Over the past 10+ years, Zero Trust security concepts have been adopted by large and small companies, and governments to secure their digital assets. Zero Trust establishes that all users, devices, and applications, irrespective of location, are potentially untrusted entities and access to resources is granted based on continuous verification.

While Zero Trust has made significant progress, including being required by US Government entities, its focus and execution have been primarily at network-level controls. While these network-centric measures were effective in the past, the nature of applications has evolved drastically through their use of APIs, which now present the largest new attack surface we’ve ever faced.

Zero Trust architectures have yet to catch up to this change.

Watch this informative panel discussion with Zero Trust industry experts as we discuss Zero Trust for APIs and the new API Security Reference Architecture for Zero Trust.