Governance

Zero Trust Isn't a Product. It's a Posture.

April 28, 2026·6 min read

Every conference season brings a new wave of "zero trust" booths. The branding has gotten ahead of the engineering.

Zero trust is not a box you buy. It is a commitment to verifying every request, every time, against identity and context — regardless of where it originated on the network.

The hard parts are organizational

Getting identity providers consolidated. Getting service owners to inventory their dependencies. Getting executives to fund work that has no flashy demo.

— A.P.W.

The Dispatch

New essays, straight to your inbox.

Occasional letters on network defense, AI risk, governance, and the life around the work. No spam, unsubscribe any time.