Skip to content

Glossary

The terms used across the portal, defined in plain language. Where a term has a normative or primary source, it is linked.

Definitions marked "Not reviewed" are written by us and not yet checked by a second person. They are not indexed by search engines.

AGPL network clauseNot reviewed

Section 13 of the GNU Affero General Public License v3 ("Remote Network Interaction"). If you modify an AGPL program and let users interact with your modified version over a network, you must offer those users the corresponding source code of your version at no charge. Running an unmodified copy does not trigger it. This is why the AGPL is called network copyleft: offering the software as a service counts, not only distributing copies.

Related terms: Copyleft, SPDX licence identifier

Verified
Break-even (payback)Not reviewed

The point at which the cumulative saving of a change has paid back its one-off costs (migration, training, running both systems in parallel). Before that point the change has cost more than it saved. The SIAX savings calculator only reports a break-even month when the cash flow actually reaches it, and says so when it never does.

Plain-language definition; there is no single primary source.

See also: /en/savings-calculator, /en/methodology

Related terms: TCO (total cost of ownership)

Verified
CopyleftNot reviewed

A licence condition that requires modified versions and, depending on the licence, larger works built on the code to be distributed under the same licence, with source code. Strong copyleft (for example the GPL) covers the combined work; weak copyleft (for example the LGPL or MPL) covers only the licensed files or library. Copyleft is triggered by distribution; the AGPL also counts network use.

Plain-language definition; there is no single primary source.

See also: /en/methodology

Related terms: AGPL network clause, Open Source Definition (OSI-approved)

Verified
Data residencyNot reviewed

Where data is physically stored and processed: which country or region the servers, backups and support access are in. When you host an open source tool yourself, you choose the location; with a SaaS product it follows the vendor's regions and subprocessors. Residency alone does not decide which laws apply: the provider's jurisdiction and contracts matter too.

Plain-language definition; there is no single primary source.

See also: /en/hosting

Related terms: Self-hosting, DPA (data processing agreement)

Verified
DPA (data processing agreement)Not reviewed

The contract required by Article 28(3) of the GDPR when a processor (for example a hosting provider) processes personal data on behalf of a controller (for example your company). It sets out the subject matter, duration, nature and purpose of the processing, the types of personal data and the obligations of the processor. Whether a provider offers one, and how it is concluded, is listed per provider on the hosting page.

See also: /en/hosting

Related terms: Data residency

Verified
OIDC (OpenID Connect)Not reviewed

OpenID Connect 1.0 is an identity layer on top of the OAuth 2.0 protocol. It lets an application verify who a user is, based on authentication done by an identity provider, and get basic profile information. It is the most common way open source tools support single sign-on alongside SAML and LDAP.

Related terms: SSO (single sign-on)

Verified
Open coreNot reviewed

A business model where the core of a product is released under an open source licence and some features (often SSO, audit logs or scaling features) are only available in a paid edition under a proprietary licence. When we compare a tool, we state which features sit in the non-open part.

Plain-language definition; there is no single primary source.

See also: /en/methodology

Related terms: Source-available, Open Source Definition (OSI-approved)

Verified
Open Source Definition (OSI-approved)Not reviewed

The Open Source Initiative's ten criteria that a licence must meet to be open source, among them free redistribution, access to source code, and no discrimination against persons, groups or fields of endeavour. A licence that the OSI has approved against these criteria is called OSI-approved.

See also: /en/methodology

Related terms: Source-available, Copyleft

Verified
Self-hostingNot reviewed

Running software on infrastructure you control (your own servers, or servers rented from a hosting provider) instead of using the vendor's hosted service. You decide where the data is and when to upgrade, and you carry the work: installation, updates, backups, monitoring and security. Self-hosting is never free; its cost is hosting plus that work.

Plain-language definition; there is no single primary source.

See also: /en/hosting, /en/savings-calculator

Related terms: Data residency, TCO (total cost of ownership)

Verified
Source-availableNot reviewed

Software whose source code can be read, but whose licence does not meet the Open Source Definition, for example because it forbids offering the software as a competing service or limits commercial use. Source-available is not open source, and the portal never labels it as such.

Plain-language definition; there is no single primary source.

See also: /en/methodology

Related terms: Open Source Definition (OSI-approved), Open core

Verified
SPDX licence identifierNot reviewed

A short, standardised code for a licence from the SPDX License List, for example MIT or AGPL-3.0-only. The list exists so that licences can be identified efficiently and reliably, including in source code. Expressions combine identifiers, for example "MIT OR Apache-2.0". The portal records a project's licence as an SPDX expression checked against its LICENSE file.

See also: /en/methodology

Related terms: Open Source Definition (OSI-approved), Copyleft

Verified
SSO (single sign-on)Not reviewed

Signing in once with a central identity provider and reaching several applications without separate passwords. Common protocols are OIDC, SAML and LDAP. For a self-hosted tool, check whether SSO is in the open edition or only in a paid one.

Plain-language definition; there is no single primary source.

Related terms: OIDC (OpenID Connect), Open core

Verified
TCO (total cost of ownership)Not reviewed

Everything a solution costs over a period, not only its licence: hosting, storage and traffic, backups, monitoring, support, internal time, migration and training. Comparing a SaaS product with a self-hosted alternative only makes sense on TCO, with every assumption stated. Open source is never assumed to cost nothing.

Plain-language definition; there is no single primary source.

See also: /en/savings-calculator, /en/methodology

Related terms: Break-even (payback), Self-hosting

Verified

Other glossaries on siax.io

Swedish IT and business glossary (Ordlista)

General IT terms (older glossary)

An older list of general IT terms, kept here unchanged. It has no sources and is not reviewed; the terms above are the ones the portal uses.

A/B Testing
A method of comparing two versions of a feature or page to determine which performs better based on user metrics.
API
Application Programming Interface. A set of rules and protocols that allows software applications to communicate with each other.
API Gateway
A server that acts as a single entry point for a set of microservices, handling request routing, composition, and protocol translation.
Artifact
A deployable component produced during the software build process, such as a compiled binary, Docker image, or package.
Auto-scaling
The ability of a cloud infrastructure to automatically adjust compute resources based on current demand.
BigQuery
Google Cloud's fully managed, serverless data warehouse designed for large-scale data analytics using SQL.
Blue-Green Deployment
A release strategy that runs two identical production environments to enable zero-downtime deployments and easy rollbacks.
Broker
A middleware component that routes messages between producers and consumers in distributed messaging systems like Kafka or RabbitMQ.
Brownfield
A software project that involves developing or modifying an existing system, as opposed to building from scratch.
CI/CD
Continuous Integration and Continuous Delivery/Deployment. A set of practices that automate building, testing, and deploying code changes.
CORS
Cross-Origin Resource Sharing. A browser security mechanism that controls how web pages can request resources from a different domain.
CQRS
Command Query Responsibility Segregation. An architecture pattern that separates read and write operations into different models.
Container
A lightweight, standalone, executable software package that includes everything needed to run an application: code, runtime, and dependencies.
DAG
Directed Acyclic Graph. A data structure used in tools like Apache Airflow to define task dependencies and execution order in data pipelines.
DNS
Domain Name System. The internet's phonebook that translates human-readable domain names into IP addresses.
Docker
An open-source platform that automates the deployment of applications inside lightweight, portable containers.
Data Lake
A centralized repository that stores large volumes of raw data in its native format until needed for analysis.
Data Mesh
A decentralized data architecture that treats data as a product, with domain teams owning and serving their own data.
ETL
Extract, Transform, Load. A data integration process that extracts data from sources, transforms it into a usable format, and loads it into a target system.
Edge Computing
A distributed computing paradigm that brings computation and data storage closer to the sources of data to reduce latency.
Elasticsearch
A distributed search and analytics engine built on Apache Lucene, commonly used for log analytics and full-text search.
Event-Driven Architecture
A software design pattern where the flow of the program is determined by events such as user actions, sensor outputs, or messages.
Firewall
A network security system that monitors and controls incoming and outgoing network traffic based on predetermined rules.
Feature Flag
A software development technique that enables or disables features at runtime without deploying new code.
FQDN
Fully Qualified Domain Name. The complete domain name for a specific computer or host on the internet.
Git
A distributed version control system for tracking changes in source code during software development.
GraphQL
A query language for APIs that allows clients to request exactly the data they need, reducing over-fetching and under-fetching.
gRPC
A high-performance RPC framework developed by Google that uses Protocol Buffers and HTTP/2 for efficient service-to-service communication.
Helm
A package manager for Kubernetes that simplifies the deployment and management of applications using reusable chart templates.
Horizontal Scaling
Adding more machines or instances to a system to handle increased load, as opposed to upgrading a single machine.
Hot Reload
A development feature that applies code changes to a running application without requiring a full restart.
IaC
Infrastructure as Code. The practice of managing and provisioning infrastructure through machine-readable configuration files instead of manual processes.
Idempotent
An operation that produces the same result regardless of how many times it is executed, critical for reliable distributed systems.
Ingress
A Kubernetes API object that manages external access to services in a cluster, typically HTTP/HTTPS routing.
JWT
JSON Web Token. A compact, URL-safe token format used for securely transmitting claims between parties, commonly used in authentication.
Job Queue
A data structure that holds tasks to be processed asynchronously by worker processes, enabling background job execution.
Kubernetes
An open-source container orchestration platform that automates deployment, scaling, and management of containerized applications.
Kafka
Apache Kafka is a distributed event streaming platform used for building real-time data pipelines and streaming applications.
KPI
Key Performance Indicator. A measurable value that demonstrates how effectively a company or system is achieving key objectives.
Lambda
AWS Lambda is a serverless compute service that runs code in response to events without provisioning or managing servers.
Load Balancer
A device or service that distributes incoming network traffic across multiple servers to ensure reliability and performance.
Latency
The time delay between a request being made and the response being received, often measured in milliseconds.
MCP
Model Context Protocol. An open protocol that standardizes how AI applications connect to external tools, data sources, and services.
Microservices
An architectural style that structures an application as a collection of loosely coupled, independently deployable services.
Middleware
Software that sits between an operating system and applications, providing common services like authentication, logging, and message routing.
NIS2
The EU Network and Information Security Directive 2. An updated cybersecurity regulation requiring organizations to implement stricter security measures.
Namespace
A logical partition used to organize and isolate resources within a system, commonly used in Kubernetes and programming languages.
NoSQL
A class of database management systems that do not follow the traditional relational model, optimized for specific data models like documents or key-value pairs.
OAuth
An open authorization framework that allows third-party applications to access user resources without exposing credentials.
Observability
The ability to understand the internal state of a system by examining its outputs, typically through logs, metrics, and traces.
ORM
Object-Relational Mapping. A technique that lets developers interact with a database using objects in their programming language instead of raw SQL.
Pipeline
A set of automated processes that move code from version control through build, test, and deployment stages.
Pub/Sub
Publish/Subscribe messaging pattern where senders broadcast messages to a topic and receivers subscribe to topics of interest.
Prometheus
An open-source monitoring and alerting toolkit designed for reliability and scalability, commonly paired with Grafana for visualization.
Queue
A data structure or messaging system that stores messages in order for asynchronous processing, ensuring reliable delivery between services.
Query Optimization
The process of improving the performance of database queries by analyzing execution plans, indexes, and data access patterns.
RAG
Retrieval-Augmented Generation. An AI technique that enhances LLM responses by retrieving relevant external documents before generating answers.
RBAC
Role-Based Access Control. A method of restricting system access based on the roles assigned to individual users within an organization.
REST
Representational State Transfer. An architectural style for building web APIs that uses standard HTTP methods and stateless communication.
Reverse Proxy
A server that sits in front of web servers and forwards client requests, providing load balancing, SSL termination, and caching.
SRE
Site Reliability Engineering. A discipline that applies software engineering practices to infrastructure and operations to create scalable, reliable systems.
SSL/TLS
Secure Sockets Layer / Transport Layer Security. Cryptographic protocols that provide encrypted communication between clients and servers.
Serverless
A cloud execution model where the cloud provider manages the infrastructure, automatically scaling and billing based on actual usage.
Service Mesh
A dedicated infrastructure layer that manages service-to-service communication within a microservices architecture using sidecar proxies.
Terraform
An open-source IaC tool by HashiCorp that enables you to define and provision infrastructure across multiple cloud providers using declarative configuration.
Throughput
The amount of data or number of operations a system can process in a given time period, a key performance metric.
Token
A unit of text processed by an AI model, or a piece of data used for authentication. Context depends on usage: NLP or security.
UUID
Universally Unique Identifier. A 128-bit identifier used to uniquely identify resources across distributed systems without coordination.
Uptime
The percentage of time a system or service is operational and accessible, commonly expressed as nines (e.g. 99.99%).
VPN
Virtual Private Network. A technology that creates a secure, encrypted connection över a public network, often used for remote access to private infrastructure.
Vertical Scaling
Increasing the capacity of a single machine by adding more CPU, memory, or storage, as opposed to adding more machines.
Vector Database
A specialized database designed to store and query high-dimensional vectors, commonly used for AI embeddings and semantic search.
Webhook
A mechanism that allows an application to send real-time HTTP callbacks to a specified URL when a particular event occurs.
WebSocket
A communication protocol that provides full-duplex communication channels över a single TCP connection for real-time data transfer.
WAF
Web Application Firewall. A security layer that monitors and filters HTTP traffic between a web application and the internet.
XSS
Cross-Site Scripting. A security vulnerability where attackers inject malicious scripts into web pages viewed by other users.
XML
Extensible Markup Language. A markup language that defines rules for encoding documents in a format that is both human-readable and machine-readable.
YAML
YAML Ain't Markup Language. A human-readable data serialization format commonly used for configuration files in DevOps and cloud-native tools.
Yarn
A fast, reliable JavaScript package manager that serves as an alternative to npm with deterministic dependency resolution.
Zero Trust
A security framework that requires all users and devices to be authenticated and authorized before accessing any resource, regardless of network location.
Zero Downtime Deployment
A deployment strategy that ensures an application remains available to users throughout the entire update process.
Zookeeper
Apache ZooKeeper is a centralized service for maintaining configuration, naming, and synchronization in distributed systems.
Agent
An autonomous AI system that can plan, use tools, and take actions to accomplish complex tasks with minimal human intervention.
Batch Processing
A method of processing large volumes of data in groups at scheduled intervals, as opposed to real-time stream processing.
CDN
Content Delivery Network. A geographically distributed network of servers that delivers web content and media to users from the nearest edge location.
Canary Deployment
A release strategy that gradually rolls out changes to a small subset of users before deploying to the entire production environment.
DDoS
Distributed Denial of Service. A cyberattack that overwhelms a target system with traffic from multiple sources to disrupt normal operation.
Embedding
A numerical vector representation of data (text, images, etc.) that captures semantic meaning, enabling similarity search and AI applications.
Fine-tuning
The process of training a pre-trained AI model on a smaller, domain-specific dataset to adapt it for specialized tasks.
GitOps
A set of practices that uses Git as the single source of truth for declarative infrastructure and application delivery.
Hallucination
When an AI model generates confident but factually incorrect or fabricated information that is not grounded in its training data.
Immutable Infrastructure
An approach where servers are never modified after deployment. Updates are made by replacing instances with new ones built from a common image.
Explore the full site · Svenska