Definition
A security model that requires strict identity verification for every person and device trying to access resources, regardless of network location.
In Depth
Zero trust operates on 'never trust, always verify', so no user, device, or network is trusted by default. It requires multi-factor authentication, micro-segmentation, least-privilege access, and continuous verification. This replaces the traditional 'castle and moat' perimeter security approach.
Example Usage
Requiring MFA and device certificates for all admin dashboard access, even when connecting from the office network.
Business Context
With remote work and cloud services, perimeter security is obsolete. Zero trust protects against insider threats and compromised credentials.
Related Terms
API Key
A unique identifier used to authenticate and authorize API requests, typically passed as a header or...
Cross-Origin Resource Sharing
A browser security mechanism that controls which domains can make requests to your API, preventing u...
Cross-Site Request Forgery
An attack that tricks authenticated users into performing unintended actions on a web application th...
Cross-Site Scripting
A web security vulnerability that allows attackers to inject malicious scripts into web pages viewed...
Encryption at Rest
Protecting stored data by converting it into an unreadable format that can only be decrypted with th...
Also Known As
Tags
Quick Info
Need help implementing this in your business?
Get Started