What is Zero Trust architecture?

Zero Trust is a security approach that avoids assuming a request is trustworthy merely because it originates from an internal network. Access decisions are based on verified identity, device or workload context, policy, and least privilege.

In service architectures, this often means authenticating service identities, authorizing requests explicitly, protecting communications, and continuously evaluating access rather than treating the internal network as automatically trusted.