Endpoint

Endpoint: A user or serverServerA system that provides applications, data, or network services to other systems. device that communicates with a network and runs workloadsWorkloadAn application, service, process, or task executed on computing infrastructure. or applications. Secure use depends on clear boundaries, correct configuration, monitoringMonitoringThe continuous observation of systems, identities, networks, and controls for relevant changes., and a controlled lifecycle.

How it works and where it fits

Endpoint denotes a technical component or operating environment with its own trust boundaries, identities, interfaces, and dependencies. Security is determined not only by the product, but by architecture, configuration, and the way data and privileges cross component boundaries. Management planes and production processing should be considered separately.

Practical security relevance

Secure operation depends on complete inventory, hardened baselines, least privilege, patchability, and centralized telemetry. Changes should be reproducible and reviewable. Exposed interfaces, default access, secrets, and supply-chain dependencies need particular attention; isolation, backup, and recovery must also be exercised in realistic conditions.

  • Endpoint Protection PlatformEndpoint Protection PlatformBundles preventive security functions such as malware protection, firewalls, and device control.: Bundles preventive security functions such as malware protection, firewalls, and device control.
  • Endpoint Detection and ResponseEndpoint Detection and ResponseContinuously monitors endpoints and supports detection, investigation, and containment.: Continuously monitors endpoints and supports detection, investigation, and containment.
  • HardeningHardeningReduces the attack surface through secure configuration and the deactivation of unnecessary functions.: Reduces the attack surface through secure configuration and the deactivation of unnecessary functions.
  • Asset InventoryAsset InventoryAn authoritative inventory of hardware, software, identities, services, and cloud resources.: An authoritative inventory of hardware, software, identities, services, and cloud resources.