Glossary · Z

Zero trust

Zero trust is a security model in which no user, device or connection is trusted by virtue of its location on the network; every request is evaluated on identity, device state and context before access is granted.

Extended definition

In more detail.

The model replaces the perimeter assumption that the inside is safe. It requires a working identity platform, device posture evaluation, segmentation, per-application access and logging. It is an architecture and a sequence of changes rather than a product, and it is usually introduced application by application, starting with those attackers target most. NIST SP 800-207 describes the architecture.

In our work

Where it appears.

Zero trust is the organizing principle of the Zero Trust and Secure Architecture service. See zero trust versus VPN.

By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days

Tell us what must not fail.

Discuss a Requirement →