State-tracking is a system for recording how a value changes over time, such as damage, fuel, progress, session status, or device health. In software and security, it often appears as logic that remembers what has already happened and what actions are allowed next.
It matters in cyber security because many controls depend on accurate state: login sessions, token lifetimes, transaction steps, and process histories. Attackers may try to confuse or bypass state-tracking with replay attacks, race conditions, desynchronization, or forged messages that make a system believe it is in a different state. Defenders use state-tracking in firewalls, IDS/IPS, EDR tools, and authentication systems to detect anomalies, enforce sequencing, and block actions that do not fit the expected flow.