Security model that assumes no implicit trust based on network location. Enforces continuous verification and least privilege for users, services, and machines.