← Back to glossary

Denylist of indicators for automated enforcement.

Definition

Blocklists contain indicators of compromise (domains, IPs, hashes) and are used by security controls to deny access or flag events.

In plain English Denylist of indicators for automated enforcement.

Why this matters

Why it matters: They reduce exposure to known threats but require updates and can produce false positives.

Example

Example: DNS filtering denylist blocking known malware command-and-control domains.