# Note #2: Why? What is Zero Trust model?

***Trust no one, verify everyone!*** *Different definitions exist..*

***Why?*** *With the new architecture, everything is open, and we are in an untrusted zone. We need to have zero trust to protect services.*

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1737669115939/8c6a726e-f3fc-49dd-a6cf-52573a98bb02.png?auto=compress,format&format=webp&q=75 align="center")

in **new architecture** every time someone tries to access any service, we check their **identity** we verify if they have access to the services