Zero Trust is more than the sum of user identity, segmentation, and secure access. It’s a security strategy upon which to build a complete security ecosystem. Zero Trust is founded on the principle of least- privileged access and the idea that no user, device, workload, or app is inherently trustworthy. It is distinct from a “castle and moat” architecture, which trusts anything inside by default.