NAT maps private IP addresses to a public IP — conserving IPv4 addresses and obscuring internal network topology from external observers.
NAT provides "security through obscurity" — it hides internal IPs but is not a real security control. Attackers can still reach services via port forwarding. Do not rely on NAT as a security boundary.