Zero trust security is a concept that’s been around for several years, but it may finally be starting to gain traction as a technology product. The problem is that zero trust can mean different things to different people – and not all vendors take the same approach. But buyers are beginning to express interest, and a number of security vendors have assembled some interesting approaches to zero trust security.
What is zero trust security?
Even analysts don’t entirely agree on what zero trust security is.
Gartner calls it zero trust network access (ZTNA) and sees ZTNA as something of a fine-grained approach to network access control (NAC), identity access management (IAM) and privilege access management (PAM) – and at least an adjunct to, if not a replacement for, VPNs and DMZ architectures. Users are granted access only to the data and applications they need rather than the entire network, reducing the risk of lateral movement on the network, and device security and beh