Tenant
An isolated set of data: inventory, collection, vault, backups. A user works in the tenants assigned to them.
Collection
The read session NacTrack opens on a device to read its configuration and state.
Vault
Where the credentials used for collection are stored encrypted.
Snapshot
What a collection read at a given time; two snapshots can be compared.
Managed device
A device declared in the inventory and collected.
Discovered device
A device seen as a CDP or LLDP neighbour without being in the inventory.
Segment
A group of devices or subnets used to filter, schedule or discover.
Waiver
A compliance check deliberately accepted, with a reason and an expiry date.
KEV
Known Exploited Vulnerabilities: CVE observed being actively exploited.
EPSS
The estimated probability that a CVE is exploited within 30 days.
EOS, EOL
End of sale and end of life announced by the vendor; end of support is the date after which it no longer fixes.
BETA
A feature still evolving; some need the beta module in the licence.
Assistance tunnel
An outbound WireGuard tunnel opened by the appliance, that you turn on and off, for remote assistance.