Back to glossary

Zero Trust Architecture

A security framework based on the principle of 'never trust, always verify,' requiring strict identity verification for every person, device, and service.

Categorysecurity

Overview

Zero Trust assumes that threats exist both outside and inside the network. It eliminates the concept of a 'trusted perimeter' and instead verifies every access request regardless of its origin.

Core Principles

  • Continuous Verification: Always verify identity and device health.
  • Least Privilege: Grant only the minimum access required for a task.
  • Micro-segmentation: Break networks into small zones to contain potential breaches.

Implementation

Requires a combination of Multi-Factor Authentication (MFA), identity management, and robust monitoring.

Related Terms

Multi-Factor AuthenticationEnd-to-End Encryption