Defence icons

The 23 defence icons, described

Bug bountybug-bounty

A shield with a coin in it — a reward for the flaw reported the right way.

Content security policycontent-security-policy

A window with a shield in it — the page told exactly what it may load.

CSRF tokencsrf-token

A panel with a coin in it — the token a form carries to prove it came from this site.

CVE advisorycve-advisory

A shield with a tag in it — a published flaw, with its number.

Defence in depthdefence-in-depth

A shield with a shield inside it — more than one layer between the attacker and the data.

Fail securefail-secure

A shield with a lock in it — when something breaks, it breaks closed.

Input validationinput-validation

The wide machine with a funnel in it — input checked before the server takes it.

Output encodingoutput-encoding

A shield with angle brackets in it — text made safe before the page shows it.

OWASP listowasp

A clipboard with a bulleted list — the flaws that come up most.

Parameterised queryparameterised-query

A shield with a value threaded on a line — the value bound in, never pasted into the query.

Patch windowpatch-window

A shield with a bracketed span in it — the time allowed to fix a known flaw.

Pentestpentest

A shield with an arrow aimed into it — an attack run on purpose, by people you asked.

Prompt injection blockedprompt-injection-block

The wide machine with a bolt stopped at a line — an instruction smuggled in, and not obeyed.

RASPrasp

The wide machine with a shield in it — protection that runs inside the application itself.

Responsible disclosureresponsible-disclosure

A shield with an arrow that turns and is handed on — a flaw told to the people who can fix it, first.

Security championsecurity-champion

A person with a shield on the chest — the one on the team who carries security.

Security headersecurity-header

A panel with a header line and a check under it — the headers a response carries to protect the page.

Security review gatesecurity-review-gate

A shield with a bar across it — nothing ships until security has looked.

Shieldshield

A plain shield — protection, security, the thing that stands between a system and harm.

STRIDEstride-model

A window ruled into columns — threats sorted by kind.

Subresource integritysubresource-integrity

A page with a hash on it — a script only loaded if its hash matches.

Threat modelthreat-model

A page with a decision diamond and a path out — what could go wrong, worked out before it does.

WAF rulewaf-rule

A shield with bricks in it — a rule the firewall applies to every request.

In code, each is one import — import { BugBounty } from "@iconmind/react/icons/bug-bounty" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Tags these icons also carry