# What are allowlists and denylists?

An allowlist lists what is permitted, and everything else is blocked. A denylist lists what is blocked, and everything else is permitted. Firewalls, email filters and application controls use both. Allowlists are stricter and safer, for example letting a production machine talk only to the three systems it needs, but they take work to maintain. Denylists are easier but only stop what is already known to be bad. These terms replace the older whitelist and blacklist. In detection, an allowlist also means marking known harmless activity, such as a backup server, so it stops causing alerts.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-are-allowlists-and-denylists

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What are IDS and IPS?](https://netsenx.com/en/faq/what-are-ids-and-ips)
- [What is SOAR?](https://netsenx.com/en/faq/what-is-soar)
- [What is DLP (data loss prevention)?](https://netsenx.com/en/faq/what-is-dlp-data-loss-prevention)
- [What is an audit log?](https://netsenx.com/en/faq/what-is-an-audit-log)
- [What is dwell time in cybersecurity?](https://netsenx.com/en/faq/what-is-dwell-time)