Attack Surface
The total aggregation of accessible endpoints, identities, protocols, and vulnerabilities open to potential digital exploitation.

THE TECHNICAL LANGUAGE OF DIGITAL B2B INFRASTRUCTURE
Material created and shared by customers, community members, or other users rather than produced solely by the organization publishing or featuring it.
Authentic contributions can provide social proof, community participation, product insight, and reusable content, but only when governance preserves trust and legal compliance.
A software company invites customers to submit workflow videos, records usage permission, discloses incentives, adds captions, moderates claims, and preserves the creator's attribution.
UGC can be false, biased, unsafe, infringing, inaccessible, or manipulated. Featuring content may create advertising obligations, and suppressing or editing reviews can misrepresent consumer opinion.
UGC includes reviews, posts, images, videos, forum contributions, testimonials, and submissions. Organizations need workflows for consent or licensing, moderation, provenance, disclosure of incentives or material connections, accessibility, privacy, rights management, and retention.
AI Governance, Experience Design
US Federal Trade Commission — Endorsements, Influencers, and Reviews — https://www.ftc.gov/business-guidance/advertising-marketing/endorsements-influencers-reviews; FTC — Updated Advertising Guides — https://www.ftc.gov/news-events/news/press-releases/2023/06/federal-trade-commission-announces-updated-advertising-guides-combat-deceptive-reviews-endorsements
The total aggregation of accessible endpoints, identities, protocols, and vulnerabilities open to potential digital exploitation.
How click, scroll and movement heatmaps aggregate visitor behavior on a page to show where attention, clicks and drop-off concentrate.
An LLM's context window sets how many tokens of instructions, documents, conversation history and output the model can handle in a single request.
An architectural component that routes, authenticates, monitors, and applies security policies to incoming API traffic.
An SEO issue where several pages on one site serve the same search intent, blurring which URL should rank and splitting internal signals.