The process of concealing your organization's cloud and on-premise resources from public discovery on the open internet, which prevents attackers from finding entry points into your organization's resources and ensures that only sanctioned devices can sign in to your environment.