Zero trust architecture in 2026: overview
Zero trust architecture continuously verifies users, devices and requests rather than granting trust based on network location. It combines identity, device health, access policies and monitoring to limit unauthorized access and lateral movement. As cloud services, connected devices and distributed work dissolve traditional network boundaries, the challenge is to apply these controls without adding excessive latency or operational complexity.
Recent work pushes zero trust beyond enterprise networks into connected systems. September 2026 research examines microsegmentation for smart greenhouse security and continuous verification across robotic ecosystems; another study explores a self-evolving wireless sensor network framework using federated reinforcement learning and physical-layer fingerprinting. In June 2026, Nimbus-T Global and Carahsoft partnered to deliver identity-first zero trust security to government agencies. These directions point toward context-aware access for diverse devices, while raising practical questions about constrained resources, policy coordination and reliable trust decisions.
- 1Research accelerates: Publication growth of 106.7% alongside a 50.8% decline in patent activity points to a field generating more research than new patent filings.
- 2Beyond enterprise IT: Recent work applies zero trust to robotics, industrial IoT, healthcare and wireless sensor networks, where device constraints complicate continuous verification.
- 3Policy meets context: Adaptive policy and analytics is the largest approach facet, reflecting a shift toward access decisions informed by changing identity, device and risk signals.
Top organizations working on zero trust architecture
Ranked by Linknovate activity score · last 24 monthsThe activity score adds up the relevance of every patent, publication, grant and news item linking an organization to zero trust architecture. Showing 7 of 381 organizations.
| # | Organization | Approach | Signals (24 mo) | Momentum | Why it matters |
|---|---|---|---|---|---|
| 1 |
Microsoft
Corporate · United States |
Identity-centric access | PAT 1 · PUB 1 NEWS 920 |
-28% | Microsoft’s Entra identity and access controls support zero-trust policies, applying identity, device, and risk signals to govern access to applications and resources. |
| 2 |
IBM
Corporate · United States |
Identity-centric access | PUB 5 · NEWS 874 | -32% | IBM’s security portfolio includes identity and access management capabilities that can enforce zero-trust policies, alongside services for planning and implementing zero-trust architectures. |
| 3 |
Cisco Systems
Corporate · United States |
Application-level network access | PUB 3 · NEWS 648 | -28% | Cisco combines identity-based access controls, including Duo, with secure access and network security products to support zero-trust access to applications and resources. |
| 4 |
Palo Alto Networks
Corporate · United States |
Application-level network access | PAT 7 · PUB 1 NEWS 442 |
-26% | Palo Alto Networks applies zero-trust principles through Prisma Access and its broader security platform, controlling user access to applications across distributed and hybrid environments. |
| 5 |
Google
Corporate · United States |
Identity-centric access | PUB 1 · NEWS 475 | -35% | Recently, Google demonstrated zero-trust controls for autonomous AI agents through an open-source customer-support and returns agent built with its Agent Development Kit and Gemini. |
| 6 |
Zscaler
Corporate · United States |
Application-level network access | PAT 3 · PUB 1 NEWS 260 |
-22% | Recently, Zscaler expanded its partnership with Carahsoft to deliver zero-trust security to small and midsize customers. Its cloud platform provides secure, policy-based access to applications without extending the corporate network. |
| 7 |
Amazon
Corporate · United States |
Application-level network access | PUB 1 · NEWS 404 | -43% | Amazon Web Services offers Verified Access, which evaluates identity and device signals to provide policy-controlled access to applications without relying on a traditional VPN. |
| 8 | ··Hidden organizationCompany | Approach | PAT 00 · PUB 00 GRANTS 0 · NEWS 00 | +00% | Available to registered users. |
| 9 | ··Hidden organizationCompany | Approach | PAT 00 · PUB 00 GRANTS 0 · NEWS 00 | +00% | Available to registered users. |
| 10 | ··Hidden organizationCompany | Approach | PAT 00 · PUB 00 GRANTS 0 · NEWS 00 | +00% | Available to registered users. |
Startups to watch and leading research centers
Startups to watch 2 total
Stealthpath LlcUnited StatesStealthPath’s patent describes network-security software that authenticates and authorizes devices, applications, users, and protocols across communicating nodes.
Leading research institutions 315 total
Chandigarh UniversityIndiaRecently, Chandigarh University researchers published work on AI-driven fault detection and autonomous recovery in zero-trust networks, alongside research on lightweight architectures for resource-constrained organizations.
Lovely Professional UniversityIndiaLovely Professional University researchers study zero-trust security across network, industrial IoT, and medical IoT settings, including energy-efficient frameworks for constrained devices.
Chitkara UniversityIndiaChitkara University researchers examine zero-trust frameworks for IoT and software-defined networks, including federated-learning-based traffic analysis and malware classification.- ··Hidden research institutionCountryAvailable to registered users, with their key researchers.
- ··Hidden research institutionCountryAvailable to registered users, with their key researchers.
Where zero trust architecture innovation happens
Share of documents with at least one organization from each country.
Open the interactive map with all 381 organizationsMain technical approaches
Last 24 months| Approach | What it is | Documents | Leading organizations |
|---|---|---|---|
| Identity-centric access | Identity-centric access evaluates who is requesting a resource; its effectiveness depends on reliable identity signals and account security. | 624 |
MFA Inc., ZTNA, Microsoft |
| Application-level network access | Application-level network access grants users access to specific services rather than the wider network, but depends on consistent application and policy integration. | 203 |
ZTNA, Cisco Systems, Palo Alto Networks |
| Microsegmentation | Microsegmentation restricts communication between workloads to limit lateral movement, but mapping dependencies and maintaining rules can be complex. | 661 |
MFA Inc., ZTNA, IBM |
| Device posture verification | Device posture verification conditions access on device health and configuration, but may exclude legitimate users when checks or endpoint coverage are incomplete. | 168 |
ZTNA, MFA Inc., Palo Alto Networks |
| Adaptive policy and analytics | Adaptive policy and analytics adjusts access decisions using changing signals, but requires trustworthy telemetry and policies that avoid disruptive false positives. | 996 |
MFA Inc., ZTNA, IBM |
Emerging trends
Last 12 months vs previous 36 monthsTerms whose frequency in the last 12 months grew the most compared with the previous 36 months.
Funding and investment
Recent funding rounds
FACTS records 15 grants totaling $29,573,935 since 2020. The listed funding-round data includes broader corporate financing and should not be read as dedicated zero trust investment.
Patent landscape
Top patent holders · last 24 monthsRecent developments
Latest news, duplicates removed- Oct 2026Specops Software Zero Trust principles are now commonplace in enterprise infrastructure; organizations have spent years investing in measures that secure identities and systems against sophisticated attacks. However…BleepingComputer
- Jul 2026Restaurant mobile apps have evolved into complete digital ecosystems that manage online ordering, customer accounts, loyalty programs, table reservations, digital payments, and delivery tracking. Every interaction…TechBullion
- Jul 2026Delray Beach, FL, July 08, 2026 (GLOBE NEWSWIRE) -- According to MarketsandMarkets™, the Zero Trust Network Access (ZTNA) Market is projected to grow from USD 1.34 billion in 2025 to USD 4.18 billion by 2030…GlobeNewswire: Directors And Officers
- Jul 2026Austin, July 02, 2026 (GLOBE NEWSWIRE) -- The Network Access Control Market was valued at USD 5.43 Billion in 2025 and is expected to reach USD 48.84 Billion by 2035, growing at a CAGR of 24.66% over the forecast…GlobeNewswire: Press Releases
- Month 20XXHidden developmentAvailable to registered users with alerts enabled.
Frequently asked questions about zero trust architecture
What companies are working on zero trust architecture?
Microsoft, IBM, Cisco Systems, Palo Alto Networks and Google are among the principal companies active in zero trust architecture. Their work spans identity and access controls, application-level secure access, and security platforms for distributed environments. Zscaler, Amazon, Fortinet, Broadcom Corporation and Akamai also contribute through cloud access, network security or microsegmentation capabilities.
Which zero trust architecture startups are the most promising in 2026?
FACTS lists 2 startups overall and names Stealthpath Llc, whose records include 2 patents. Its patent describes software that authenticates and authorizes devices, applications, users and protocols across communicating nodes. The available information does not support a comparative ranking of startup prospects, so this example is best treated as a signal of activity rather than an investment recommendation.
Which universities and research centers lead zero trust architecture research?
Among named research contributors, Chandigarh University has 18 documents, Chitkara University has 15 and Lovely Professional University has 12. Their topics include adaptive security, federated learning, industrial IoT and energy-efficient approaches for constrained devices. These figures identify active contributors in FACTS, but do not establish a ranking across all universities or research centers.
How much funding has zero trust architecture received?
FACTS records 15 grants totaling $29,573,935 since 2020. These are the grant figures associated with the topic data. The listed funding rounds total $613,562,866,360 across 31 rounds, but include broad corporate financing that is not necessarily dedicated to zero trust architecture. Treat the grant total as the more relevant funding indicator, not as a complete measure of investment in the field.
Who holds the most zero trust architecture patents?
CiscoTechnology Inc. holds the most patents in the listed holder data, with 13, followed by Sophos with 10 and Palo Alto Networks with 7. Fortinet holds 4, while Level 3 Communications, Bank of America and Zscaler each hold 3. These counts identify the leading holders in the available patent-holder list.
Is zero trust architecture patent activity growing?
No: FACTS reports 97 patents in the 24-month window and patent growth of -50.8%. This contrasts with publication growth of 106.7%, suggesting research activity is expanding while patent filings have declined. Patent and publication trends measure different forms of activity, so the divergence does not by itself show that commercial development or adoption is slowing.
What are the latest developments in zero trust architecture?
Recent developments include September 2026 research on microsegmentation for smart greenhouse systems and zero trust for robotic ecosystems. In September 2026, another study proposed federated reinforcement learning and physical-layer fingerprinting for wireless sensor networks. In June 2026, Nimbus-T Global and Carahsoft partnered to deliver identity-first zero trust security to government agencies, extending the approach into public-sector use.
What are the main approaches in zero trust architecture and how do they differ?
FACTS groups the approaches into identity-centric access, application-level network access, microsegmentation, device posture verification, and adaptive policy and analytics. Microsegmentation has 661 documents, while adaptive policy and analytics has 996. The approaches differ in what they assess or control: identity, access to a specific application, communication between workloads, device condition, or changing contextual signals.
Which countries lead zero trust architecture?
The United States leads the country data with 11,252 documents, followed by the United Kingdom with 3,081 and Germany with 1,818. India has 1,799 and Japan has 1,436. These counts describe document activity associated with the topic; they do not necessarily measure deployment levels or the size of national zero trust markets.
What are the applications of zero trust architecture?
FACTS identifies healthcare, cloud and SaaS, and industrial and critical infrastructure as major applications, with 2,267, 1,080 and 1,278 documents respectively. Other applications include remote workforce security, with 930 documents, and government and defense, with 698. These settings use zero trust to govern access across distributed users, services, devices and operational environments.