What is Zero Trust?
A security model that requires verification for every request, regardless of where it comes from.
Why It Matters
Zero trust assumes no network or user is inherently trustworthy, providing stronger protection against breaches.
Real-World Example
Requiring authentication and authorisation for every API call, even from services inside your own network.
“Understanding terms like Zero Trust matters because it helps you have better conversations with developers and make smarter decisions about your software. You do not need to be technical. You just need to know enough to ask the right questions.”
Related Terms
Least Privilege
Giving users and systems only the minimum permissions they need to do their job.
Authentication
The process of verifying who someone is, usually through a username and password
Authorisation
Determining what actions or data a verified user is allowed to access
IAM (Identity and Access Management)
A system for managing who has access to which cloud resources and what they can do with them.
Learn More at buildDay Melbourne
Want to understand these concepts hands-on? Join our one-day workshop and build a real web application from scratch.
Related Terms
Authentication
The process of verifying who someone is, usually through a username and password
Authorisation
Determining what actions or data a verified user is allowed to access
IAM (Identity and Access Management)
A system for managing who has access to which cloud resources and what they can do with them.
Least Privilege
Giving users and systems only the minimum permissions they need to do their job.
OAuth
A standard that lets you log into apps using your existing accounts from Google, Facebook, or other providers
JWT (JSON Web Token)
A secure digital pass that proves who you are without needing to check the database every time