# What is zero-trust network access (ZTNA)?

ZTNA is a way of giving remote users access to individual applications instead of to the whole network. The user signs in through an identity provider, the service checks the user, the device and often its location and health, and then opens a connection to that one application only; the rest of the network stays invisible to the user. Many products deliver it as a cloud service with a small connector inside your network, so nothing needs to listen on the internet. For a small company it can replace a VPN for web applications and remote desktop, and it makes it easier to give a supplier access to one system without giving them the network. It does not remove the need to watch the inside: a compromised application server can still reach its neighbours. NetSenX does not provide ZTNA; it flags lateral movement and scanning from hosts on monitored segments, on every plan.

FAQ: [Zero trust, identity and segmentation](https://netsenx.com/en/faq/zero-trust) · https://netsenx.com/en/faq/what-is-zero-trust-network-access-ztna

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/what-is-ndr

## Related questions

- [Is a firewall still needed if we have zero trust or SASE?](https://netsenx.com/en/faq/is-a-firewall-still-needed-with-zero-trust-or-sase)
- [How do segmentation and least privilege limit lateral movement?](https://netsenx.com/en/faq/how-does-segmentation-limit-lateral-movement)
- [Where do I start segmenting a flat office network?](https://netsenx.com/en/faq/where-to-start-segmenting-a-flat-office-network)
- [How do I segment IT and OT with VLANs and access lists?](https://netsenx.com/en/faq/how-to-segment-it-and-ot-with-vlans-and-acls)
- [What is microsegmentation, and do small companies need it?](https://netsenx.com/en/faq/what-is-microsegmentation)