Zero trust security model
A zero-trust network, also called a zero-trust network or simply zero trust (and also a zero-trust architecture, zero-trust security model, ZTA, or ZTNA), is a term in information technology (IT) and cybersecurity describing an approach to designing and implementing IT networks. The central idea behind zero trust is that devices on a network, such as laptops, should not be trusted by default, even if they are connected to a managed corporate network such as the corporate LAN and even if they were previously authenticated.
On this page
Source content checked . English translation published 2026-10-27.
In business automation
Zero trust means a device should not be trusted just because it is on the organization's network. Every request is authenticated and authorized again. In automation, this means an internal key or agent still receives limited permissions and is checked.
Examples
These examples illustrate a possible workflow. Adapt the connections and rules to your own systems.
Internal agent with narrow permissions
An agent running on the office network does not get access to all customers. Each call carries an identity, is logged, and is limited to one case. A connection from the office does not create a bypass around authentication.
Relevant tools
- Supabase
- User and row based policies support limited access; a broad service account still breaks the zero-trust principle.
What to check
- Leaving a service account with excessive permissions contradicts the model even if employees themselves are authenticated.