Zero trust relies on several security capabilities across identity, devices, networks, and applications.

• IAM
• IGA
• PIM & PAM
• RBAC
• Secrets management
• Identity federation
• PBAC

• Device inventory
• Device baseline and hardening
• Device authentication and authorization
• Device compliance
• Device encryption
• Device sandboxing

• SD-WAN
• Network segmentation
• DDoS protection
• SWG and ZTNA
• NAC
• IDS and IPS
• NGFW

• API security

Each pillar contributes to making access decisions explicit, adaptive, and risk-aware.