Skip to content
🎉 Welcome! Threatbear can now offer managed detection and response services for 24x7x365 coverage!
Uncomplicated naming convention

Uncomplicated naming convention

May 25, 2026

Naming conventions are often overcomplicated. They assume you have ten thousand sites and a hundred thousand endpoints per site. Unfortunately this additional complexity means you will probably avoid a naming convention, after all, who needs the extra hassle when there are new new critical vulnerabilities to patch every week!

Enter the uncomplicated naming convention - a naming convention for the 90% that strips away the complexities and does one thing well - it answers four questions :

  1. Is this a device or a credential?
  2. If this is a device, where is it?
  3. Who is using the credential? (i.e: a human or a computer - called a service account)
  4. What was the original purpose that this credential was created for? Generic here is good

Forget DEV, PROD and staging for now. Just get started and you can add all the complexity you want in version 2.0!

Format

Devices:

[SITE]-[TYPE]-[###]

Service Accounts:

SVC-[SYSTEM]-[PURPOSE]

Site Codes

SiteCode
MelbourneMEL
CanberraCBR

Type Codes

CategoryTypeCodeExample
WorkstationsDesktop / LaptopWSBLR-WS-001
ServersGeneral serverSRVBLR-SRV-001
NetworkRouterRTRBLR-RTR-001
SwitchSWBLR-SW-001
Wireless APAPBLR-AP-001
FirewallFWBLR-FW-001
OtherPrinter / MFDPRNBLR-PRN-001
NAS / StorageNASBLR-NAS-001

Service Accounts

Format: SVC-[SYSTEM]-[PURPOSE]

PartDescriptionExample values
SVCFixed prefix — always present—
SYSTEMThe application or platformAD, SQL, BACKUP, MONITOR
PURPOSEWhat it actually doesSYNC, DEPLOY,MONITOR

Examples:

AccountMeaning
SVC-ENTRA-SUBLIMEActive Directory sync account
SVC-SQL-BACKUPSQL Server backup account
SVC-WEBSITE-MONITORMonitoring platform read-only account
SVC-SALESFORCE-SYNCDeployment account for production

Naming Rules

  1. Devices always use SITE-TYPE-###
  2. Service accounts always start with SVC and never have a site code
  3. Site codes come from the approved list — don’t invent new ones
  4. Numbers count up from 001 per site and type — check the list before assigning
  5. Never reuse a name, even if a device is retired