Self-registration is an account creation flow that lets users sign up without manual approval from an administrator. It is common in SaaS platforms, internal tools, and customer portals because it reduces friction and speeds up onboarding.
In cyber security, self-registration matters because it can become an attack entry point if the platform does not enforce strong authorization, verification, and tenant isolation after signup. A weak implementation may let an attacker create an account, enumerate roles, or reach privileged features that were meant for trusted users only. Defenders should treat signup as a security boundary: require appropriate identity checks, rate-limit abuse, validate role assignment, and test that new accounts cannot access admin, board-level, or import workflows until explicitly approved.