zero-trust
Zero Trust
Perimeter security makes one assumption that modern breaches consistently break: that everything inside the network boundary can be trusted because getting inside was hard. It wasn't hard — a phished credential, a compromised laptop, or a vulnerable service is enough to get inside, and once an attacker is in, a perimeter model hands them free lateral movement to everything else on the network, because nothing inside was designed to distrust anything else inside.
Zero trust replaces "where is this request coming from" with "who or what is this request, and is it authorized for exactly this action, right now." Every request is verified on its own merits, independent of network location, every time.
Being on the network was never proof of anything except that you were on the network.