Zero trust network access, also known as the software-defined perimeter, is a set of technologies and functionalities that enable secure access to internal applications for remote users.

Trust is never implicit. Access is granted on a need-to-know, least-privileged basis defined by granular policy.

• Remote users get seamless and secure access to private applications
• Applications are not exposed directly to the internet
• Network access is separated from application access
• Risk from compromised devices is reduced
• Access is limited to specific applications, not full network reachability
• Lateral movement risk is reduced

ZTNA uses user-to-application access patterns rather than traditional network-based trust assumptions. It often relies on end-to-end encrypted TLS micro-tunnels.