Guard glossary
Look up Guard identities, enforcement, assessment, response, and evidence terms.
The following terms distinguish Guard inventory, observations, and executed changes.
| Term | Definition |
|---|---|
| Asset | Durable inventory identity for a service, device, or network target; see resource model |
| Asset group | Selector for policies or permitted user scope; group selection itself grants no permission |
| Endpoint | Managed device record linked to an asset and a separate agent identity |
| Executor | Agent, scanner, gateway, or edge service that performs or enforces requested work |
| Protected service | Traffic configuration for an admitted edge path |
| Connector | Self-hosted management link to the Solarius DDoS edge |
| Indicator of compromise (IOC) | Threat identifier with provenance, confidence, and validity; see intelligence |
| Campaign | Related threat activity and reported targeting context |
| Detection | Security observation with source and evaluation context; see triage |
| Finding | Assessment result with a separate remediation lifecycle |
| Incident | Investigation collecting observations, decisions, evidence, and actions |
| Policy revision | Immutable published configuration; adoption is observed separately |
| Posture | Time-bounded device state used in access decisions |
| Data loss prevention (DLP) | Channel-specific sensitive-data detection or blocking |
| Zero trust network access (ZTNA) | Identity and posture authorization for a named private application |
| Security operations center (SOC) | Staff performing human-reviewed triage |
| Response action | Approved, bounded request for an executor effect; see response |
| Isolation | Supported endpoint network restriction requiring explicit release |
| Quarantine | Protected local artifact state with a separate restoration action |
| Evidence | Preserved artifact with source, digest, retention, and access history |
| Hold | Authorized block on ordinary evidence deletion |
| Operation | Asynchronous execution record; acceptance is separate from completion |
| Coverage gap | Missing, unsupported, stale, or failed observation or enforcement |
| Exception | Scoped and expiring change to a specific policy decision |