Stop guessing. Start protecting with a strategy. — Zero Trust

Q: How much can Zero Trust reduce data breach costs?

Organisations with a mature Zero Trust posture see a 50 to 75 percent reduction in data breach costs, based on Ponemon Institute data and ON2IT's 100-point cost reduction framework.

Zero Trust · Fix the Fundamentals

Stop guessing.
Start protecting with a strategy.

Your organisation has bought the products. Firewall. EDR. SIEM. And you are still exposed. The problem is not the technology. The problem is that you trusted it without a strategy. Zero Trust is not a product. It is the decision to stop trusting by default, and the architecture that enforces it.

For Boards · CISOs · IT Directors · Security Architects

The argument that changes the conversation

Security products without a Zero Trust strategy don't reduce risk. They add complexity. And complexity is where attackers hide.

The financial case

50–75%

Reduction in data breach costs for organisations with a mature Zero Trust posture, based on Ponemon Institute data and ON2IT's 100-point cost reduction framework.

Source: Ponemon Institute · ON2IT Breach Cost Framework

The authority case

No. 1

John Kindervag, ON2IT BV, is cited as the primary authority in the NSTAC report that defined the federal Zero Trust strategy, now the US Government's implementation standard.

Source: NSTAC Report to the President of the United States

“

Zero Trust is a strategic initiative that helps prevent successful data breaches by eliminating digital trust from your organisation. The strategy is decoupled from technology, while technologies will improve and change, the strategy remains the same.

John Kindervag

Creator of Zero Trust · Formerly SVP Cybersecurity Strategy, ON2IT

Now take the next step

Boards · C-Suite · CISOs

Is our organisation secure? Here's how to know.

The governance mandate, the financial case, and the seven questions every board should be able to answer.

→

IT Directors · Security Leads

Learn from our experts

Field-tested implementation guides from the practitioners who built Zero Trust in production.

→

Architects · DevSecOps · SOC

Get the basics right

From first protect surface to AUXO™ architecture. Technical deep dives for engineering teams.

→

Frequently Asked Questions

What is Zero Trust?

Zero Trust is a strategic initiative that helps prevent successful data breaches by eliminating digital trust from your organisation. The strategy is decoupled from technology, so while technologies improve and change, the strategy remains the same.

Is Zero Trust a product we can buy?

No. Zero Trust is not a product, it is the decision to stop trusting by default, and the architecture that enforces it. Firewalls, EDR, and SIEM products without that strategy don't reduce risk, they add complexity.

How much can Zero Trust reduce data breach costs?

Organisations with a mature Zero Trust posture see a 50–75% reduction in data breach costs, based on Ponemon Institute data and ON2IT's 100-point cost reduction framework.

Who created Zero Trust?

John Kindervag, formerly SVP Cybersecurity Strategy at ON2IT, created Zero Trust. He is cited as the primary authority in the NSTAC report that defined the US federal Zero Trust strategy.

Why did the US government adopt Zero Trust as a federal standard?

When the US President's National Security Telecommunications Advisory Committee defined the federal Zero Trust strategy, it cited John Kindervag, ON2IT BV, as the primary authority three times. The framework it chose became the US Government implementation standard.

30 Minutes. No Slides.

A direct conversation with ON2IT's Zero Trust strategists, no pitch, no deck, just answers.

Talk to a Zero Trust SME →