BeyondCorp
also: zero-trust security, zero trust network access
BeyondCorp is a zero-trust security framework developed by Google that eliminates the concept of a trusted corporate network perimeter, requiring all users and devices to be authenticated and authorized regardless of location or network.
BeyondCorp represents a fundamental shift from traditional network security models that relied on a fortified perimeter (castle-and-moat approach). Instead, it treats every access request as potentially untrusted and requires continuous verification of user identity, device health, and context before granting access to resources.
The framework assumes that a user connecting from the corporate office network is no more trustworthy than one connecting from a coffee shop, home, or public WiFi. Security decisions are based on continuous evaluation of device compliance, user credentials, and request context rather than network location.
In practice, a BeyondCorp implementation might deny a developer SSH access to a production server unless their device passes security checks (updated OS, antivirus active), they use multi-factor authentication, and their access pattern matches expected behavior. This contrasts with older models where anyone on the VPN automatically gained broad internal network access.