistical information about traffic flowing through a network.
Network Functions Virtualization (NFV) SD-WAN & SDN ☆ A technology for implementing functions like routers and firewalls as software on general-purpose servers instead of dedicated hardware.
Network Layer OSI Reference Model ☆ OSI layer 3, which handles route selection using IP addresses.
Network Loop Troubleshooting ☆ A state where wiring forms a closed path and packets keep circulating.
Network Segmentation Authentication & Access Control ☆ A design practice that divides a network into multiple segments to limit the spread of damage.
Network Tap Troubleshooting ☆ A dedicated device that copies out traffic flowing across a link without altering it.
Network Topology Network Management ☆ The physical or logical layout of how network devices are connected to each other.
NIC (Network Interface Card) Optical & Physical Layer ☆ The hardware used to connect a computer to a network.
North-South Traffic Data Center Networking ☆ Traffic that flows between clients outside a data center and the systems inside it.
NS Record DNS ☆ A DNS record indicating the name servers that manage a domain.
NTP Network Management ☆ A protocol that accurately synchronizes device clocks over a network.
OLT Access Network ☆ A PON termination device installed at the carrier's facility.
ONU Access Network ☆ A fiber termination device installed at the subscriber's premises.
OpenFlow SD-WAN & SDN ☆ A representative protocol used for communication between the controller and switches in SDN.
OSI Reference Model OSI Reference Model ☆ A model that organizes communication functions into seven layers.
OSPF Routing ☆ A link-state routing protocol commonly used within a single organization.
OSPFv3 Routing ☆ An extended version of OSPF that supports IPv6 networks.
Overlay Network Tunneling & Overlay ☆ A logically constructed virtual network built separately from the physical configuration.
Packet Capture Network Management ☆ Capturing and analyzing the packets flowing across a network.
Packet Loss QoS ☆ A phenomenon where a sent packet is lost along the way.
Path Attribute BGP ☆ An attribute attached to BGP route information that serves as material for route-selection decisions.
PDU OSI Reference Model ☆ A general term for the unit of data exchanged at each layer (frame, packet, etc.).
PE Router MPLS & Carrier Technology ☆ An MPLS router positioned at the edge of the carrier network, connecting to the customer network.
Physical Layer OSI Reference Model ☆ OSI layer 1, responsible for physical transmission over cables and electrical signals.
PIM Multicast ☆ A protocol used for multicast routing.
PIM-DM Multicast ☆ A dense-mode variant of PIM that first floods all paths, then prunes the unneeded ones.
PIM-SM Multicast ☆ A sparse-mode variant of PIM that builds only the paths that are needed.
Ping Network Management ☆ A command that uses ICMP to check connectivity with a remote host.
Ping Timeout Troubleshooting ☆ A state where no response arrives within a set time, causing the connectivity check to fail.
PMTUD TCP/IP Basics ☆ A mechanism that discovers the smallest MTU along a path to avoid packet fragmentation.
PoE Optical & Physical Layer ☆ A technology that supplies power over a LAN cable.
PoE+ Optical & Physical Layer ☆ An extension of PoE that increases the power that can be supplied.
Policy-Based Routing Routing ☆ A method that decides routing based on criteria such as source address, not just destination address.
PON Access Network ☆ A fiber access method that splits a single fiber to be shared among multiple subscribers.
Port Forwarding TCP/IP Basics ☆ A setting that forwards traffic addressed to a specific external port to a specific internal device.
Port Mirroring Troubleshooting ☆ A switch feature that copies traffic passing through a specific port and forwards it to another port.
Port Number TCP/IP Basics ☆ A number that identifies which application to communicate with within the same IP address.
Port Security Switching ☆ A security feature that allows communication on a port only from specific MAC addresses.
Port-Based Authentication Authentication & Access Control ☆ A mechanism that performs access control on a per-switch-port basis.
PPPoE Access Network ☆ A protocol that establishes a PPP connection over Ethernet to handle authentication and IP address assignment.
PPTP VPN ☆ A tunneling protocol commonly used in early VPNs; now deprecated due to security weaknesses.
Prefix List BGP ☆ A filter that permits or denies only specific prefixes.
Presentation Layer OSI Reference Model ☆ OSI layer 6, which handles data format conversion, encryption, and compression.
Private IP Address TCP/IP Basics ☆ An IP address used only within a limited scope such as inside an organization, not usable on the internet.
Private VLAN Switching ☆ A feature that further restricts port-to-port communication even within the same VLAN.
PTR Record DNS ☆ A DNS record used for reverse lookups, finding the domain name from an IP address.
PVST+ Switching ☆ A Cisco extension that runs a separate spanning tree instance per VLAN.
QoS QoS ☆ A mechanism that prioritizes traffic by type and controls bandwidth and delay.
QSFP Optical & Physical Layer ☆ A higher-capacity transceiver standard supporting faster communication than SFP.
Queuing QoS ☆ A mechanism that temporarily holds packets awaiting transmission.
QUIC TCP/IP Basics ☆ A next-generation, UDP-based transport protocol that underlies HTTP/3.
RA IPv6 Details ☆ An IPv6 message by which a router periodically advertises network information.
Radio Interference Wireless LAN ☆ A phenomenon where communication quality degrades because frequencies overlap with other radio signals.
RADIUS Authentication & Access Control ☆ A protocol that performs user authentication, authorization, and accounting.
Recursive Query DNS ☆ A method where a DNS server keeps querying on the client's behalf until it obtains the final answer.
Remote Access VPN VPN ☆ A VPN configuration that connects individual devices to an internal company network.
Rendezvous Point Multicast ☆ A router that serves as the relay point for multicast delivery in PIM-SM.
Repeater Optical & Physical Layer ☆ A device that amplifies and reshapes a signal to extend the reach of a cable.
Reverse Lookup DNS ☆ Looking up a domain name from an IP address.
Reverse Proxy Load Balancing ☆ A mechanism that sits between client and server, acting as the server's representative.
RIP Routing ☆ A long-established distance-vector routing protocol based on hop count.
Roaming Wireless LAN ☆ A feature that automatically switches the connected access point while a device is moving.
Root Bridge Switching ☆ The elected central switch that serves as the reference point for spanning tree calculations.
Root DNS Server DNS ☆ The topmost server in the DNS hierarchy.
Round Robin Load Balancing ☆ A method that allocates requests to servers evenly in turn.
Route Dampening BGP ☆ A mechanism that temporarily suppresses advertisement of an unstable route.
Route Map BGP ☆ A mechanism that conditionally changes attributes or filters route information.
Route Redistribution Routing ☆ Mutually importing route information between different routing protocols.
Route Reflector BGP ☆ A router that relays route information to simplify full-mesh iBGP connectivity.
Route Summarization Routing ☆ Consolidating multiple pieces of route information into one, simplifying the routing table.
Router Network Management ☆ A network-layer device that relays packets between different networks.
Routing Table Routing ☆ A table recording which route a packet should be sent over.
RSTP Switching ☆ A spanning tree protocol that speeds up STP, shortening convergence time.
SD-Branch SD-WAN & SDN ☆ An approach that centrally manages a branch site's networking functions together through software.
SDN SD-WAN & SDN ☆ An approach that centrally controls network devices through software.
SD-WAN SD-WAN & SDN ☆ A technology that centrally manages and optimally controls WAN links across multiple sites through software.
Sequence Number TCP/IP Basics ☆ A number used by TCP to manage the order of data sent.
Session Layer OSI Reference Model ☆ OSI layer 5, which manages the start, maintenance, and end of communication.
Session Persistence Load Balancing ☆ A mechanism that always routes traffic from the same user to the same server.
sFlow Network Management ☆ A technology that collects statistical information by sampling packets.
SFP Optical & Physical Layer ☆ A small optical/electrical transceiver standard fitted into network equipment.
Single Point of Failure Network Redundancy & Design ☆ A non-redundant point whose failure would halt the entire system.
Single-Mode Fiber Optical & Physical Layer ☆ An optical fiber with a thin core diameter, suited to long-distance transmission.
Site-to-Site VPN VPN ☆ A VPN configuration that keeps site-to-site networks permanently connected.
SLAAC IPv6 Details ☆ A mechanism by which a device automatically configures its own IPv6 address based on router advertisements.
SNMP Network Management ☆ A protocol for monitoring and managing the state of network devices.
SNMP Trap Network Management ☆ A mechanism by which a device proactively notifies a management server of an anomaly.
SOA Record DNS ☆ A DNS record indicating a zone's management information, such as its serial number and retry interval.
Socket TCP/IP Basics ☆ A communication endpoint formed by the combination of an IP address and port number.
Spanning Tree Protocol Switching ☆ A protocol that controls paths between switches to prevent loops from occurring.
Spanning Tree Reconvergence Troubleshooting ☆ The process by which STP recalculates a new path after a topology change.
Spine-Leaf Architecture Data Center Networking ☆ A two-tier network design used in data centers that makes latency easy to keep uniform.
SSID Wireless LAN ☆ A name used to identify a wireless LAN network.
SSL-VPN VPN ☆ A VPN method using SSL/TLS that allows easy connection from a browser and similar clients.
Standard ACL Authentication & Access Control ☆ A simple ACL that filters based only on source address.
Static NAT TCP/IP Basics ☆ A NAT method that permanently maps one private IP address to the same single global IP address.
Static Routing Routing ☆ A routing method where an administrator manually configures route information.
Subnet Mask TCP/IP Basics ☆ A value used to divide an IP address into a network portion and a host portion.
Subnetting TCP/IP Basics ☆ The process of dividing one network into multiple smaller networks (subnets).
Switch Stacking Switching ☆ A technology for connecting multiple physical switches so they can be treated as a single logical switch.
Syslog Network Management ☆ A mechanism for forwarding and aggregating device logs to an external server.
TACACS+ Authentication & Access Control ☆ An authentication protocol, common on Cisco devices, that also allows authorization at the command level.
TCP TCP/IP Basics ☆ A reliability-focused protocol that establishes a connection before communicating.
TCP Flags TCP/IP Basics ☆ Bits such as SYN, ACK, FIN, and RST that convey control information in a TCP segment.
TCP/IP Model OSI Reference Model ☆ A practically simplified four-layer model derived from the OSI reference model.
Three-Tier Network Architecture Data Center Networking ☆ The traditional model of designing switches in three layers — core, distribution, and access.
Three-Way Handshake TCP/IP Basics ☆ The three-step exchange -- SYN, SYN/ACK, ACK -- used to establish a TCP connection.
Throughput Measurement Troubleshooting ☆ Measuring the actual amount of data that can be transferred.
ToR Switch Data Center Networking ☆ A switch installed at the top of a rack that houses the servers.
Traceroute Network Management ☆ A command that discovers the route a packet takes to reach its destination.
Traffic Class QoS ☆ A group into which traffic is classified by type under QoS.
Traffic Policing QoS ☆ A control method that discards or restricts traffic exceeding a configured bandwidth.
Traffic Shaping QoS ☆ A technology that smooths transmission speed to suppress bursty load.
Transport Layer OSI Reference Model ☆ OSI layer 4, which uses port numbers to handle communication reliability and ordering.
Trunk Port Switching ☆ A port that carries traffic from multiple VLANs together over a single link.
TTL TCP/IP Basics ☆ A value indicating the maximum number of routers a packet can pass through; it's discarded when it reaches zero.
Tunneling VPN ☆ A technology that wraps data from one protocol inside another protocol for transport.
TXT Record DNS ☆ A DNS record that attaches arbitrary text information to a domain, used for things like SPF.
UDP TCP/IP Basics ☆ A protocol that prioritizes speed without establishing a connection.
Underlay Network Tunneling & Overlay ☆ The physical, real network that supports an overlay network.
Unicast TCP/IP Basics ☆ A one-to-one communication method.
Unique Local Address IPv6 Details ☆ An IPv6 address intended for use within an organization, not reaching the internet.
VLAN Switching ☆ A technology that logically divides a network without changing the physical wiring.
VPN VPN ☆ A technology that builds a virtual dedicated line over a public network such as the internet.
VRF MPLS & Carrier Technology ☆ A technology that lets a single router hold multiple independent routing tables.
VRRP Routing ☆ A protocol that makes a virtual default gateway redundant across multiple routers.
VTEP Tunneling & Overlay ☆ The endpoint that performs encapsulation and decapsulation in VXLAN.
VTP Switching ☆ A Cisco-proprietary protocol that automatically synchronizes VLAN information between multiple switches.
VXLAN Tunneling & Overlay ☆ An overlay technology that extends a layer 2 network over an IP network.
WDM Optical & Physical Layer ☆ A technology that increases capacity by sending multiple wavelengths of light through a single fiber.
Weight BGP ☆ A locally significant priority metric used for route selection on Cisco devices.
Weighted Round Robin Load Balancing ☆ A round-robin method that varies the distribution ratio according to each server's performance.
Well-Known Ports TCP/IP Basics ☆ Ports numbered 0-1023 whose use is predetermined, such as port 80 for HTTP.
WFQ QoS ☆ A queuing method that allocates bandwidth fairly across flows.
White Box Switch SD-WAN & SDN ☆ A switch built on generic hardware, not tied to a specific vendor.
Wi-Fi Wireless LAN ☆ A general term for the technology standards used to connect to a LAN wirelessly.
Wi-Fi 6 Wireless LAN ☆ The common name for 802.11ax, characterized by improved efficiency in high-density environments.
Wi-Fi 6E Wireless LAN ☆ A standard that extends Wi-Fi 6 technology into the 6GHz band.
Wi-Fi 7 Wireless LAN ☆ The common name for 802.11be, the latest standard aiming for even higher speed and lower latency.
Wildcard Mask TCP/IP Basics ☆ A masking notation, used in Cisco ACLs and similar configurations, whose bit meaning is the inverse of a subnet mask.
Window Size TCP/IP Basics ☆ A TCP value indicating how much data can be sent without waiting for acknowledgment.
Wireless LAN Controller Wireless LAN ☆ A device for centrally configuring and monitoring multiple access points.
WPA2 Wireless LAN ☆ An encryption and authentication standard for wireless LANs widely used before WPA3.
WPA3 Wireless LAN ☆ The current encryption and authentication standard for wireless LANs.
Zone Transfer DNS ☆ Replicating zone information from a primary DNS server to a secondary.
.NET Languages & Frameworks ☆ A development platform from Microsoft that supports multiple languages.
Abstract Class Object-Oriented Programming ☆ A class that has some shared logic while leaving part of its implementation to subclasses.
Access Modifier Object-Oriented Programming ☆ A keyword controlling where a class member can be accessed from.
Adapter Pattern Development Methods & Design ☆ A design pattern that inserts a converter between two incompatible interfaces so they can work together.
Angular Languages & Frameworks ☆ A frontend framework from Google geared toward large-scale development.
Argument Basic Syntax ☆ A value passed when calling a function.
Array Basic Syntax ☆ A data structure that stores multiple values arranged in order.
ASP.NET Languages & Frameworks ☆ A framework for web applications that runs on .NET.
Astro Languages & Frameworks ☆ A static site generation framework built for content-focused sites.
async/await Asynchronous Processing ☆ Syntax that lets you write asynchronous code that reads like synchronous code.
Asynchronous Processing Asynchronous Processing ☆ An execution scheme that lets the next step proceed without waiting for the current one to finish.
Builder Pattern Object-Oriented Programming ☆ A design pattern that constructs a complex object with many optional fields step by step.
Bun Languages & Frameworks ☆ A fast JavaScript/TypeScript runtime built with execution speed as its top priority.
Bytecode Memory Management ☆ Intermediate code for a runtime environment, generated after compilation.
C Languages & Frameworks ☆ A long-standing programming language widely used even at low levels, such as OSes and hardware control.
C# Languages & Frameworks ☆ A programming language developed by Microsoft, widely used in the .NET environment.
C++ Languages & Frameworks ☆ A high-performance programming language that adds object orientation and other features to C.
Callback Function Asynchronous Processing ☆ A function passed in to be called once some operation finishes.
Cast Basic Syntax ☆ Converting data of one type so it can be treated as another type.
Checked Exception Exception Handling ☆ A category of exception where handling it is mandatory at compile time.
CI/CD Development Methods & Design ☆ A set of development practices for continuously building and testing code changes and automatically releasing them to production.
Class Object-Oriented Programming ☆ A blueprint for an object that bundles data and behavior together.
Closure Basic Syntax ☆ A mechanism where a function remembers variables from the scope it was defined in.
Code Review Development Methods & Design ☆ The process where other developers check written code and give feedback.
Compilation Memory Management ☆ The process of converting source code into an executable form.
Conditional Branching Basic Syntax ☆ Switching which code runs based on a condition.
Constant Basic Syntax ☆ A container whose value can't be changed once defined.
Constructor Object-Oriented Programming ☆ Initialization logic that's automatically called when an instance is created.
CQRS Development Methods & Design ☆ A design pattern that deliberately separates the paths for updating data (commands) from reading data (queries).
Currying Basic Syntax ☆ Transforming a function that takes multiple arguments into a chain of functions that each take one argument.
Custom Exception Exception Handling ☆ A custom, application-specific exception class.
Dart Languages & Frameworks ☆ A programming language developed by Google, used with the Flutter framework.
Data Type Basic Syntax ☆ A classification indicating the kind of data being handled, such as a number or string.
Decorator Pattern Development Methods & Design ☆ A design pattern for dynamically adding new behavior to an existing object.
Deno Languages & Frameworks ☆ A security-focused JavaScript/TypeScript runtime created by the original author of Node.js.
Dependency Injection Development Methods & Design ☆ A design pattern where an object's dependencies are supplied from the outside rather than created internally.
Design Pattern Development Methods & Design ☆ A catalog of standard solutions to common design problems.
Destructuring Assignment Basic Syntax ☆ Syntax for unpacking elements of an array or object into individual variables in one step.
Django Languages & Frameworks ☆ A full-stack web application framework written in Python.
do-while Loop Basic Syntax ☆ A loop construct that runs the body once before checking the condition to decide whether to repeat.
DRY Principle Development Methods & Design ☆ The idea of avoiding writing the same information or logic more than once.
Duck Typing Object-Oriented Programming ☆ An approach that cares about whether an object has the necessary methods, rather than its declared type.
Dynamic Typing Basic Syntax ☆ A scheme where a variable's type is determined at runtime.
E2E (End-to-End) Test Development Methods & Design ☆ A test that operates an actual browser or similar client to verify an entire system, from the user's action all the way through to what's displayed on screen.
Elixir Languages & Frameworks ☆ A functional language with high concurrency and fault tolerance, running on the Erlang VM.
Encapsulation Object-Oriented Programming ☆ The idea of hiding internal data and logic, exposing only the necessary interface to the outside.
Error Handling Exception Handling ☆ Appropriately dealing with errors that occur while a program is running.
Event Loop Asynchronous Processing ☆ A mechanism that pulls queued events one at a time to drive processing forward.
Event Sourcing Development Methods & Design ☆ An architectural pattern that records every change (event) leading up to the current state, rather than storing only the latest state itself.
Event-Driven Architecture Development Methods & Design ☆ A system design where services are loosely coupled, communicating through the occurrence of "events."
Exception Exception Handling ☆ An unexpected error condition that occurs during execution.
Express Languages & Frameworks ☆ A simple web application framework running on Node.js.
Facade Pattern Development Methods & Design ☆ A design pattern that bundles access to a complex set of interrelated classes behind a single, simple entry point (a facade).
Factory Pattern Object-Oriented Programming ☆ A design pattern that delegates instance creation to a dedicated class.
FastAPI Languages & Frameworks ☆ A Python framework that leverages type hints to build fast APIs.
Feature Flag Development Methods & Design ☆ A mechanism that lets you turn a specific feature on or off without redeploying code.
Field Object-Oriented Programming ☆ Data (a variable) that a class holds.
finally Exception Handling ☆ A block of code that always runs regardless of whether an exception occurred.
Flask Languages & Frameworks ☆ A lightweight Python web framework where you pick and combine the features you need.
for Statement Basic Syntax ☆ A control construct that repeats processing a specified number of times.
Function Basic Syntax ☆ A named, reusable bundle of processing.
Garbage Collection Memory Management ☆ A mechanism that automatically frees memory that's no longer in use.
Generics Collections ☆ A mechanism for generically specifying the data type being handled.
Go Languages & Frameworks ☆ A language developed by Google, characterized by simplicity and strong concurrency performance.
GraphQL Languages & Frameworks ☆ A query language for APIs that lets the client specify exactly what shape of data it needs.
gRPC Languages & Frameworks ☆ An RPC (remote procedure call) framework developed by Google for fast communication.
Heap Area Memory Management ☆ A memory region where objects and the like are allocated dynamically.
Higher-Order Function Basic Syntax ☆ A function that takes a function as an argument or returns one as its result.
Immutable Basic Syntax ☆ The property of a value that can't be changed once created.
Inheritance Object-Oriented Programming ☆ A mechanism for creating a new class by carrying over the functionality of an existing one.
Instance Object-Oriented Programming ☆ A concrete entity actually created from a class.
Integration Test Development Methods & Design ☆ A test run with multiple modules combined together.
Interface Object-Oriented Programming ☆ A definition of only the method specifications that a class must implement.
Iterator Collections ☆ A mechanism for retrieving elements from a collection one at a time, in order.
Java Languages & Frameworks ☆ A leading object-oriented language widely used in enterprise system development.
JavaScript Languages & Frameworks ☆ A widely used programming language that runs in the browser, adding interactivity to web pages.
JVM Memory Management ☆ A virtual machine for executing Java bytecode.
KISS Principle Development Methods & Design ☆ A basic software design principle meaning "keep it simple."
Kotlin Languages & Frameworks ☆ A language highly compatible with Java, also used as a standard in Android development.
Lambda Expression Basic Syntax ☆ A concise way to define a function on the spot without giving it a name.
Laravel Languages & Frameworks ☆ A leading, feature-rich web application framework for PHP.
Linked List Collections ☆ A list structure where elements are linked together by references to the next one.
Linter Development Methods & Design ☆ A tool that automatically checks code style and potential mistakes against a predefined set of rules.
List Collections ☆ A data structure that stores multiple elements while preserving order.
Loop Basic Syntax ☆ Repeating the same processing until a condition is met.
Map Collections ☆ A structure that stores data as key-value pairs.
Memory Leak Memory Management ☆ A bug where memory that's no longer needed is never freed and keeps being consumed.
Method Object-Oriented Programming ☆ A procedure (function) defined on a class.
Microservices Development Methods & Design ☆ An architecture that splits a single system into small, independently deployable services.
Mixin Object-Oriented Programming ☆ A technique for incorporating functionality into multiple classes, separate from inheritance.
Mock Development Methods & Design ☆ A type of test double that records how many times it was called and with what arguments, letting you verify it was used as expected.
Modular Monolith Development Methods & Design ☆ A design approach that deploys as a single application while clearly dividing its internals into independent, well-bounded modules.
Monolithic Architecture Development Methods & Design ☆ A design approach that bundles all of an application's functionality into a single deployable unit.
Monorepo Development Methods & Design ☆ A practice of managing multiple projects or packages together in a single repository.
Mutable Memory Management ☆ A property of an object or data whose internal state can be changed after it's created.
Mutual Exclusion Asynchronous Processing ☆ Controlling access so that multiple processes don't touch the same resource at the same time.
Namespace Basic Syntax ☆ A mechanism for grouping identifiers to avoid naming collisions.
NestJS Languages & Frameworks ☆ A backend framework for Node.js, written in TypeScript.
Next.js Languages & Frameworks ☆ A framework built on React that adds features such as server-side rendering.
Node.js Languages & Frameworks ☆ A runtime for executing JavaScript on the server side.
npm Languages & Frameworks ☆ The standard package manager for managing JavaScript and Node.js libraries.
null Basic Syntax ☆ A special value representing the absence of a value.
NullPointerException Exception Handling ☆ A common exception thrown when code tries to operate on something that doesn't exist (null).
Nuxt Languages & Frameworks ☆ A full-stack framework built on Vue.js with SSR and SSG capabilities.
Observer Pattern Object-Oriented Programming ☆ A design pattern that automatically notifies multiple registered objects when state changes.
Operator Basic Syntax ☆ A symbol that performs an operation on values, such as addition or comparison.
Overload Object-Oriented Programming ☆ Defining multiple methods with the same name but different parameters.
Override Object-Oriented Programming ☆ Redefining a parent class's method in a child class.
Pair Programming Development Methods & Design ☆ A development style where two people write code together while looking at one screen.
Pass by Reference Memory Management ☆ A parameter-passing scheme where the location of a value (a reference) is passed.
Pass by Value Memory Management ☆ A parameter-passing scheme where a copy of the value itself is passed.
PHP Languages & Frameworks ☆ A scripting language widely used for writing web server-side logic.
Pointer Memory Management ☆ A variable used to directly handle an address in memory.
Polymorphism Object-Oriented Programming ☆ The property that the same call can behave differently depending on the actual object.
Promise Asynchronous Processing ☆ An object that lets you handle the eventual result of an asynchronous operation.
Pure Function Basic Syntax ☆ A function that, given the same arguments, always returns the same result and does not modify any external state.
Python Languages & Frameworks ☆ A programming language with simple syntax, used broadly from AI development to web development.
Queue Collections ☆ A first-in, first-out data structure where the first item added is the first one removed.
R Languages & Frameworks ☆ A programming language specialized for statistical analysis and data visualization.
React Languages & Frameworks ☆ A JavaScript library from Facebook for building UIs out of components.
Recursion Basic Syntax ☆ A technique where a function calls itself to carry out processing.
Refactoring Development Methods & Design ☆ Reorganizing and improving code's internal structure without changing its external behavior.
Reference Counting Memory Management ☆ A scheme that counts how many places reference an object and frees it once that count reaches zero.
Remix Languages & Frameworks ☆ A React-based full-stack framework that emphasizes leaning on the web platform's built-in features.
REST API Development Methods & Design ☆ A standard API design style for web services, built around the mechanics of HTTP.
Return Value Basic Syntax ☆ The value returned as the result of a function's processing.
Ruby Languages & Frameworks ☆ An object-oriented language from Japan that prioritizes ease of writing.
Ruby on Rails Languages & Frameworks ☆ A highly productive web framework in Ruby, built around convention over configuration.
Rust Languages & Frameworks ☆ A relatively new language that combines memory safety with high performance.
Scala Languages & Frameworks ☆ A JVM-based language combining features of both object-oriented and functional programming.
Scope Basic Syntax ☆ The range within which a variable, for example, can be referenced.
Semantic Versioning Development Methods & Design ☆ A convention for expressing the compatibility of a change in a version number, in the form "major.minor.patch."
Semaphore Asynchronous Processing ☆ A concurrency-control mechanism that uses a counter to limit how many callers can access a resource at the same time.
Server-Side Rendering Development Methods & Design ☆ A rendering approach where a web page's initial HTML is generated on the server rather than in the browser.
Set Collections ☆ A data structure that stores elements without allowing duplicates.
Singleton Pattern Object-Oriented Programming ☆ A design pattern that guarantees a class has at most one instance.
SOLID Principles Development Methods & Design ☆ A set of five principles for creating maintainable designs.
SPA (Single Page Application) Development Methods & Design ☆ A web application architecture that loads the full page only once, then uses JavaScript to rewrite just parts of the screen from then on.
Spring Boot Languages & Frameworks ☆ A mechanism that simplifies Spring Framework configuration so development can start quickly.
Spring Framework Languages & Frameworks ☆ A framework for Java, widely used in enterprise system development.
Stack Collections ☆ A last-in, first-out data structure where the most recently added item is removed first.
Stack Area Memory Management ☆ A memory region where function-call information and the like is temporarily pushed.
Stack Trace Exception Handling ☆ A record showing where an exception occurred and how it was called.
Static Analysis Development Methods & Design ☆ A technique that analyzes source code to detect problems without actually running the program.
static Modifier Object-Oriented Programming ☆ A modifier marking a member as belonging to the class, usable without creating an instance.
Static Typing Basic Syntax ☆ A scheme where a variable's type is fixed at compile time.
Strategy Pattern Development Methods & Design ☆ A design pattern that extracts an algorithm as an interchangeable component that can be swapped out at runtime.
Stream API Collections ☆ A mechanism for describing collection operations as a single chain.
super Object-Oriented Programming ☆ A keyword used to refer to members of the parent class being inherited from.
Svelte Languages & Frameworks ☆ A JavaScript framework that compiles at build time to keep the runtime lightweight.
Swift Languages & Frameworks ☆ A programming language from Apple for iOS/macOS app development.
SwiftUI Languages & Frameworks ☆ A framework for building UI declaratively in Apple's Swift language.
switch Statement Basic Syntax ☆ A control construct that branches into multiple paths based on a single value.
Synchronous Processing Asynchronous Processing ☆ An execution scheme where the next step waits until one step finishes.
Tailwind CSS Languages & Frameworks ☆ A utility-first CSS framework for styling by combining small, single-purpose class names.
Ternary Operator Basic Syntax ☆ An operator that simplifies an if statement, letting a condition be written in one line.
Test Double Development Methods & Design ☆ An umbrella term for techniques that replace an external element a test subject depends on with a stand-in built for testing.
Test-Driven Development Development Methods & Design ☆ A development method where you write a test first, then implement code that satisfies it.
this Object-Oriented Programming ☆ A keyword used inside a method to refer to its own instance.
Thread Pool Asynchronous Processing ☆ A mechanism that creates a fixed number of threads in advance and reuses them.
Thread-Safe Asynchronous Processing ☆ The property of working correctly even when accessed simultaneously from multiple threads.
throw Exception Handling ☆ An operation that deliberately raises an exception.
Trait Object-Oriented Programming ☆ A reusable collection of methods used to add functionality to a class.
try-catch Exception Handling ☆ Syntax that wraps code that might throw an exception and separates out what happens if it does.
Tuple Collections ☆ A data structure that bundles values of different types together in a fixed order.
Type Inference Basic Syntax ☆ A mechanism where the compiler determines a type automatically, without it being written explicitly.
Type Safety Basic Syntax ☆ A property where operations that violate a data type are caught, at compile time or run time, to prevent unintended bugs.
TypeScript Languages & Frameworks ☆ A statically typed programming language that adds a type system to JavaScript.
Unchecked Exception Exception Handling ☆ A category of exception that occurs at runtime and isn't enforced at compile time.
Unit Test Development Methods & Design ☆ A test performed on a small unit, such as a function or class.
Variable Basic Syntax ☆ A named container for temporarily storing a value.
Vite Languages & Frameworks ☆ A next-generation frontend build tool focused on fast startup and updates during development.
Vue.js Languages & Frameworks ☆ A JavaScript framework with a gentle learning curve and easy to work with.
WebAssembly Languages & Frameworks ☆ A binary instruction format that runs in the browser at close to native speed.
Webpack Languages & Frameworks ☆ A module bundler that combines multiple JavaScript files, CSS, images, and more into one (or a few) output files.
while Statement Basic Syntax ☆ A control construct that repeats processing while a condition is true.
YAGNI Principle Development Methods & Design ☆ A software development principle cautioning against building anything beyond what's needed right now.
ABAC Authentication & Authorization ☆ An access-control approach that decides access based on attributes of the user and resource.
Access Token Authentication & Authorization ☆ Temporary credentials used to access an authorized resource.
Adware Malware ☆ Nuisance software that displays unwanted advertisements.
AES Encryption ☆ A symmetric-key encryption algorithm in widespread use today.
Air Gap Firewalls ☆ A defense technique that physically isolates a critical system from external networks, including the internet.
APT (Advanced Persistent Threat) Malware ☆ A sophisticated attacker or attack campaign that targets a specific organization and remains hidden inside it over a long period while evading detection.
Audit Log Compliance ☆ A log recorded so that who did what can be traced.
Authentication Authentication & Authorization ☆ Confirming that a user is who they claim to be.
Authentication Bypass Vulnerabilities ☆ Accessing a system by circumventing the legitimate authentication process.
Authorization Authentication & Authorization ☆ Deciding which actions an authenticated user is permitted to perform.
Biometric Authentication Authentication & Authorization ☆ An authentication method that verifies identity using physical traits such as a fingerprint or face.
Block Cipher Encryption ☆ An encryption method that splits data into fixed-size blocks before encrypting.
Blue Team Incident Response ☆ The defending team responsible for detecting and responding to an attack.
Botnet Malware ☆ A network of many infected devices controlled remotely as a group.
Buffer Overflow Vulnerabilities ☆ An attack that writes data past an allocated region to cause malfunction.
Bug Bounty Vulnerabilities ☆ A program that pays a reward to whoever reports a vulnerability they've found.
Business Continuity Plan Incident Response ☆ A plan (BCP) for continuing business operations even during a disaster or incident.
Business Email Compromise Malware ☆ Fraud that impersonates a business partner or executive to trick a victim into transferring money.
C2 Server Malware ☆ A command server attackers use to remotely control infected devices.
CASB Cloud Security ☆ A mechanism for gaining visibility into cloud service usage and applying policy.
Certificate Encryption ☆ Data by which a third party certifies that a public key belongs to its claimed owner.
Certificate Authority Encryption ☆ An organization that issues certificates and vouches for their trustworthiness.
CIS Benchmarks Compliance ☆ A guideline collecting secure configuration standards for OSes and middleware.
CIS Controls Compliance ☆ A practical security guideline that prioritizes actions for defending against cyberattacks.
Clickjacking Web Security ☆ An attack that disguises what's on screen to trick a user into an unintended click.
Cloud Shared Responsibility Model Cloud Security ☆ The idea that security responsibility is divided between a cloud provider and its customer.
CNAPP Cloud Security ☆ A framework that unifies the protection of cloud-native applications from development through operations.
Command Injection Vulnerabilities ☆ An attack that gets an unintended OS command executed via user input.
Container Image Scanning Vulnerabilities ☆ Examining a container image's OS packages and libraries for known vulnerabilities.
Content Security Policy Web Security ☆ A mechanism (CSP) that restricts where scripts and other resources can load from, to prevent XSS and similar attacks.
Context-Based Access Control Zero Trust ☆ An access-control approach that factors in context, such as location and time.
Continuous Verification Zero Trust ☆ The idea of continually re-verifying the legitimacy of access, rather than stopping after one authentication.
CORS Web Security ☆ A mechanism that controls resource sharing between different origins.
Credential Stuffing Authentication & Authorization ☆ An attack that reuses username/password combinations leaked from other services to attempt unauthorized logins.
CSIRT Incident Response ☆ A specialized team that responds when a security incident occurs.
CSPM Cloud Security ☆ A tool that continuously detects misconfigurations and risk in a cloud environment.
CSRF Vulnerabilities ☆ An attack that tricks a user into sending an unintended request.
CTEM Security Operations ☆ A security operations approach for continuously discovering an organization's attack surface, prioritizing risks, and addressing them on an ongoing basis.
CVE Vulnerabilities ☆ An identifier that assigns a unique number to a publicly disclosed vulnerability.
CVSS Vulnerabilities ☆ A common metric for scoring the severity of a vulnerability numerically.
CWE Vulnerabilities ☆ A common list for classifying and identifying types of vulnerability.
Cyber Kill Chain Security Operations ☆ A model that breaks a cyberattack down into a sequence of seven stages.
Dark Web Monitoring Security Operations ☆ A service that continuously watches for a company's leaked credentials or confidential information being sold or exposed on the dark web.
Data Breach Compliance ☆ Confidential or personal information leaking to the outside.
DDoS Attack Incident Response ☆ An attack that overwhelms a service by concentrating a flood of traffic from many compromised sources.
Deepfake Malware ☆ A technology that uses AI to generate realistic fake video or audio, abused for fraud and impersonation.
Defense in Depth Security Operations ☆ An approach to security that layers multiple defenses rather than relying on a single measure.
Device Authentication Zero Trust ☆ Verifying the trustworthiness of the connecting device itself, not just the user.
Device Posture Zero Trust ☆ The state indicating whether a connecting device meets security requirements.
DevSecOps Security Operations ☆ An approach that integrates development (Dev), security (Sec), and operations (Ops).
Digital Signature Encryption ☆ A mechanism that uses public-key cryptography to prove data's authenticity and its creator.
Directory Traversal Vulnerabilities ☆ An attack that improperly reads files in a directory it shouldn't have access to.
DMZ Firewalls ☆ A buffer zone for public-facing servers, placed between the external and internal networks.
DNS Rebinding Web Security ☆ An attack that switches a DNS resolution result mid-attack to bypass the same-origin policy and make a browser access an internal network.
EDR Malware ☆ A category of security product that detects and responds to suspicious behavior on an endpoint.
Elliptic Curve Cryptography Encryption ☆ A form of public-key cryptography that achieves strong security even with a short key length.
Exploit Vulnerabilities ☆ Attack code or a technique built specifically to take advantage of a vulnerability.
Fileless Malware Malware ☆ Malware that runs in memory instead of being saved to disk as a file.
Firewall Firewalls ☆ A mechanism that monitors traffic and blocks anything not permitted.
Forensics Incident Response ☆ Collecting and analyzing evidentiary data to determine the cause of an incident.
GDPR Compliance ☆ An EU regulation on the protection of personal data.
Golden Ticket Attack Malware ☆ An attack that abuses Active Directory's authentication system to forge a fraudulent ticket granting unlimited access to every resource in the domain.
Hash Function Encryption ☆ A function that produces a fixed-length value from arbitrary data, used for things like tamper detection.
HMAC Encryption ☆ A mechanism that uses a shared key to detect tampering with a message.
Honeypot Security Operations ☆ A deliberately vulnerable system set up to lure attackers and observe their methods.
HSTS Web Security ☆ A mechanism that instructs a browser to always connect over HTTPS.
HTTPS Web Security ☆ HTTP communication encrypted with TLS.
IAM Authentication & Authorization ☆ A general term for a system that centrally manages who can access what.
IDS Firewalls ☆ A mechanism that detects and reports signs of malicious traffic.
Incident Response Plan Incident Response ☆ A plan that predefines the steps to take when an incident occurs.
Initialization Vector Encryption ☆ An initial value varied on each encryption to eliminate predictable patterns.
Input Validation Web Security ☆ Processing that checks whether user input matches what's expected.
Insider Threat Incident Response ☆ The risk of data leaks or misconduct from employees or contractors who already hold legitimate access, rather than from an outside attacker.
IOC Incident Response ☆ Evidence indicating that an attack or breach has occurred.
IPS Firewalls ☆ A mechanism that detects malicious traffic and automatically blocks it.
ISO27001 Compliance ☆ An international standard for information security management.
Just-in-Time Access Zero Trust ☆ A mechanism that temporarily grants a permission only when it's actually needed.
JWT Authentication & Authorization ☆ A token format that represents things like authentication information compactly and tamper-evidently.
Kerberos Authentication & Authorization ☆ A protocol that uses tickets to authenticate securely over a network.
Key Stretching Encryption ☆ A technique that repeats hashing to increase the time needed to crack it.
Keylogger Malware ☆ Malware that secretly records what's typed on a keyboard.
Least Privilege Access Zero Trust ☆ The principle of granting only the minimum permission needed, each time.
Living off the Land Security Operations ☆ An attack technique that uses only tools already built into the OS.
Malware Malware ☆ An umbrella term for malicious software created to harm the user.
Man-in-the-Middle Attack Incident Response ☆ An attack where a third party inserts itself between two communicating parties to eavesdrop on or tamper with the traffic.
Microsegmentation Zero Trust ☆ A technique that finely partitions a network to minimize the blast radius of a breach.
MITRE ATT&CK Security Operations ☆ A knowledge base published by MITRE that systematically catalogs attacker tactics and techniques.
MTTD Incident Response ☆ The average time it takes to detect a threat or incident.
MTTR Incident Response ☆ The average time from an outage or incident occurring to recovery.
Multi-Factor Authentication Authentication & Authorization ☆ An authentication method that combines multiple different factors, such as a password, to verify identity.
Next-Generation Firewall Firewalls ☆ A firewall with advanced capabilities, such as identifying traffic at the application level.
NIST Compliance ☆ The US National Institute of Standards and Technology, which develops various security standards and guidelines.
OAuth Authentication & Authorization ☆ An authorization mechanism for delegating permission to another service without sharing a password.
One-Time Password Authentication & Authorization ☆ A single-use, disposable password.
OpenID Connect Authentication & Authorization ☆ A mechanism for verifying identity, built as an extension of OAuth.
OWASP Top 10 Vulnerabilities ☆ A ranking of the leading vulnerabilities found in web applications.
Packet Filtering Firewalls ☆ A mechanism that decides whether to let a packet through based on its header information.
Passkey Authentication & Authorization ☆ A mechanism for logging in securely via biometrics and the like, without a password.
Pass-the-Hash Attack Authentication & Authorization ☆ An attack that bypasses authentication using a stolen password hash directly, without needing to know the plaintext password.
Password Spraying Authentication & Authorization ☆ An attack that tries a small number of commonly used passwords against a large number of accounts.
Patch Management Vulnerabilities ☆ Systematically applying and managing security fixes.
PCI DSS Compliance ☆ A security standard required of businesses that handle credit card information.
Penetration Testing Vulnerabilities ☆ A test that simulates a real attack to verify whether intrusion is possible.
Perfect Forward Secrecy Encryption ☆ The property that past communication stays undecipherable even if a key later leaks.
Phishing Malware ☆ A fraud technique that tricks victims into handing over credentials via a fake site or similar.
PKI Encryption ☆ The overall infrastructure, including certificate issuance, for operating public-key cryptography securely.
Playbook Incident Response ☆ A document that predefines the response steps to take when an incident occurs.
Port Scan Firewalls ☆ Probing a target device from outside to find which ports are open.
Post-Quantum Cryptography Encryption ☆ A new class of cryptography designed to resist decryption by quantum computers.
Privilege Escalation Vulnerabilities ☆ Improperly gaining a higher privilege than one was granted.
Prompt Injection Vulnerabilities ☆ An attack technique that embeds malicious instructions in input to make an AI behave in unintended ways.
Proxy Firewall Firewalls ☆ A firewall that mediates and inspects traffic content at the application layer.
Public-Key Cryptography Encryption ☆ An encryption scheme that uses different keys (a public key and a private key) for encryption and decryption.
Purple Team Incident Response ☆ An activity where the attacking side (red team) and defending side (blue team) collaborate to improve detection and response capability.
Rainbow Table Attack Authentication & Authorization ☆ An attack that uses a precomputed table mapping hash values back to their original plaintext, to quickly crack a password from its hash.
Ransomware Malware ☆ Malware that encrypts data and demands payment in exchange for restoring it.
Rate Limiting Web Security ☆ A mechanism that caps the number of requests allowed in a given time period.
RBAC Authentication & Authorization ☆ An access-control approach that bundles permissions and assigns them per role.
Red Team Incident Response ☆ A team that plays the role of an attacker to test an organization's defenses.
Refresh Token Authentication & Authorization ☆ A token used to reissue an access token after it expires.
Remote Code Execution Vulnerabilities ☆ A vulnerability that lets an attacker execute arbitrary code on a target system.
Risk Assessment Compliance ☆ Identifying anticipated risks and evaluating their impact.
Risk-Based Authentication Authentication & Authorization ☆ A mechanism that requests additional authentication based on the risk of a login attempt.
Rootkit Malware ☆ A set of tools for maintaining unauthorized control of a system while hiding the traces of intrusion.
RSA Encryption ☆ A leading public-key cryptosystem based on the difficulty of factoring.
Salt Encryption ☆ A random value added before hashing a password, as a defense against cracking.
Same-Origin Policy Web Security ☆ A fundamental browser principle that restricts a script from one origin (a combination of domain, port, and protocol) from freely accessing resources on a different origin.
SAML Authentication & Authorization ☆ An XML-based standard for securely exchanging authentication information between organizations.
Sandbox Malware ☆ A mechanism for running a program in an isolated environment to safely observe its behavior.
SASE Zero Trust ☆ An approach that delivers networking and security functions together from the cloud.
SBOM Vulnerabilities ☆ An inventory list of the components (such as libraries) that make up a piece of software.
Secrets Management Cloud Security ☆ A mechanism for securely storing and managing secrets such as API keys and passwords.
Secure Coding Compliance ☆ The practice of writing code with care not to introduce vulnerabilities.
Security Awareness Training Compliance ☆ Education and training conducted to raise awareness across an organization.
Security Policy Compliance ☆ A document laying out an organization's security policy.
Session Hijacking Web Security ☆ An attack that steals someone else's session information to impersonate them.
Session Management Authentication & Authorization ☆ A mechanism for maintaining and managing login state over a period of time.
SHA-256 Encryption ☆ A widely used 256-bit hash function.
Shadow IT Cloud Security ☆ IT services or devices that employees have adopted and use on their own, without the knowledge or approval of the IT department.
Side-Channel Attack Vulnerabilities ☆ An attack technique that infers secret information, such as an encryption key, by observing physical side effects like processing time, power consumption, or electromagnetic emissions.
SIEM Security Operations ☆ A mechanism that aggregates logs from various devices and detects threats through correlation analysis.
Single Sign-On Authentication & Authorization ☆ A mechanism that lets one authentication cover access to multiple services.
SOAR Security Operations ☆ A mechanism that automates security operations from detection through response.
SOC Incident Response ☆ An organization or facility specialized in security monitoring and analysis.
SOC 2 Compliance ☆ An internationally recognized assurance standard for evaluating internal controls around information security.
Social Engineering Malware ☆ An umbrella term for attack techniques that exploit human psychology and assumptions, rather than technical vulnerabilities, to steal information.
Spear Phishing Malware ☆ A targeted phishing attack aimed at a specific individual.
Spoofing Authentication & Authorization ☆ An umbrella term for pretending to be another person or system in order to gain unauthorized access or communication.
Spyware Malware ☆ Software that collects information and sends it out without the user noticing.
SQL Injection Vulnerabilities ☆ An attack that injects malicious SQL to manipulate a database.
SSRF Vulnerabilities ☆ An attack that uses a server as a stepping stone to reach internal resources it shouldn't be able to access.
Stateful Inspection Firewalls ☆ A method that remembers connection state and decides to allow or deny traffic based on context.
Stream Cipher Encryption ☆ An encryption method that continuously encrypts data one bit or byte at a time.
STRIDE Security Operations ☆ A threat modeling method devised by Microsoft that classifies threats into six categories.
Subresource Integrity Web Security ☆ A mechanism that uses a hash value to verify that an externally loaded file, such as JavaScript, has not been tampered with.
Supply Chain Attack Vulnerabilities ☆ An attack carried out through a peripheral route, such as a business partner or a library in use.
Symmetric-Key Cryptography Encryption ☆ An encryption scheme that uses the same key for both encryption and decryption. Fast to process.
Targeted Attack Malware ☆ An attack aimed at a specific organization or individual.
Threat Hunting Security Operations ☆ Proactively searching for signs of a threat instead of waiting for a detection alert.
Threat Intelligence Security Operations ☆ Collected and analyzed information about attackers' methods and trends.
Threat Modeling Security Operations ☆ A technique for identifying likely threats during a system's design phase.
TLS Encryption ☆ The current protocol for encrypting a communication channel, the successor to SSL.
TOTP Authentication & Authorization ☆ A one-time-password scheme where the password changes at fixed intervals based on time.
Triage Incident Response ☆ Assessing the severity of incidents that have occurred and prioritizing them.
Trojan Horse Malware ☆ A malicious program that infiltrates a system disguised as legitimate software.
Typosquatting Incident Response ☆ A technique that registers a lookalike fake domain to catch typos of a well-known domain name.
UTM Firewalls ☆ A security appliance that integrates multiple functions, such as a firewall and IPS, into a single device.
Virus Malware ☆ A type of malware that attaches to other programs and self-replicates.
Vulnerability Vulnerabilities ☆ A security weakness present in a system.
Vulnerability Assessment Vulnerabilities ☆ Investigating a system for weaknesses.
WAF Firewalls ☆ A dedicated firewall for blocking attacks aimed at web applications.
Watering Hole Attack Incident Response ☆ An attack technique that compromises a website a target frequently visits and lies in wait to infect them.
Worm Malware ☆ Malware that spreads on its own over a network, without attaching to another program.
XDR Malware ☆ A mechanism that detects threats by integrating detection data across multiple domains, not just endpoints.
XSS Vulnerabilities ☆ An attack technique that gets a malicious script embedded into a web page.
XXE Vulnerabilities ☆ An attack that abuses XML external entity references to read internal information.
Zero Trust Zero Trust ☆ The idea that even an internal network shouldn't be trusted unconditionally.
Zero-Day Vulnerability Vulnerabilities ☆ A vulnerability exploited before a fix is available.
ZTNA Zero Trust ☆ A mechanism, based on zero trust principles, that individually verifies and authorizes access to internal applications on a per-user, per-device basis.
ActiveMQ Web Servers & Middleware ☆ Message-broker software supporting a variety of protocols.
Airbyte Other Products ☆ An open-source ELT/data integration tool that moves data from a wide variety of sources into a data warehouse and other destinations.
Airflow DevOps Tools ☆ An open-source workflow management tool for defining task dependencies and running them on a schedule.
Android Other Products ☆ An open-source mobile OS developed primarily by Google.
Ansible DevOps Tools ☆ An open-source tool for configuration management and automation that requires no agent.
Apache HTTP Server Web Servers & Middleware ☆ A leading open-source web server used widely around the world.
Apache Superset Other Products ☆ An open-source business intelligence (BI) tool that lets you build dashboards and charts without writing SQL.
Argo Rollouts DevOps Tools ☆ An open-source tool for advanced control over canary releases and blue-green deployments on Kubernetes.
ArgoCD DevOps Tools ☆ An open-source tool for continuous deployment to Kubernetes.
Audacity Other Products ☆ A go-to audio-editing tool for recording and editing sound.
Authelia Security Tools ☆ An open-source authentication server providing single sign-on and multi-factor authentication for self-hosted environments.
Authentik Security Tools ☆ A self-hostable, open-source identity and access management (IAM) platform.
AWX DevOps Tools ☆ Open-source infrastructure that lets you manage Ansible runs through a web UI and API.
BIND Network Operations Tools ☆ The most widely used open-source DNS server software.
Blender Other Products ☆ A free, open-source 3D-content-creation tool.
Boundary Security Tools ☆ An open-source tool from HashiCorp that brokers secure, identity-based access to infrastructure without exposing credentials.
Cacti Monitoring Tools ☆ A traffic-monitoring tool that graphs values collected via SNMP.
Caddy Web Servers & Middleware ☆ Web server software that automatically obtains and renews HTTPS certificates.
Ceph Backup & Storage ☆ A distributed storage system supporting block, file, and object storage.
cert-manager DevOps Tools ☆ A tool that automates issuing and renewing TLS certificates on Kubernetes.
Chef DevOps Tools ☆ A tool for automating server configuration by writing steps in Ruby.
Chromium Other Products ☆ The open-source project that underlies many browsers.
Cilium Network Operations Tools ☆ A fast networking and security foundation for Kubernetes built on eBPF.
ClamAV Security Tools ☆ Open-source antivirus software commonly used on mail servers and elsewhere.
Cloud-init Virtualization / Infrastructure ☆ A mechanism that automatically applies initial configuration the first time a VM boots.
Consul DevOps Tools ☆ A tool for service discovery and health checking, aimed at service meshes.
containerd Virtualization / Infrastructure ☆ An industry-standard container runtime focused on managing the container lifecycle.
Coolify DevOps Tools ☆ A self-hosted PaaS tool that brings the convenience of services like Heroku or Vercel to your own server.
CoreDNS Network Operations Tools ☆ A plugin-based DNS server written in Go.
CrowdSec Security Tools ☆ A collaborative security tool that analyzes logs to detect and block malicious access.
dbt Other Products ☆ An open-source tool for managing data transformations inside a data warehouse using SQL.
dnsmasq Network Operations Tools ☆ Lightweight open-source software that combines DNS caching and DHCP server functionality.
Docker DevOps Tools ☆ An open-source container technology that lightweightly packages an app together with its environment.
Docker Compose DevOps Tools ☆ A tool that lets you define and launch a multi-container application all at once from a single configuration file.
Drupal Business & CMS Tools ☆ A CMS with flexible extensibility, geared toward large sites.
Duplicati Backup & Storage ☆ Backup software for the cloud that supports encryption and compression.
Elastic Stack Monitoring Tools ☆ The umbrella name for a log-collection and analytics stack combining Elasticsearch, Logstash, Kibana, and more.
Envoy Web Servers & Middleware ☆ A high-performance proxy designed for microservices.
etcd Virtualization / Infrastructure ☆ A reliable, distributed key-value store used for storing configuration data.
Fail2ban Security Tools ☆ A tool that watches logs and automatically blocks the source IP of unauthorized access.
Flink Other Products ☆ An open-source distributed processing engine with a strength in low-latency stream processing.
Fluentd Monitoring Tools ☆ A unified log-collection tool that gathers and forwards logs from a wide range of data sources.
Flux CD DevOps Tools ☆ A GitOps tool that automatically applies the state of a Git repository to Kubernetes.
Ghost Business & CMS Tools ☆ An open-source publishing platform specialized in blogging and newsletter delivery.
GIMP Other Products ☆ A free, open-source image editor.
Git DevOps Tools ☆ An open-source, distributed version-control system.
Gitea DevOps Tools ☆ Lightweight, self-hosted Git repository management software.
GitLab DevOps Tools ☆ A platform that handles everything from repository management to CI/CD in one place.
GLPI Business & CMS Tools ☆ An open-source tool combining IT asset management and help-desk features.
GlusterFS Backup & Storage ☆ A mechanism that pools disks from multiple servers into a single distributed file system.
Grafana Monitoring Tools ☆ An open-source tool for visualizing collected metrics on a dashboard.
Grafana Mimir Monitoring Tools ☆ An open-source time-series database that can store Prometheus-format metrics at long-term, large scale.
Grafana Tempo Monitoring Tools ☆ An open-source distributed tracing backend from Grafana Labs that visualizes the path a request takes through a system.
HAProxy Web Servers & Middleware ☆ A high-performance, open-source load balancer and proxy.
Helm DevOps Tools ☆ A tool for packaging and managing application configuration for Kubernetes.
Home Assistant Business & CMS Tools ☆ An open-source home-automation platform for centrally managing smart devices at home.
Icinga2 Monitoring Tools ☆ A monitoring tool derived from Nagios, offering more features and geared toward larger deployments.
Immich Backup & Storage ☆ Self-hosted, open-source software that automatically backs up photos and videos from a smartphone.
Inkscape Other Products ☆ A go-to graphics tool for creating and editing vector images.
iperf Network Operations Tools ☆ A tool for measuring the effective network bandwidth between two points.
Istio Web Servers & Middleware ☆ A service mesh for controlling and visualizing communication between microservices.
Jaeger Monitoring Tools ☆ An open-source tool for distributed tracing in microservice environments.
Jenkins DevOps Tools ☆ A long-established, leading open-source CI/CD tool.
Joomla Business & CMS Tools ☆ A go-to CMS that has long been used alongside WordPress.
K3d DevOps Tools ☆ A tool for easily running the lightweight Kubernetes distribution "k3s" inside Docker containers.
k3s Virtualization / Infrastructure ☆ A lightweight Kubernetes distribution built for edge environments.
k9s DevOps Tools ☆ A TUI tool for visually operating a Kubernetes cluster from the terminal.
Kafka Web Servers & Middleware ☆ A distributed messaging system that handles large volumes of event data in real time.
KeePass Other Products ☆ Password-management software that encrypts and centrally manages your passwords.
Keycloak Security Tools ☆ An open-source identity and access management platform providing SSO and user management.
Kibana Monitoring Tools ☆ A tool for visualizing and analyzing Elasticsearch data.
kind DevOps Tools ☆ A tool for spinning up a Kubernetes cluster inside Docker containers, aimed at local development.
Kong Web Servers & Middleware ☆ A high-performance, open-source API gateway built on Nginx.
Kubernetes DevOps Tools ☆ An open-source container-orchestration tool that originated at Google.
kustomize DevOps Tools ☆ A tool for customizing Kubernetes manifests without using templates.
KVM Virtualization / Infrastructure ☆ A virtualization capability built into the Linux kernel.
LibreNMS Network Operations Tools ☆ A tool that auto-discovers and monitors many network devices over SNMP.
LibreOffice Other Products ☆ A free, open-source office suite.
Linkerd Network Operations Tools ☆ A service mesh for Kubernetes designed with a focus on being lightweight.
Logstash Monitoring Tools ☆ A tool that collects and transforms various logs and ships them to destinations such as Elasticsearch.
Loki Monitoring Tools ☆ A log-aggregation and search system used together with Grafana.
Longhorn Backup & Storage ☆ An open-source distributed block storage system for Kubernetes.
LXD Virtualization / Infrastructure ☆ A tool developed by Canonical for managing system containers.
Mattermost Business & CMS Tools ☆ An open-source chat-collaboration tool you can run on your own server.
MediaWiki Business & CMS Tools ☆ Wiki-building software also used by Wikipedia.
Memcached Web Servers & Middleware ☆ Middleware that caches data in memory to speed up access.
Metabase Business & CMS Tools ☆ An open-source BI tool for visualizing and analyzing data without needing specialist expertise.
Metasploit Security Tools ☆ A penetration-testing framework for verifying vulnerabilities.
Minikube DevOps Tools ☆ A tool for running a single-node Kubernetes cluster on a local PC.
MinIO Backup & Storage ☆ Self-hosted object storage with an S3-compatible API.
Moodle Business & CMS Tools ☆ An e-learning system for delivering and managing online courses.
MRTG Network Operations Tools ☆ A long-standing tool that pulls traffic volume via SNMP and graphs it.
Munin Monitoring Tools ☆ A monitoring tool that automatically graphs server resource usage.
Nagios Monitoring Tools ☆ A long-standing open-source tool specialized in up/down monitoring of services and hosts.
NATS Web Servers & Middleware ☆ Lightweight, high-speed messaging infrastructure software.
NetBox Network Operations Tools ☆ An IPAM/DCIM tool that centrally manages network-device configuration data and IP addresses.
Netdata Monitoring Tools ☆ A monitoring tool that visualizes detailed system metrics in real time.
Netdisco Network Operations Tools ☆ A tool that automatically discovers network devices and manages their configuration and topology.
Nextcloud Business & CMS Tools ☆ An open-source cloud-storage platform for file sharing and syncing on your own server.
Nginx Web Servers & Middleware ☆ A lightweight, fast web server also widely used as a reverse proxy.
Nmap Security Tools ☆ A tool for probing hosts and open ports on a network.
Nomad DevOps Tools ☆ An orchestration tool for scheduling containers and applications.
ntopng Monitoring Tools ☆ A tool for visualizing and analyzing network traffic in real time.
OBS Studio Other Products ☆ Go-to broadcasting software used for screen streaming and recording.
Observium Network Operations Tools ☆ A monitoring tool that auto-discovers network devices and collects and visualizes performance data.
Odoo Business & CMS Tools ☆ An open-source, integrated business software (ERP) that offers a wide range of functions—accounting, inventory, CRM, HR, and more—as modules.
OpenBao DevOps Tools ☆ An open-source secrets management tool forked from HashiCorp Vault.
OpenSearch Other Products ☆ An open-source search and analytics engine forked from Elasticsearch.
OpenStack Virtualization / Infrastructure ☆ A collection of open-source software for building cloud infrastructure, made up of multiple components.
OpenTelemetry Monitoring Tools ☆ An industry-standard set of specifications and implementations for uniformly collecting metrics, logs, and traces.
OpenTofu DevOps Tools ☆ A community-driven fork of Terraform, created to keep the tool open source.
OpenVAS Security Tools ☆ A tool that comprehensively scans systems for vulnerabilities.
OpenVPN Security Tools ☆ An open-source VPN software that builds a secure communication channel using SSL/TLS-based mechanisms.
OPNsense Security Tools ☆ An open-source firewall/router OS derived from pfSense.
oVirt Virtualization / Infrastructure ☆ A KVM-based virtualization-management platform for enterprises.
ownCloud Business & CMS Tools ☆ Software for building a file-sharing and syncing environment on your own server.
Packer DevOps Tools ☆ A tool for building machine images for various environments from the same configuration.
pfSense Security Tools ☆ An open-source firewall/router OS based on FreeBSD.
phpIPAM Network Operations Tools ☆ An open-source IPAM (IP address management) tool for managing IP address and subnet allocation.
phpMyAdmin Business & CMS Tools ☆ An administration tool for operating MySQL from a browser.
Pi-hole Network Operations Tools ☆ A self-hosted network tool that blocks ads and trackers at the DNS level.
Portainer Virtualization / Infrastructure ☆ A container management tool that lets you manage Docker and Kubernetes environments through a GUI.
Prometheus Monitoring Tools ☆ An open-source tool used for metrics collection and monitoring.
Proxmox Backup Server Backup & Storage ☆ An open-source backup solution specialized for virtual machines and containers, designed to work with Proxmox VE.
Proxmox Datacenter Manager Virtualization / Infrastructure ☆ A centralized management tool from Proxmox for overseeing multiple Proxmox VE clusters from a single interface.
Proxmox Mail Gateway Security Tools ☆ An open-source email security gateway from Proxmox that protects mail servers from spam and malware.
Proxmox VE Virtualization / Infrastructure ☆ An open-source virtualization platform unifying KVM and LXC.
Puppet DevOps Tools ☆ A configuration-management tool for declaratively managing server configuration as code.
QEMU Virtualization / Infrastructure ☆ Virtualization software that can emulate a variety of architectures.
RabbitMQ Web Servers & Middleware ☆ An open-source message broker for exchanging messages asynchronously.
Rclone Backup & Storage ☆ A command-line tool for syncing and transferring files between many different cloud storage services.
Restic Backup & Storage ☆ An open-source backup tool with deduplication and encryption.
Rocket.Chat Business & CMS Tools ☆ A chat and communication tool you can run on your own server.
Smokeping Network Operations Tools ☆ A tool that continuously graphs and records connectivity and latency trends over time.
Snort Security Tools ☆ A veteran IDS/IPS that detects malicious traffic through pattern matching.
Spark Other Products ☆ An open-source engine for fast, distributed processing of large-scale data.
Spinnaker DevOps Tools ☆ A tool for continuous delivery spanning multiple clouds.
Suricata Security Tools ☆ An open-source engine for network intrusion detection and prevention (IDS/IPS).
Talos Linux Virtualization / Infrastructure ☆ A minimal Linux distribution built solely for running Kubernetes.
Tekton DevOps Tools ☆ A tool that runs on Kubernetes for building CI/CD pipelines.
Telegraf Monitoring Tools ☆ A plugin-based agent for collecting a wide range of metrics.
Terraform DevOps Tools ☆ An IaC tool for managing infrastructure as code. Strictly speaking, no longer OSS since its 2023 license change.
Thanos Monitoring Tools ☆ An open-source extension that adds long-term storage and horizontal scaling to Prometheus.
Thunderbird Other Products ☆ A go-to email client developed by Mozilla.
Tomcat Web Servers & Middleware ☆ An open-source application server for running Java servlets.
Traefik Web Servers & Middleware ☆ A modern reverse proxy that integrates easily with container environments.
Trivy Security Tools ☆ An open-source scanner that detects vulnerabilities in container images and IaC code.
Unbound Network Operations Tools ☆ An open-source, caching DNS resolver specialized in recursive queries.
Uptime Kuma Monitoring Tools ☆ A simple, self-hosted uptime and status monitoring tool.
Vagrant DevOps Tools ☆ A tool for easily building and sharing development VMs.
Varnish Web Servers & Middleware ☆ A caching server that speeds up delivery of web content.
Vault DevOps Tools ☆ A tool for securely storing and managing secrets such as passwords and API keys.
Vaultwarden Security Tools ☆ A lightweight, open-source server implementation compatible with the "Bitwarden" password manager client.
Velero Backup & Storage ☆ A tool for backing up and restoring Kubernetes resources and persistent volumes.
VirtualBox Virtualization / Infrastructure ☆ Desktop virtualization software you can easily run on your own PC.
VLC Other Products ☆ A go-to media player that can play almost any video or audio format.
Wazuh Monitoring Tools ☆ An open-source security-monitoring platform for log monitoring and intrusion detection.
WireGuard Security Tools ☆ A VPN protocol/implementation that's fast and highly secure through a simple design.
Wireshark Security Tools ☆ A tool for capturing and analyzing network packets in detail.
WordPress Business & CMS Tools ☆ The world's most widely used open-source CMS (content management system).
Xen Virtualization / Infrastructure ☆ An open-source project implementing hypervisor-style virtualization.
Zabbix Monitoring Tools ☆ An open-source monitoring tool that can monitor the state of servers and network devices in one place.
Zeek Network Operations Tools ☆ A tool that analyzes network traffic and is also used for security monitoring.
Zookeeper Virtualization / Infrastructure ☆ An open-source tool for sharing configuration data and handling leader election in distributed systems.
1Password Identity & Authentication ☆ A Canadian company providing a service for securely managing passwords and other sensitive information in one place.
Adobe US Big Tech ☆ A company known for creative software such as Photoshop.
Akamai Independent Cloud & CDN ☆ A veteran internet company that operates one of the world's largest CDNs.
Algolia API & Developer Infrastructure ☆ A search-focused SaaS company that lets you embed site search as an API.
Amazon US Big Tech ☆ A company that started as an e-commerce site and now leads the cloud market with AWS.
AMD Semiconductors & Hardware ☆ A semiconductor company that makes both CPUs and GPUs.
AMS-IX IX & Peering Providers ☆ One of the world's leading internet exchange operators, based in Amsterdam, the Netherlands.
Anthropic AI Specialist Companies ☆ A company focused on AI safety, developer of Claude and Claude Code.
Apple US Big Tech ☆ A company known for products that tightly integrate hardware and software, such as the iPhone and Mac.
Arelion Backbone & Telecom Carriers ☆ Formerly Telia Carrier, a telecom operator with one of the world's largest backbone networks.
Arista Networks Network Equipment Vendors ☆ A vendor with particular strength in data-center switches.
ARM Semiconductors & Hardware ☆ A company that licenses power-efficient processor designs to other companies.
Atlassian Dev Tools & OSS Companies ☆ A company that provides development and collaboration tools such as Jira and Confluence.
Auth0 Identity & Authentication ☆ A company providing embeddable authentication and authorization for applications, now part of Okta.
Backblaze Independent Cloud & CDN ☆ A U.S. company known for its low-cost object storage service "B2" and its PC backup service.
BBIX IX & Peering Providers ☆ A SoftBank Group company specializing in internet exchanges, with interconnection points across Japan.
Bitwarden Identity & Authentication ☆ A company that develops an open-source password manager.
Broadcom Semiconductors & Hardware ☆ A company combining semiconductor design with a software business built through acquisitions such as VMware.
Canonical Dev Tools & OSS Companies ☆ A UK-based company that develops the Ubuntu Linux distribution.
Cerebras Systems Semiconductors & Hardware ☆ A U.S. semiconductor company known for its "WSE," a massive AI chip built from an entire silicon wafer.
Check Point Security Vendors ☆ A security vendor regarded as a pioneer of firewall products.
CircleCI Dev Tools & OSS Companies ☆ A US company providing a cloud-based CI/CD service.
Cisco Systems Network Equipment Vendors ☆ A leading vendor of networking equipment such as routers and switches.
Citrix Virtualization ☆ A company known for virtual desktop infrastructure (VDI), now part of Cloud Software Group.
Cloudera Database Specialist Vendors ☆ A US company that has provided enterprise big-data platforms built around Hadoop.
Cloudflare Independent Cloud & CDN ☆ An internet infrastructure company known for its CDN and security services.
Cloudinary API & Developer Infrastructure ☆ A U.S. company providing image and video upload, transformation, optimization, and delivery through an API.
Cockroach Labs Database Specialist Vendors ☆ A U.S. company that develops CockroachDB, a distributed SQL database.
Cogent Communications Backbone & Telecom Carriers ☆ A telecom operator with one of the world's largest backbone networks.
Cohere AI Specialist Companies ☆ A Canadian AI company building large language models for enterprise use.
Confluent Database Specialist Vendors ☆ A streaming-data company founded by the team that developed Apache Kafka.
CoreWeave Independent Cloud & CDN ☆ A cloud infrastructure company specializing in GPU cloud for AI.
Couchbase Database Specialist Vendors ☆ A company focused on NoSQL databases.
CrowdStrike Security Vendors ☆ A company known for endpoint security (EDR).
CyberArk Identity & Authentication ☆ An identity and access vendor specializing in privileged access management (PAM).
Darktrace Security Vendors ☆ A security vendor whose AI-based anomaly detection autonomously responds to cyberattacks.
Databricks Database Specialist Vendors ☆ A company known for its data-analytics platform and the "lakehouse" concept.
Datadog Observability & Monitoring ☆ A company known for cloud monitoring and observability products.
DE-CIX IX & Peering Providers ☆ An internet exchange operator based in Frankfurt, Germany, handling some of the highest traffic volumes in the world.
Dell Technologies Semiconductors & Hardware ☆ A major hardware vendor covering PCs, servers, and more.
Digital Realty Data Center & Colocation ☆ An operator with data centers across the world.
DigitalOcean Independent Cloud & CDN ☆ A company providing simple cloud services aimed at developers.
Docker Inc. Dev Tools & OSS Companies ☆ The company that created the Docker container technology.
Duo Security Identity & Authentication ☆ A company providing security services centered on multi-factor authentication (MFA), now part of Cisco.
Dynatrace Observability & Monitoring ☆ A company known for AI-driven observability products.
Elastic Database Specialist Vendors ☆ The company behind the Elasticsearch search engine.
Equinix Data Center & Colocation ☆ One of the world's largest data-center colocation operators.
Extreme Networks Network Equipment Vendors ☆ A vendor known for enterprise networking equipment.
F5 Network Equipment Vendors ☆ A networking-equipment vendor known for its load balancer products.
Fastly Independent Cloud & CDN ☆ A company known for edge computing and its CDN.
Fortinet Security Vendors ☆ A security vendor known for its integrated firewall products.
GitHub Dev Tools & OSS Companies ☆ A company providing a developer platform built around hosting Git repositories.
GitLab Inc. Dev Tools & OSS Companies ☆ The company that develops and provides GitLab.
GoDaddy Registrars & DNS ☆ One of the world's largest domain registrars.
Google US Big Tech ☆ A company known for its search engine, with a broad portfolio spanning Android, Google Cloud, and more.
Grafana Labs Observability & Monitoring ☆ The company behind the Grafana visualization tool.
Groq Semiconductors & Hardware ☆ A U.S. semiconductor company whose dedicated AI inference chip, the "LPU," is known for its remarkable response speed.
HashiCorp Dev Tools & OSS Companies ☆ A developer of infrastructure OSS tools such as Terraform, now part of IBM.
Hetzner Independent Cloud & CDN ☆ A German hosting company known for low-cost dedicated servers and VPS instances.
Honeycomb Observability & Monitoring ☆ An observability company with a strength in high-cardinality data analysis.
HPE Network Equipment Vendors ☆ An IT vendor with a broad lineup spanning servers and networking equipment.
IBM US Big Tech ☆ A company with a long history in mainframes and enterprise IT services.
IDC Frontier Data Center & Colocation ☆ A Japanese data-center and cloud provider.
IIJ Backbone & Telecom Carriers ☆ A pioneering Japanese internet service provider with strength in backbone operations.
Intel Semiconductors & Hardware ☆ A semiconductor company that has long led the industry in PC CPUs.
JFrog Dev Tools & OSS Companies ☆ An Israeli-founded company known for its artifact management tool, Artifactory.
JPIX IX & Peering Providers ☆ One of Japan's three major internet exchanges, operating one of the country's largest interconnection points.
JPNAP IX & Peering Providers ☆ A major Japanese internet exchange run by a joint venture between IIJ and NTT Communications.
Juniper Networks Network Equipment Vendors ☆ A networking-equipment vendor with particular strength in carrier-grade gear.
Kaspersky Security Vendors ☆ A globally operating security-product vendor founded in Russia.
KDDI Backbone & Telecom Carriers ☆ A major Japanese telecommunications carrier, also known for its "au" mobile phone brand.
Linode Independent Cloud & CDN ☆ A cloud provider known for low-cost VPS (virtual private server) instances, now owned by Akamai.
LINX IX & Peering Providers ☆ A London-based internet exchange operator that underpins interconnection across Europe.
Lumen Technologies Backbone & Telecom Carriers ☆ A major US backbone telecom operator.
MariaDB plc Database Specialist Vendors ☆ The company behind MariaDB, a MySQL-derived database.
Meta US Big Tech ☆ A social-media company that runs Facebook, Instagram, and more.
Micron Technology Semiconductors & Hardware ☆ A US semiconductor maker whose core business is DRAM and NAND flash memory.
Microsoft US Big Tech ☆ An IT company known for Windows, its Office products, and Azure.
MikroTik Network Equipment Vendors ☆ A Latvian network equipment vendor known for its affordable, feature-rich RouterOS.
Mistral AI AI Specialist Companies ☆ A French generative-AI company, developer of Le Chat and other products.
MongoDB Inc. Database Specialist Vendors ☆ The company behind the document-oriented database MongoDB.
Mozilla Dev Tools & OSS Companies ☆ The nonprofit organization behind the Firefox web browser.
Neo4j, Inc. Database Specialist Vendors ☆ The company behind Neo4j, a leading graph database.
NetApp Storage ☆ A company known for enterprise storage products.
NETGEAR Network Equipment Vendors ☆ A vendor known for networking equipment aimed at homes and small businesses.
Netlify Dev Tools & OSS Companies ☆ A U.S. company specializing in hosting and deployment for static sites and frontend applications.
Netskope Security Vendors ☆ A US cloud security vendor centered on SASE and SSE.
New Relic Observability & Monitoring ☆ A pioneering company in application performance monitoring (APM).
NS1 Registrars & DNS ☆ A company known for managed DNS services, now part of IBM.
NTT Communications Backbone & Telecom Carriers ☆ A company covering a broad range of telecom infrastructure, including international lines and data centers.
Nutanix Virtualization ☆ A company known for hyperconverged infrastructure (HCI).
NVIDIA US Big Tech ☆ A company building growing influence in AI semiconductors, centered on GPUs.
Okta Identity & Authentication ☆ A company known for identity management and single sign-on (SSO).
OpenAI AI Specialist Companies ☆ A leading generative-AI company, developer of ChatGPT and the GPT model series.
Oracle US Big Tech ☆ An IT company widely known for its database products.
OVHcloud Independent Cloud & CDN ☆ A French company that is one of Europe's largest independent cloud providers.
Palantir Technologies US Big Tech ☆ A US company providing large-scale data integration and analytics platforms for government agencies and large enterprises.
Palo Alto Networks Security Vendors ☆ A security vendor known for its next-generation firewalls.
Percona Database Specialist Vendors ☆ A company known for commercial support of MySQL and PostgreSQL.
Perplexity AI AI Specialist Companies ☆ The company behind the AI search engine Perplexity.
Ping Identity Identity & Authentication ☆ A company known for enterprise identity-management products.
Plaid API & Developer Infrastructure ☆ A fintech company providing an API for connecting bank accounts to applications.
Postman API & Developer Infrastructure ☆ A company known for its API development and testing tool.
Proofpoint Security Vendors ☆ A U.S. security vendor specializing in email security, including defenses against targeted attack emails and phishing.
Pure Storage Storage ☆ A company known for all-flash storage.
Qualcomm Semiconductors & Hardware ☆ A semiconductor company with a major share of the smartphone-chip market.
Qualys Security Vendors ☆ A security vendor known for its cloud-based vulnerability management platform, VMDR.
Rackspace Technology Independent Cloud & CDN ☆ A US company that was a pioneer in managed cloud services.
Rapid7 Security Vendors ☆ A US security vendor known for its vulnerability management tool, InsightVM.
Red Hat Dev Tools & OSS Companies ☆ A company known for its business model of providing open-source software with commercial support.
Redis, Inc. Database Specialist Vendors ☆ The company behind the in-memory database Redis.
Sakura Internet Data Center & Colocation ☆ A major Japanese data-center and hosting provider.
Salesforce US Big Tech ☆ A company known for cloud services centered on CRM.
SambaNova Systems Semiconductors & Hardware ☆ A semiconductor startup building inference chips for agentic AI workloads.
Samsung Semiconductors & Hardware ☆ A South Korean conglomerate and the world's largest maker of memory semiconductors.
Scaleway Independent Cloud & CDN ☆ An independent cloud provider based in France.
Seagate Storage ☆ A storage-device maker known for HDDs and SSDs.
SendGrid API & Developer Infrastructure ☆ A company known for its email-delivery API.
SentinelOne Security Vendors ☆ A company known for AI-driven, autonomous endpoint security.
Sentry Observability & Monitoring ☆ The company behind an error-tracking service that detects application errors and exceptions and notifies developers.
ServiceNow US Big Tech ☆ A US company providing a cloud platform for centrally managing enterprise IT operations and workflows.
SK hynix Semiconductors & Hardware ☆ A major South Korean semiconductor manufacturer that produces DRAM and NAND flash memory.
Snowflake Database Specialist Vendors ☆ A company known for its cloud data warehouse.
Snyk Security Vendors ☆ A developer-first security company providing vulnerability scanning for open-source software.
Sophos Security Vendors ☆ A UK security vendor known for integrated security products aimed at small and midsize businesses.
Splunk Observability & Monitoring ☆ A company known for log analytics and SIEM products, now part of Cisco Systems.
Stability AI AI Specialist Companies ☆ A U.K.-based AI company that develops the image-generation AI "Stable Diffusion."
Stripe API & Developer Infrastructure ☆ A developer-focused payments infrastructure company known for its payments API.
SUSE Dev Tools & OSS Companies ☆ A German company that develops the openSUSE and SUSE Linux Enterprise distributions.
Symantec Security Vendors ☆ A security vendor long known for antivirus software, among other products.
Tata Communications Backbone & Telecom Carriers ☆ An international telecom infrastructure operator originating in India.
Tenable Security Vendors ☆ A U.S. security vendor specializing in vulnerability management, known for its vulnerability scanner "Nessus."
Teradata Database Specialist Vendors ☆ A veteran company in data-warehouse products.
Timescale Database Specialist Vendors ☆ The company behind the time-series database TimescaleDB.
Trend Micro Security Vendors ☆ A globally operating security-product vendor founded in Japan.
TSMC Semiconductors & Hardware ☆ The world's largest contract semiconductor manufacturer.
Twilio API & Developer Infrastructure ☆ A company that provides communications APIs, such as SMS and voice.
Ubiquiti Network Equipment Vendors ☆ A U.S. company known for its "UniFi" brand of networking equipment.
Vercel Dev Tools & OSS Companies ☆ The company behind Next.js, offering a hosting and deployment service focused on frontend apps.
VeriSign Registrars & DNS ☆ A company that operates core TLDs such as .com and .net, along with DNS infrastructure.
VMware Virtualization ☆ A company known for server virtualization products, now part of Broadcom.
Vonage API & Developer Infrastructure ☆ A U.S. company providing communication APIs that let developers embed voice calling and SMS into their applications.
Vultr Independent Cloud & CDN ☆ An independent cloud provider offering simple cloud infrastructure.
Western Digital Storage ☆ A major maker of storage devices such as HDDs and SSDs.
Wiz Security Vendors ☆ An Israeli-founded company providing cloud security that can be deployed without agents.
Workday US Big Tech ☆ A US company offering cloud-based ERP software for HR and financial management.
xAI AI Specialist Companies ☆ An AI company founded by Elon Musk, developer of Grok.
Zayo Backbone & Telecom Carriers ☆ An infrastructure telecom operator built primarily around fiber-optic networks.
Zoom Video Communications US Big Tech ☆ The US company behind the Zoom video conferencing service.
Zscaler Security Vendors ☆ A company known for cloud-native SASE and zero-trust products.
© 2026 ITBGM