A progression gate is a requirement that must be satisfied before the next stage of a process becomes available. In cyber security, it appears in systems, workflows, and attack chains that only unlock after a condition is met, such as entering a valid token, passing authentication, or reaching a specific state in a program.
Progression gates matter because they control access. Defenders use them to limit what users, devices, or services can do until trust is established, as in multi-factor authentication, step-up approval, or staged privileges. Attackers also face gates when they must complete one step to reach the next, such as bypassing a login, triggering a hidden function, or obtaining credentials before moving deeper into a network. Understanding where these gates sit helps defenders spot choke points and helps analysts map how an intrusion advances.