Just for you — stored only in this browser

Zero Trust Maturity Self-Assessment

For each capability, pick the stage that best matches your current state. Nothing is sent anywhere — your answers live in this browser's local storage. Save a snapshot to track progress over time, and export your results as JSON so you can back them up or pick up later (even on a different device).

Assessment scope

Track separate business units, systems, or legal entities as their own assessment — each keeps its own answers and history.

Compliance focus

Select the frameworks that apply to this scope to see a gap report of the capabilities tied to them, ranked by how far they are from Optimal.

Maturity by pillar

UserDeviceAppDataNetworkAutomationVisibility
—overall maturity (of 3.0)

Pillar scores

UserNot assessed
DeviceNot assessed
Application & WorkloadNot assessed
DataNot assessed
Network & EnvironmentNot assessed
Automation & OrchestrationNot assessed
Visibility & AnalyticsNot assessed

Progress history

No snapshots saved yet — click "Save Snapshot" once you've answered a few capabilities.

— of your Advanced/Optimal claims have a supporting note.

Rate each capability

Read all three descriptions before picking one — "Optimal" is a specific, high bar, not just the best-sounding option. Add a short note (tool, audit date, control owner) to back up Advanced/Optimal claims; unsupported ones are flagged so reviewers can tell self-reported from evidenced.

Pillar 1

User

Identity Federation & Single Sign-On
Multi-Factor Authentication
Privileged Access Management (PAM)
Segregation of Duties (SoD) Enforcement
Pillar 2

Device

Firmware & Supply Chain Integrity
Device Health Attestation
Device Inventory & Compliance
Third-Party & Vendor Device Risk
Pillar 3

Application & Workload

Application-Layer Micro-Segmentation
Secure Software Development Lifecycle
Payment & Transaction Integrity Controls
Third-Party Software & Vendor Risk Management
Pillar 4

Data

Data Classification & Labeling
Encryption at Rest & In Transit
Key Management / HSM
Data Residency & Sovereignty Controls
Pillar 5

Network & Environment

Disaster Recovery & Resilience Architecture
Encrypted Traffic Inspection
Network Segmentation
Third-Party Network Connectivity Controls
Pillar 6

Automation & Orchestration

Change Management / Policy-as-Code Governance
Security Orchestration, Automation & Response (SOAR)
Centralized Policy Decision Point (PDP)
Regulatory Reporting Automation
Pillar 7

Visibility & Analytics

Insider Threat Program
Centralized Logging & SIEM
Third-Party & Fourth-Party Risk Visibility
Threat Intelligence Integration