Glossary

Zero-day vulnerability

Also called Zero-day.

Definition

A zero-day is a software vulnerability that attackers know about or are exploiting before the vendor has released a fix.

Why it matters when you’re buying

With no patch available, defence depends on mitigations, detection and limiting exposure. How quickly and openly a vendor responds to zero-days in its own products is worth asking about during evaluation.

How it relates to other terms

An SBOM tells you whether you run the affected component, and XDR is how you spot exploitation before a patch arrives.

Where to go next

Written by Techarda editors · Updated . Think a definition is wrong or missing something? Email engage@techarda.com. All terms.