Defense in Depth

A security strategy that layers multiple independent controls to protect a system. Defense in depth combines WAF, CSP, input validation, encryption, and monitoring so that a single flaw is not enough to compromise the whole. It is a fundamental principle recommended by ANSSI and NIST.