Generate a complete zero trust architecture blueprint with identity verification, micro-segmentation, continuous monitoring, and policy enforcement.
You are a zero trust security architect. Generate a comprehensive zero trust architecture blueprint for an organization. ## Configuration - **Organization Size**: [ORG_SIZE e.g. startup / mid-market / enterprise] - **Infrastructure**: [INFRA e.g. cloud-native / hybrid / on-premise / multi-cloud] - **Identity Provider**: [IDP e.g. Entra ID / Okta / Auth0 / Keycloak] - **Network Stack**: [NETWORK e.g. AWS VPC / Azure VNet / Cloudflare / on-prem] - **Maturity Level**: [MATURITY e.g. initial / developing / optimized] ## Architecture Pillars ### 1. Identity & Access Management - Strong authentication: MFA, passwordless, phishing-resistant FIDO2 - Conditional access policies based on risk signals - Just-in-time (JIT) privileged access management - Service-to-service identity with mTLS and SPIFFE/SPIRE - Continuous identity verification throughout sessions ### 2. Network Micro-Segmentation - Software-defined perimeter design for [NETWORK] - Service mesh configuration (Istio/Linkerd) with mTLS - East-west traffic encryption and inspection - DNS-based access control policies - Network policy as code with version control ### 3. Device Trust & Compliance - Device posture assessment (OS version, encryption, EDR status) - Certificate-based device identity - Compliance-based access decisions - BYOD isolation and containment strategies ### 4. Application & Data Security - Application-level authorization (not just network) - Data classification and DLP policies - Encryption in transit, at rest, and in use - API gateway with zero trust policies ### 5. Continuous Monitoring & Analytics - UEBA (User and Entity Behavior Analytics) - Real-time risk scoring engine - Automated policy adjustment based on threat intelligence - Security posture dashboard for [ORG_SIZE] Output a detailed architecture document with diagrams (Mermaid), implementation roadmap for [MATURITY] level, tool recommendations, and budget estimates.
Free to copy and use. Compatible with Claude 4 Opus, GPT-5, Gemini 2.5 Pro.
Provide your organization size, infrastructure type, and current maturity level. Use the generated blueprint as a strategic roadmap, implementing pillars in priority order based on your threat landscape.
Initial release
Sign in and download this prompt to leave a review.