Tightening is a feature of which type of entity?

Explicit URLs are fully defined entities with no wildcard scope to tighten - they either match or they do not.

Attack signatures are static or updated pattern definitions and do not undergo a tightening process based on traffic learning.

Flow login URLs define authentication flow enforcement points and do not have a tightening mechanism in the ASM learning model.

Wildcard parameters support tightening because they are broad catch-all definitions that must be narrowed over time - ASM learns actual parameter values and characteristics from traffic and can tighten the wildcard to more closely match legitimate usage, reducing the attack surface without requiring manual explicit parameter creation.