// GLOSSARY

Blast Radius

The total area of impact reachable from a single starting position. What sets a finding's priority is often not the finding itself but how far one can travel from it; of two vulnerabilities with the same severity, one may sit in an isolated corner while the other is the door to the critical target. The concept shifts the defense's focus from a single vulnerability score to access topology: the question becomes not 'how serious is this' but 'from here, where can one go'. Shrinking this radius is the shared aim of zero-trust architecture, microsegmentation and narrowing effective permissions; each limits the business impact of a single finding by narrowing the area a breach can spread into. The blast radius is the design measure that turns the assumption 'a breach will happen' into the question 'how far will it spread when it does'.