Zero Trust · ON2IT
Your ultimate
Zero Trust
knowledge centre.
Zero Trust
knowledge centre.
ON2IT has been designing and operating Zero Trust environments since 2005. John Kindervag — the creator of Zero Trust — shaped our strategy and co-authored core material here during his time as SVP of Cybersecurity Strategy at ON2IT. Choose your level below.
20+
Years operating ZT
#1
ZTaaS provider
JK
"Zero Trust is a strategic initiative that helps prevent successful data breaches by eliminating digital trust from your organisation. The strategy is decoupled from technology — while technologies will improve and change, the strategy remains the same."
John Kindervag
Creator of Zero Trust · Formerly SVP ON2IT
Board · C-Suite · CISOs
See all board briefs →
Is our organisation secure? Here's how to know.
Governance intelligence for executive leadership
Board Brief · ~15 min
Zero Trust Is Not a Technology Decision. It Is a Trust Governance Decision.
Eight forces reshaping the threat landscape, four Zero Trust principles, and seven questions every board should be able to answer.
Board Brief · ~12 min
The Two Mandates Every Board Must Answer in 2026
Gartner 2025: the resilience mandate and the Zero Trust mandate are no longer separate tracks. Why they must converge.
CFO · CRO Brief · ~10 min
How Zero Trust Reduces Data Breach Costs
Ponemon cost data, GDPR fine exposure, and ON2IT's 100-point cost reduction framework — 50–75% breach cost reduction for mature ZT postures.
★ NSTAC · Presidential Advisory · ~6 min
The Framework the White House Chose
The US federal Zero Trust strategy cited one primary authority three times: John Kindervag, ON2IT BV. This is that framework.
Management · IT Leadership
See all guides →
Learn from our experts
Field-tested guides for security programme owners
Implementation Guide · ~10 min
A Hands-On Approach to Zero Trust Implementation
Rob Maas's field-tested five-step guide with phase-by-phase breakdown, manager decision points, and the Kipling policy table.
Field Guide · ~10 min
Understanding Zero Trust — Lessons from Experts
Six practitioners, 50+ years of combined experience. What breaks, what surprises teams, and what a real protect surface looks like.
Sector Guide · ~9 min
Zero Trust for Hospitals — Because Cybersecurity Is Patient Safety
Live attack chains, real assessment findings, and Gartner-validated guidance on Zero Trust for clinical OT environments.
Security Strategy · ~8 min
How Zero Trust Stops What You Can't See
The SalesLoft Drift breach — 700+ organisations hit by valid credentials. No CVE. No IOC. The Kipling WHERE question would have stopped it.
Compliance Guide · ~9 min
One Implementation. Multiple Frameworks.
One Zero Trust programme satisfying ISO 27001, NIST 800-53, NIS2, DORA, PCI DSS, and four others simultaneously.
Technical · Engineering
See all deep dives →
Get the basics right
Architectural & operational intelligence for security engineers
Platform Architecture · ~8 min
AUXO™ — Built on Zero Trust. Every Other Platform Is Not.
Why the protect surface as native data schema changes everything. EventFlow AI reduces 69 events to 3 analyst investigations.
Tech Deep Dive · ~7 min
Zero Trust for AI Agents
Non-human identities outnumber human ones 10:1. The CISA five pillars mapped for agentic environments — plus four controls the standard model doesn't cover.
Tech Note · ~4 min
Your Protect Surface Is Already Out of Date
Cloud protect surface metadata drifts by default. The five-stage maturity ladder — and why Stage 4 still isn't enough.
Operational Brief · ~6 min
Your Zero Trust Platform, Directly Inside Your AI Toolchain
AUXO™ MCP server integration — Zero Trust controls inside Claude, Cursor, VS Code, and any MCP-compatible agent.
Talk to a Zero Trust strategist.
30 minutes, no slides. Bring your hardest question about strategy, implementation, or the platform behind it.
Request a demo →
Frequently Asked Questions
How is ON2IT's Zero Trust knowledge centre organised?
Into three audience tiers: Board & C-Suite (governance, financial case, and authority research), Management (implementation guides and field intelligence), and Technical (architecture deep dives and practitioner notes). 15 pieces in total.
Who is John Kindervag and what is his connection to ON2IT?
John Kindervag is the creator of Zero Trust. He shaped ON2IT's strategy and co-authored core material here during his time as SVP of Cybersecurity Strategy at ON2IT.
What official recognition does ON2IT's Zero Trust methodology have?
The US federal Zero Trust strategy (the NSTAC Report to the President) cited one primary authority three times: John Kindervag, ON2IT BV.
What is the Zero Trust Dictionary?
The authoritative Zero Trust lexicon, updated for the AI era: 17 core terms plus 9 new extensions covering Non-Human Identity, Ephemeral Privilege, Intent Validation, and more. One shared language across all audiences.
How much can Zero Trust reduce data breach costs?
Based on Ponemon cost data, GDPR fine exposure, and ON2IT's 100-point cost reduction framework, mature Zero Trust postures see a 50–75% breach cost reduction.