A software development principle whereby products and services are configured for maximum security by default.