Verify identity and access context on each request regardless of network location.
<div class="sd"><div class="sd-head"><strong>ZERO TRUST</strong><span id="state">live check</span></div><div class="sd-stage"><div class="places"><div class="tile" id="place">inside</div><div class="tile">outside</div></div><div class="gate">identity<br>+ device</div><div class="tile good" id="result">evaluate</div></div><div class="sd-foot"><span id="caption">checking boundary</span><span>tap to step</span></div></div>.sd{box-sizing:border-box;width:min(94vw,700px);height:min(86vh,318px);padding:clamp(9px,2.3vmin,18px);border:1px solid var(--line);border-radius:14px;background:var(--surface);color:var(--fg);display:flex;flex-direction:column;gap:clamp(6px,1.8vmin,12px);font:600 clamp(12px,2.6vmin,16px)/1.25 var(--font-sans, sans-serif)}.sd *{box-sizing:border-box}.sd-head,.sd-foot{display:flex;align-items:center;justify-content:space-between;gap:8px;min-height:1.25em}.sd-head strong{color:var(--accent);letter-spacing:.06em}.sd-head span,.sd-foot{color:var(--muted)}.sd-foot{font-size:clamp(12px,2.4vmin,14px)}.sd-stage{position:relative;flex:1;min-height:0;display:flex;align-items:center;justify-content:center;gap:clamp(6px,2vmin,18px);overflow:hidden}.sd .mono{font-family:ui-monospace,monospace}.sd .tile{border:1px solid var(--line);border-radius:8px;background:var(--bg);padding:clamp(5px,1.5vmin,10px);text-align:center}.sd .good{color:var(--accent);border-color:var(--accent)}.sd .bad{color:var(--accent-3);border-color:var(--accent-3)}.sd .arrow{color:var(--muted);font-size:clamp(15px,4vmin,28px)}.sd .active{background:color-mix(in srgb,var(--accent) 16%,var(--surface));border-color:var(--accent)}.sd .blocked{background:color-mix(in srgb,var(--accent-3) 13%,var(--surface));border-color:var(--accent-3)}.places{display:grid;gap:6px;width:25%}.places .tile{padding:clamp(4px,1.2vmin,8px)}.places .tile.on{border-color:var(--accent);background:color-mix(in srgb,var(--accent) 12%,var(--surface))}.gate{border:2px dashed var(--accent);border-radius:9px;padding:clamp(6px,2vmin,14px);text-align:center}.sd-stage>.tile{min-width:23%}let n=0;function advance(){n=1-n;document.querySelectorAll('.places .tile').forEach((el,i)=>el.classList.toggle('on',i===n));document.getElementById('place').textContent='inside';document.getElementById('result').textContent=n?'verified':'verify again';document.getElementById('state').textContent=n?'external request':'internal request';document.getElementById('caption').textContent='location never skips the gate'}advance();setInterval(advance,900);
document.querySelector('.sd').addEventListener('pointerdown',advance);Zero trust does not grant automatic trust just because a request came from an internal network. It evaluates the user, device, resource, and context before granting narrow access.
Both internal and external requests pass through the same gate in the demo. Implementations should account for changing device and session risk and avoid bypass paths when checks fail.
Apply it when designing access policies for internal networks, remote work, and service-to-service calls.