--- title: Beyond Zero: Enterprise security for the AI era | daily.dev description: Google security engineers introduce 'Beyond Zero', a next-generation enterprise security paradigm that extends the BeyondCorp/zero-trust model to address the... canonical: https://daily.dev/posts/beyond-zero-enterprise-security-for-the-ai-era-omxanio3z twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Beyond Zero: Enterprise security for the AI era | daily.dev og:description: Google security engineers introduce 'Beyond Zero', a next-generation enterprise security paradigm that extends the BeyondCorp/zero-trust model to address the... og:url: https://daily.dev/posts/beyond-zero-enterprise-security-for-the-ai-era-omxanio3z og:image: https://api.daily.dev/og/posts/OMXANiO3z.png og:image:alt: Beyond Zero: Enterprise security for the AI era og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Beyond Zero: Enterprise security for the AI era **[Hacker News](https://daily.dev/sources/hn)** · 21 min read · 1 upvotes · 0 comments ## Summary Google security engineers introduce 'Beyond Zero', a next-generation enterprise security paradigm that extends the BeyondCorp/zero-trust model to address the challenges posed by AI agents and machine-speed data access. The model shifts trust boundaries from application-level to individual resource actions, combining static authorization policies with a dynamic AI-driven reasoning engine. Key components include autonomous governance (building an enterprise world model), event intake, a hierarchical reasoning engine capable of fast policy evaluation and slower anomaly detection, and a challenge/containment infrastructure for managing exceptions. The architecture is designed to authorize both human and AI agent actions in real time, detecting threats like rogue agents or compromised credentials through contextual, intent-based analysis. The authors call for industry-wide standards around agentic identities, pluggable policy evaluation, and agent context annotations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 98 comments across hackernews (as of 2026-07-28). **TL;DR:** The community is largely skeptical of using AI/LLMs for access control decisions, citing non-determinism, manipulation risks, and operational complexity, though some see value in layering AI behavioral monitoring on top of existing deterministic controls rather than replacing them. **Sentiment:** 10% positive · 35% mixed · 55% skeptical **The case for** - AI could augment existing deterministic zero-trust controls by flagging unusual behavioral patterns (e.g., bulk downloads by a user who never does that) rather than replacing hard rules. - Combining static RBAC/ABAC with a dynamic AI reasoning layer could reduce the need for manually maintaining thousands of fine-grained policy rules at enterprise scale. - ML-based anomaly detection is already proven in fraud detection, so extending it to access control is a natural evolution. **The pushback** - Non-deterministic access controls introduce unpredictability that makes troubleshooting a nightmare and creates a new high-value attack target ('the brain'). - Legitimate but unusual behavior (engineer fixing an emergency on PTO, users from certain geographies) risks being incorrectly flagged or denied. - Identity data fed to the AI depends on humans keeping org charts, roles, and HR records up to date, which is unreliable in practice. - Spoofed or attacker-generated signals could poison the AI's risk model and permanently flag innocent users as threats. - The proposal may just shift the attack vector to the AI reasoning layer itself, which could be prompt-injected or otherwise manipulated. - Concerns about scope creep: enterprise AI access controls could spread to consumer contexts and enable 'discrimination as a service'. **By community** - hackernews (skeptical): Most commenters are critical of non-deterministic access control, though a vocal minority argues AI should layer on top of—not replace—deterministic controls for behavioral anomaly detection. **Hottest debate:** Whether AI should make access decisions at all (non-determinism is unacceptable) versus whether it should only augment existing deterministic controls with behavioral monitoring. **Open questions** - Who is responsible for correcting the AI when it wrongly denies access due to stale or manipulated identity data? - How do you prevent an attacker from poisoning behavioral signals to permanently blacklist a legitimate user? - Is the transformer/LLM architecture actually the right tool for this optimization problem, or are classical ML anomaly-detection models better suited? - Who watches the watcher—how does the AI security agent itself build and maintain trust? **Highlights** > Zero trust is deterministic. AI is non-deterministic Non-deterministic access controls is Terrible idea > — [stogot on hackernews · 4 comments](https://news.ycombinator.com/item?id=49082567) > I completely agree. I think LLMs may have a role in security posture, specifically flagging/identifying potential threats for human review. But a Zero Trust/Access Controls should be a HARD boundary, not an inconsistent one. The problem we have right now is that there are some legitimately interesting ideas out there for things we could be using LLMs for, but we also have a ton of "I have a hammer, and everything looks like a nail" going on too. > — [Someone1234 on hackernews · 4 comments](https://news.ycombinator.com/item?id=49082607) > Correct. In existing zero trust identity, we already have deterministic risk signals. In Entra where I work we already check things like "Is this person on a managed device? Is it compliant? Where are they? What MFA methods do they have registered/did they use?" on top of existing RBAC, etc. and its continuously evaluated. Entra watches for leaked passwords, assigns risk scores, etc. and you can make access decisions based on user risk or sign in risk, force password changes, require different MFA methods depending on the resource and the risk level, etc. "Should this API call on this resource be allowed right now?" is mostly already determined by the above. Where I see adding AI into the evaluation is to watch for unusual behavior that's not picked up by the deterministic signals. "Alice is trying to download gigs worth of data from the company file share, however she has never done that in the past, and there hasn't been any recent role/job changes" and so the LLM flags it or denies the request, or pushes it for a human approver, etc. > — [thewebguyd on hackernews](https://news.ycombinator.com/item?id=49085166) > I've been working on an open source ZTNA project/product https://github.com/octelium/octelium for many years and I am actually very open to the idea. Machine learning has already been in use for years when it comes to anomaly detection. Maybe modern LLMs can be used to automate access control, partially or fully at enterprise scale in the future. The idea is to have a policy engine that's controlled by AI that uses a mix of long-term semi-static info such as group memberships and permission boundaries, short-term info such as behavior (e.g. access logs) and current session's authentication strength level (AAL) such as FIDO as well as near real-time external information (e.g. IdP, SIEM, threat intelligence, on-call management) to dynamically adjust users' access control to build up some sort of a context for each user and each session that can increase or decrease permissions without having to manually add policy rules or going through request/approval flows, while optimizing for the main objective (i.e. minimizing access grants for every subject to any resource under whatever context unless when it's necessary). This can be unified for both humans and non-human identities, including agents. > — [geoctl on hackernews · 1 comments](https://news.ycombinator.com/item?id=49082848) > Finally, we've invented a way to abolish all the reliability and speed of discrete computing. We're well on our way to re-inventing the layers of bureaucracy and red tape the tech industry had disrupted. I can't wait to fill out a form describing why I want to do something I have permission to do but the AutoBureaucrat5000 says no anyway. > — [jayd16 on hackernews](https://news.ycombinator.com/item?id=49085193) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=49081644) · 39 points · 98 comments ## Similar posts on daily.dev - [Beyond Zero: Google Publishes Successor to BeyondCorp](https://daily.dev/posts/beyond-zero-google-publishes-successor-to-beyondcorp-av1kgpbyl) · InfoQ · 1 upvotes · 0 comments - [The two speeds of AI agent runtime security](https://daily.dev/posts/the-two-speeds-of-ai-agent-runtime-security-opzw70ons) · Arcjet · 1 upvotes · 0 comments - [Zero Trust for Agentic AI: Safeguarding your Digital Workforce](https://daily.dev/posts/zero-trust-for-agentic-ai-safeguarding-your-digital-workforce-qon3brk1z) · Cisco · 1 upvotes · 0 comments - [Zero Trust in the Age of AI: Why the Classic Model Isn’t Enough Anymore](https://daily.dev/posts/zero-trust-in-the-age-of-ai-why-the-classic-model-isn-t-enough-anymore-j66ljlvyr) · Security Boulevard · 1 upvotes · 0 comments - [The agentic blind spots in your zero trust program](https://daily.dev/posts/the-agentic-blind-spots-in-your-zero-trust-program-aic8yqwgr) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#authorization](https://daily.dev/tags/authorization) [View this post on daily.dev](https://daily.dev/posts/beyond-zero-enterprise-security-for-the-ai-era-omxanio3z) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Beyond Zero: Enterprise security for the AI era","url":"https://daily.dev/posts/beyond-zero-enterprise-security-for-the-ai-era-omxanio3z","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/beyond-zero-enterprise-security-for-the-ai-era-omxanio3z"},"datePublished":"2026-07-28T12:10:30.551Z","dateModified":"2026-07-28T21:33:11.579Z","description":"Google security engineers introduce 'Beyond Zero', a next-generation enterprise security paradigm that extends the BeyondCorp/zero-trust model to address the...","image":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","thumbnailUrl":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/beyond-zero-enterprise-security-for-the-ai-era-omxanio3z","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,authorization","timeRequired":"PT21M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Beyond Zero: Enterprise security for the AI era"}]} ```