Continuous availability is a product pattern in which a system is reachable at any time, with little or no planned downtime. In cyber security, that promise is useful because users can always get service, but it also increases exposure: more login attempts, more opportunities for abuse, and more time for an attacker to probe a live system. Always-on chatbots, support portals, and cloud services can be pushed into overuse, credential stuffing, spam, scraping, or automated abuse simply because they never go offline.
Defenders treat continuous availability as both a reliability goal and a risk surface. Common controls include rate limiting, session timeouts, strong authentication, abuse monitoring, and maintenance procedures that preserve service while shrinking the attack window. In social engineering and AI systems, continuous availability can also intensify dependence, because users learn that the system is always ready to respond. The secure design goal is not just uptime, but bounded uptime: a service that stays useful without becoming endlessly reachable or endlessly exploitable.