Distributed tracing is a way to follow one request as it moves through multiple services, APIs, queues, and databases. Each step adds timing and context so defenders can see where latency, errors, or retries begin. In modern cloud and microservice environments, a single user action may touch many components, making simple logs or host metrics too coarse to explain what happened.
In cyber security, distributed tracing helps detect abuse that hides in normal traffic, such as slow credential stuffing, API scraping, or request manipulation that causes downstream failures. It also supports incident response by showing which service first returned an error, which dependency stalled, and whether an attacker-induced bottleneck spread across the system. Used well, tracing helps teams separate application bugs from malicious activity and quickly map business impact to the exact path of the request.