Cloud-based software is an application delivered over the internet rather than installed and run only on a local computer or server. Users access it through a browser or app, while the vendor operates the underlying infrastructure, updates, and data storage. Examples include scheduling, messaging, and record-management platforms.
In cyber security, cloud-based software matters because it concentrates access, data, and business processes behind online accounts and APIs. A stolen password, abused admin panel, weak integration token, or misconfigured permission can expose many users or records at once. Attackers often target these services for data theft, extortion, or disruption, while defenders focus on strong authentication, least privilege, logging, backup planning, and reviewing third-party connections. Because the service is remote, organizations must verify not just the app itself but also how identities, devices, and connected workflows are protected.