Security posture icons

The 34 icons, described

Shieldshield

A plain shield — protection, security, the thing that stands between a system and harm.

Shield checkshield-check

Shield check — it passed the safety policy, verified and compliant.

Shield alertshield-alert

Shield alert — the safety policy caught something, a risk or a violation to review.

Shield lockshield-lock

A shield with a padlock on it — locked down, protection that is not to be lifted.

Shield usershield-user

A shield with a person on it — a protected account, someone under guard.

Shield configshield-config

A shield with sliders on it — security settings, the protection tuned by hand.

Encryptionencryption

Encryption — data made unreadable to anyone who does not hold the key.

Keykey

A key — what opens it, a credential that grants access to something locked.

Key listkey-list

An upright key, list rows in its bow — the credentials issued to an account.

Key rotationkey-rotation

Key rotation — replace a credential before it gets old, renewing on a cycle.

Secret scansecret-scan

Secret scan — find the credential somebody committed to the code.

Rotate secretsecret-rotate

Rotate secret — issue a new credential before the old one can leak.

Access grantedaccess-grant

Access granted — you may come through, permission allowed and the door open.

Access deniedaccess-deny

Access denied — you may not come through, permission refused.

Grantgrant

An upright key, a plus in its bow — grant a permission or a new scope.

Least privilegeleast-privilege

An upright key, a minus in its bow — grant only the access a task needs.

Zero trustzero-trust

Zero trust — nobody is inside by default, every request verified.

Role-based accessrbac

Role-based access control — what a kind of person may do, granted by role.

Policy listpolicy-list

A shield beside a list — the policies and rules that apply to this resource.

Audit logaudit-log

An audit log — who did what and when, kept as a trail of evidence.

Compliancecompliance

Compliance — it meets the standard it has to, audited and certified.

Consentconsent

Consent — somebody agreed on the record, an opt-in signed and kept.

Certificatecertificate

A certificate — signed proof that a site, a key or a person is what it claims to be.

Session tokensession-token

A session token — the opaque bearer or cookie that proves it is still you.

Multi-factormfa

Multi-factor authentication — two proofs instead of one, a second factor on a device.

Log inlogin

Log in — come in, sign in with your credentials and arrive at your account.

Log outlogout

Log out — leave, sign out of your account and end the session.

Breachbreach

A breach — attackers got in, a compromise of the system or a leak of data.

Vulnerabilityvulnerability

A vulnerability — a flaw that offers a way in that should not be there, a weakness to exploit.

Run scanrun-scan

A shield with a play inside — start a security scan right now.

Security scanscan-security

A security scan — a sweep looking for vulnerabilities, CVEs and misconfigurations.

Cloud firewallfirewall-cloud

A cloud firewall — a managed wall at the edge, a WAF you rent.

Private linkprivate-link

A private link — a connection between services that never leaves the private network.

Tainttaint

A taint — a mark that says stay away unless you can tolerate it.

In code, each is one import — import { Shield } from "@iconmind/react/icons/shield" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.