What is zero trust security?

Answer

Zero trust is a security model that assumes no user, device, or network is inherently trustworthy, even inside the corporate perimeter. Every access request must be authenticated, authorized, and continuously validated based on identity, device posture, and context before access is granted. It replaces the old "trust but verify" perimeter model with "never trust, always verify," using least privilege and micro-segmentation to limit lateral movement after a breach.