Cybersecurity definition
What is BAS?
BAS stands for Breach and Attack Simulation.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Software that continuously and safely runs simulated attack techniques against an environment to measure whether existing defenses actually detect or block them, rather than trusting that a control works just because it's installed.
Where BAS fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
PentestPenetration TestAn authorized, time-boxed engagement where a tester actively attempts to exploit vulnerabilities in a system or network, going beyond a vulnerability scan's list of weaknesses to prove which ones are actually exploitable.CTEMContinuous Threat Exposure ManagementA program model for continuously scoping, discovering, prioritizing, validating, and mobilizing action against an organization's exposures, treating exposure management as an ongoing cycle rather than a periodic vulnerability scan.