Beyond Zero: Enterprise Security for the AI Era
Abstract
The rise of autonomous AI agents and the accelerating velocity of corporate data access are stretching the application-centric model of zero trust security to its breaking point. This paper introduces Beyond Zero, a new security paradigm designed for the AI era. The Beyond Zero architecture performs per-resource and method access decisions for humans and agents at machine speed. By shrinking the trust boundary from the application level to the individual action, and by coupling static authorization guarantees with dynamic, AI-driven reasoning, Beyond Zero enables a self-defending enterprise capable of mediating thousands of human and machine decisions per second. This paper outlines Google's vision for the future of this access model as well a call for industry collaboration and standards development.
Cite
@article{arxiv.2605.22985,
title = {Beyond Zero: Enterprise Security for the AI Era},
author = {Joseph Valente and Michal Zalewski},
journal= {arXiv preprint arXiv:2605.22985},
year = {2026}
}
Comments
This is a preprint and this paper has been accepted for publication in ACM Queue. The final version of this paper may change through the editorial process