# What is zero trust? | DBLinx Blog

> Zero trust is a security approach in which being inside the network is not trusted on its own, and every request is re-verified using identity and permissions.

Source page: https://dblinx.net/en/blog/sifir-guven-nedir

---

Concept

# What is zero trust? A plain explanation for small and mid-size businesses

Zero trust is a security approach in which simply being on the network isn't treated as trust by itself; every request is re-verified by identity and permission. Although it sounds like a term for large enterprises, its core principles apply to small businesses too.

The DBLinx team2 min readPublished: 17.10.2026

- [security](https://dblinx.net/en/blog#etiket-guvenlik)
- [identity](https://dblinx.net/en/blog#etiket-kimlik)
- [concept](https://dblinx.net/en/blog#etiket-kavram)

The old approach to security resembles a castle: inside the walls is safe, outside is dangerous. Anyone who connects to the office network counts as inside. Today employees connect from home, from the field and from their phones, and applications are already on the internet. The distinction between inside and outside the walls has lost its meaning.

## The three principles of zero trust

- **Verify every request.** Just because a person has signed in, every subsequent action is not automatically trusted; the session is checked for validity on every request.
- **Grant least permission.** Everyone accesses only what they need for their job.
- **Assume breach.** Design things so that even if one account is compromised, the damage stays small; be able to shut off access instantly.

## Practical steps for a small business

- Remove shared passwords; let everyone sign in with their own identity.
- Tie access to department and role, not to the individual.
- Shut off a departing person's access from one place, instantly.
- Give devices such as doors and terminals an identity too, so a lost device can be revoked.
- Keep logs showing who accessed what readily available.

**Note**Zero trust is not a single product you buy; it is a design approach. How well a product follows these principles is measured by its answers to the questions above.

## These principles in the DBLinx family

- **Verification on every request:** SmartFiles and SmartPass verify the session with SmartID on every request; a session closed centrally becomes invalid immediately.
- **No access, no entry:** When switching between products, the switch is denied if the person has no active membership in the target product.
- **Least permission:** Separate permissions per mailbox in SmartMail and per space in SmartFiles.
- **Device identity:** SmartPass terminals are verified with a certificate; a device revoked from the dashboard is rejected.

[DBLinx Security](https://dblinx.net/en/smart360-security)[Guide: the principle of least permission](https://dblinx.net/en/rehberler/en-az-yetki-ilkesi)

## Frequently asked questions

Is zero trust only for large organizations?

No. Any organization can apply its principles, such as removing shared passwords and shutting off access from a single place.

Is using a VPN zero trust?

Not on its own. A VPN protects entry to the network, whereas zero trust also checks every request made after entry.

What should the first step be?

Remove shared passwords and make sure everyone signs in with their own identity.

## Grant access based on the job

In the DBLinx family everyone signs in with their own identity; access is granted and shut off from a single dashboard.

[Request a quote](https://dblinx.net/en/teklif-iste)[Get in touch](https://dblinx.net/en/iletisim)

## Related articles

- [ConceptWhat is email security analysis? How it differs from a spam filterA spam filter screens out unwanted bulk mail; security analysis instead checks whether a single incoming email really comes from where it claims to, whether it contains impersonation or a fake link, and records the reasoning.2 min read](https://dblinx.net/en/blog/e-posta-guvenlik-analizi-nedir)
- [ComparisonIntegrated business software or separate tools? 6 criteria for decidingShould you get email, documents and other business tools from a single family, or from a separate service for each? Both approaches have advantages; the right choice depends on the organization's size and management overhead.2 min read](https://dblinx.net/en/blog/entegre-is-yazilimi-mi-ayri-araclar-mi)
- [SectorEmail and document organization at accounting firms: client paperwork, fake invoices and permissionsAccounting firms collect invoices, receipts and tax-return paperwork from dozens of clients every month. Making sure paperwork doesn't get lost, stays with the right person, and fake invoice emails get filtered out is part of the daily routine.2 min read](https://dblinx.net/en/blog/mali-musavirlik-burosunda-e-posta-ve-belge-duzeni)