# Default Deny

> A technique for refusing every access that no rule explicitly allows.

Record: `lexicon:default-deny`
Kind: technique
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-default-deny

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Repository Secret Scan](https://banes-lab.com/records/lexicon/repository-secret-scan.md) and before [Sandboxing](https://banes-lab.com/records/lexicon/sandboxing.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Refactors

- [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md)
- [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md)

## Linked from

- [Error Handling / Resilience](https://banes-lab.com/ontology/principles/architecture-category-error-handling-resilience.md)
- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)