Safe harbour
A promise not to pursue legal action against researchers who stay within an agreed, published testing scope.
Learn it through a story
- The Bug Bounty Bet (Cybersecurity for Juniors 2, Ch 4)
Related terms
- Roll back Return to an earlier, trusted version.
- Root cause The underlying reason behind a problem, as opposed to its visible symptoms.
- Rules of engagement The agreed scope and boundaries for an authorised security test.
- SAST Static application security testing, scanning source code itself for risky patterns.
- SBOM Software bill of materials, a complete list of every component a piece of software depends on.
- SCA Software composition analysis, checking third-party dependencies against known vulnerability databases.