Operational denial-of-service is a condition where a process, team, or service is overwhelmed by workload rather than broken by a technical exploit. The target still works in principle, but it becomes too busy to perform normal operations such as reviewing reports, responding to alerts, or processing requests.
In cyber security, this matters because attackers do not always need to compromise systems to create impact. They can flood a channel with spam, duplicate submissions, or automated requests until human reviewers fall behind and important work is delayed. In a bug bounty program, for example, low-quality or machine-generated reports can bury real vulnerabilities and slow triage. Defenses include rate limiting, stronger intake validation, deduplication, prioritization, and clear submission requirements. The goal is to protect the workflow so noise does not become a denial of service against the people who operate it.