Single Packet Authorization is an access-control technique that keeps a network service invisible until it receives a valid, specially formed packet. The packet is usually authenticated or encrypted, and if it passes verification, a gateway may briefly open a firewall rule, expose a port, or start a protected service. Until then, the target stays hidden from scans and unsolicited connection attempts.
In cyber security, SPA matters because it reduces the attack surface for SSH, VPN, admin consoles, and other high-value services. Defenders use it to make brute-force attacks, credential stuffing, and opportunistic port scans less effective. In real environments, SPA can support zero-trust-style access and segmented networks, especially where broad inbound exposure is risky. Attackers may still target the SPA implementation itself, so strong cryptography, replay protection, and logging are essential.