// Learn

Security concepts, explained straight.

Plain-English explanations of the attack techniques and defense approaches behind the Cyberdis portfolio — written to answer the question, not to pad a page.

Browser Security

What is remote browser isolation?

Remote browser isolation (RBI) is a security technology that executes all web browsing in a disposable container in the cloud instead of on the user’s device.

Read the explainer Browser Security

What are highly evasive adaptive threats (HEAT)?

Highly evasive adaptive threats (HEAT) are web-borne attacks specifically engineered to bypass detection-based security — secure web gateways, email filters, sandboxes and signature engines.

Read the explainer Browser Security

What is Content Disarm and Reconstruction (CDR)?

Content Disarm and Reconstruction (CDR) is a file-security technology that deconstructs a downloaded or emailed file, removes every element that could carry active code — macros, embedded objects, scripts — and rebuilds a clean, fully functional copy.

Read the explainer Payment Security

What is business email compromise (BEC)?

Business email compromise (BEC) is a fraud technique in which attackers use email that appears legitimate — a spoofed executive, a look-alike domain, or most dangerously a genuinely compromised business mailbox — to trick employees into transferring money or changing payment details.

Read the explainer Payment Security

What is vendor impersonation fraud?

Vendor impersonation fraud (also called invoice fraud or supplier fraud) is a scheme in which an attacker poses as a legitimate supplier to redirect payments the business genuinely owes.

Read the explainer Endpoint Security

What is data exfiltration?

Data exfiltration is the unauthorized transfer of data out of an organization — the step where a breach becomes a loss.

Read the explainer Endpoint Security

How does endpoint security work in air-gapped environments?

Air-gapped endpoint security is endpoint protection designed to operate without cloud connectivity — for isolated networks in defense, critical infrastructure, industrial and high-sovereignty environments.

Read the explainer Identity Security

What are identity operations?

Identity operations is the ongoing work of making an identity and access management (IAM) program actually run: onboarding applications, rolling out policy, remediating drift and keeping coverage complete as the environment changes.

Read the explainer Identity Security

Why do IAM implementations stall?

IAM implementations stall because the effort model is wrong for the problem: every application is a manual integration project, the long tail of legacy and custom apps resists connectors, and the environment changes faster than consultant-driven projects can close.

Read the explainer Browser Security

What is a value-added cybersecurity distributor?

A value-added distributor (VAD) in cybersecurity is a company that brings security vendors to market through resellers while adding the technical services the transaction needs: partner enablement, pre-sales engineering, proof-of-concept execution, deployment and post-sale support.

Read the explainer Payment Security

What is payment fraud?

Payment fraud is the use of deception to redirect, extract or manipulate business payments — through compromised email threads, falsified invoices, changed bank details, taken-over accounts or manipulated vendor records.

Read the explainer Payment Security

How do you detect a fraudulent invoice?

A fraudulent invoice is detected by its context, not its appearance: modern invoice fraud reuses genuine invoices with only the payment details altered.

Read the explainer Payment Security

Can you recover money after payment fraud?

Money lost to payment fraud is sometimes recoverable, but the odds decay by the hour.

Read the explainer Endpoint Security

What is endpoint security?

Endpoint security is the practice of protecting the devices where work happens — laptops, desktops, servers and mobile devices — against compromise, data theft and misuse.

Read the explainer Endpoint Security

What is EDR (endpoint detection and response)?

Endpoint detection and response (EDR) is a security technology that continuously records activity on endpoints, detects suspicious behavior, and gives security teams the tools to investigate and respond — isolating hosts, killing processes and rolling back changes.

Read the explainer Browser Security

What is an enterprise browser?

An enterprise browser is a web browser built or managed for corporate control: policy enforcement, data-loss controls, session governance and visibility live inside the browsing experience itself.

Read the explainer Browser Security

What is HTML smuggling?

HTML smuggling is an attack technique that assembles a malicious payload inside the victim’s browser using JavaScript, instead of downloading it from the network.

Read the explainer Identity Security

What is identity governance and administration (IGA)?

Identity governance and administration (IGA) is the class of IAM platform that manages the lifecycle of identities and their access: provisioning and deprovisioning accounts, access requests and approvals, certification campaigns, and audit reporting.

Read the explainer Identity Security

What are non-human identities (NHI)?

Non-human identities (NHI) are the accounts and credentials that belong to software rather than people: service accounts, API keys, machine certificates, workload identities and, increasingly, AI agents acting with delegated permissions.

Read the explainer Identity Security

How much does IAM implementation cost?

IAM implementation typically costs a multiple of the software license.

Read the explainer Endpoint Security

What is credential dumping?

Credential dumping is the theft of stored authentication material from an operating system: passwords, hashes and tickets extracted from memory structures such as LSASS, from the SAM database, or from DPAPI stores.

Read the explainer

// From theory to PoC

Seen the concept? See it running.

Every explainer here maps to a vendor Cyberdis distributes — and to a proof of concept our engineers can run in your environment.

Talk to an engineer