# ukncsc/zero-trust-architecture

Principles to help you design and deploy a zero trust architecture

Repository: https://github.com/ukncsc/zero-trust-architecture
Canonical: https://ross.abutalabs.com/products/zero-trust-architecture
Homepage: https://www.ncsc.gov.uk/blog-post/zero-trust-principles-beta-release
License: NOASSERTION
License Family: other
Last push: 2023-04-25T14:11:00+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2625, "days_push": 1226, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1697, forks 172 (observed 2026-08-28T04:05:23.965486+00:00)

## What it is
UK NCSC guidance providing eight design principles for building and reviewing zero trust architectures. It is documentation rather than software, published for community feedback alongside the authoritative website version.

## Use cases
- design a zero trust architecture for my organization
- learn zero trust concepts from scratch
- evaluate vendor zero trust offerings
- review an existing network architecture against zero trust principles
- explain zero trust to board-level stakeholders

## When to avoid
- you need runnable software, tools, or code implementing zero trust
- you want vendor-specific deployment instructions
- you need a compliance certification or audit standard

## Facets
- artifact type: learning-resource
- maturity: maintenance
- function: security, documentation
- domain: security, developer-tools
- platform: -
- tags: zero-trust, architecture-guidance, ncsc

## Member repositories
- ukncsc/zero-trust-architecture (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:23.965486+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:37:52.292715+00:00, confidence not recorded.
  - readme: https://github.com/ukncsc/zero-trust-architecture (fetched 2026-08-28T04:05:23.965486+00:00, sha 5e6355e25d65)
  - homepage: https://www.ncsc.gov.uk/blog-post/zero-trust-principles-beta-release (fetched 2026-08-29T11:13:07.655509+00:00, sha e306b792de49)
  - site_page: https://www.ncsc.gov.uk/section/industry-100/about (fetched 2026-08-29T11:13:07.661803+00:00, sha 81901dd0da69)
  - site_page: https://www.ncsc.gov.uk/section/about-this-website/privacy-statement (fetched 2026-08-29T11:13:07.663546+00:00, sha 0c596dc7edcc)
  - site_page: https://www.ncsc.gov.uk/section/about-ncsc/what-we-do (fetched 2026-08-29T11:13:07.658131+00:00, sha bdde66789be9)
  - site_page: https://www.ncsc.gov.uk/section/about-this-website/contact-us (fetched 2026-08-29T11:13:07.660121+00:00, sha 00a3388c3ede)
  - site_page: https://www.ncsc.gov.uk/section/about-this-website/cookies (fetched 2026-08-29T11:13:07.665353+00:00, sha a0087995be57)
  - site_page: https://www.ncsc.gov.uk/section/about-this-website/accessibility-statement-for-wwwncscgovuk (fetched 2026-08-29T11:13:07.667421+00:00, sha 8fc8ef4febfd)
  - site_page: https://www.ncsc.gov.uk/section/about-this-website/terms-and-conditions (fetched 2026-08-29T11:13:07.669121+00:00, sha 0d0779137b93)
  - site_page: https://www.ncsc.gov.uk/section/about-this-website/social-media-policy (fetched 2026-08-29T11:13:07.671342+00:00, sha f4e877091931)
- Data as of 2026-08-30T08:39:29.467469+00:00.