← Back to glossary

Security model that treats every access request as untrusted; requires continuous verification and least privilege.

Definition

Zero Trust emphasizes strong identity, device posture checks, segmentation, and continuous authorization. It replaces “inside is trusted” assumptions with explicit verification and tight access controls.

In plain English Security model that treats every access request as untrusted; requires continuous verification and least privilege.

Why this matters

Why it matters: Limits lateral movement and unauthorized access, reducing privacy and data exposure when something goes wrong.

Example

Example: Require MFA + device compliance for admin actions, micro-segment internal services, and log/monitor all access decisions.