Auto-configuration is a framework feature that creates and wires components automatically when it detects certain libraries, classes, or settings. Instead of requiring every option to be set by hand, the framework guesses sensible defaults and turns features on for the application.
In cyber security, auto-configuration matters because defaults can silently expose services, ports, credentials, or trust relationships that were meant only for development. Attackers look for these convenience features when an application is deployed with unsafe defaults, broad network access, or forgotten test components. Defenders should review what the framework enabled, disable unneeded auto-configured services, and verify that any automatically started listener or admin function is limited to the intended host, network, or environment.