An extension-based architecture is a software design that adds capabilities through separate modules, often called extensions, plug-ins, or add-ons. The core platform stays relatively small, while extra features are deployed independently and activated as needed. This makes large systems easier to customize for different customers or business needs.
In cyber security, this model matters because each extension increases the attack surface. A flaw in one deployed module can affect the whole platform, especially if the module has access to authentication, business logic, or internal services. Defenders need to know exactly which extensions are installed, which ones are exposed to the network, and whether they are patched. In real attacks, adversaries often target a vulnerable extension rather than the core application, using it to gain code execution, move into internal components, or reach sensitive data. Good defense includes inventory, patch management, least privilege, and removing unused modules.