Zero trust security is a cybersecurity framework that requires all users, devices, and network components to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or maintaining access to applications and data.

The zero trust model eliminates implicit trust in any one element, node, or service and instead requires continuous verification of the operational picture via real-time information fed from multiple sources to determine access and other system responses. It repeatedly questions the premise that users, devices, and network components should be implicitly trusted based on their location within the network.

The model embeds comprehensive security monitoring; granular, dynamic, and risk-based access controls; and system security automation in a coordinated manner throughout all aspects of the infrastructure in order to focus specifically on protecting critical assets (data) in real-time within a dynamic threat environment.