Asymmetry is an uneven distribution of power, control, or information between different actors. In cyber security, it usually describes the gap between defenders and attackers: defenders must protect many systems, users, and entry points, while an attacker often needs only one weakness to succeed. This imbalance shapes nearly every security decision, from access control to incident response.
Asymmetry matters because it can let a small operator, stolen credential, or hidden vulnerability produce outsized impact. In real attacks, asymmetry appears when adversaries know more about a target than the target knows about them, or when they can automate probing at scale. Defenses try to reduce that gap through logging, monitoring, segmentation, least privilege, and verification. In governance and platform security, asymmetry also describes situations where one side controls the rules, visibility, or data while others have little ability to inspect or challenge decisions.