All terms
Glossary
Zero trust
No access is trusted merely because it comes from the internal network. Every request is verified.
The model replaces the idea of inside and outside. Instead of a wall around the network, every connection is authenticated and authorized, regardless of location.
In practice that means identity for services, short-lived credentials, encryption internally too, and permissions checked per request.
How you notice it
- Inside the network everyone can reach everything.
- A compromised service would have access to all others.
- There is access from home offices and from contractors.
Frequently asked
Do I have to rebuild everything for this?
No. The most effective start is roles instead of shared credentials, and network separation between services that have nothing to do with each other. Those are two manageable steps and they cover most of the blast radius.