Glossary

Key terms used throughout Satark AI documentation.

A

Activity Log : An audit record of a user or system action within the platform. Used for compliance evidence and accountability.

AI Assistant (Mr./Ms. Satark) : Satark AI's conversational AI advisor that answers security, compliance, and risk questions in the context of your organization.

Accepted Risk : A finding status indicating the issue is acknowledged but intentionally not remediated, typically with documented justification.

C

CCF (Common Control Framework) : Satark AI's mapping layer that connects regulatory controls across multiple compliance frameworks, so one action can satisfy multiple requirements.

Command Center : The primary AppSec dashboard showing vulnerability trends, severity distribution, and remediation progress.

Compliance Framework : A structured set of regulatory or security requirements (e.g. SOC 2, ISO 27001, GDPR) that organizations must meet.

Control : A specific requirement within a compliance framework (e.g. "Enable MFA for all users").

Common Remediation : A fix that resolves multiple findings at once, prioritized by blast radius.

D

Data Group : A repository-scoped access control group that limits which resources a user can see.

Defensibility : Your ability to demonstrate compliance with evidence — policies, configurations, logs, and findings.

E

Expert Request : An escalation from the AI Assistant to a human cybersecurity specialist for complex questions.

F

Finding : A specific security issue detected by a connected integration tool.

Fingerprint : An organizational security profile derived from connected assets, integrations, and contextual data.

Framework : See Compliance Framework.

G

Gap (Compliance Gap) : A control that is not yet satisfied based on current findings and assessment results.

Gap Analysis : The process of identifying compliance gaps between your current posture and framework requirements.

I

Integration : A connected third-party tool (e.g. AWS, GitHub, Snyk) that syncs security data into Satark AI.

O

Organization : A tenant on Satark AI with its own users, integrations, findings, and compliance data.

Organization Admin : A user role with full administrative access to an organization's settings and modules.

Organization Portal : The main Satark AI workspace for organization users — dashboard, findings, compliance, AI assistant, and settings.

R

Regulatory Defensibility : A compliance module showing framework status, violated controls, linked findings, and penalty exposure.

Remediation : The recommended fix for a security finding.

Role : A permission set that determines which platform modules a user can access.

S

Severity : The impact level of a finding — Critical, High, Medium, or Low.

Sync : The process of refreshing data from a connected integration.

T

Threat Intelligence : Curated security advisories and vulnerability data used to enrich findings and dashboards.

Tool Sprawl : The accumulation of overlapping security tools that create noise, cost, and coverage gaps.

W

Workflow Check : An automated validation that verifies a compliance control is satisfied, mapped to connected integrations.

Zone : An organizational scope unit for scoping audits, products, and compliance assessments.