Saved objects are Kibana-managed records that store things like dashboards, visualizations, index patterns, alerts, and related application settings. They are the persistent layer behind what users see in the Kibana interface, and they usually carry metadata about ownership, permissions, and how a view or workflow is configured.
In cyber security, saved objects matter because they often sit at the boundary between read-only visibility and change permissions. If a low-privilege user can improperly access or modify them, they may be able to expose sensitive data, alter dashboards, change queries, or influence operational monitoring. Attackers may target saved-object handling to bypass authorization checks, while defenders use role design, object-level permissions, and audit logs to limit and detect abuse. In practice, secure handling of saved objects helps keep Kibana as a controlled management plane rather than an entry point for data leakage or unauthorized changes.