How Tencent’s Zero‑Trust Framework Became the First International Standard

What Is Zero‑Trust Security?

Zero‑trust security is an identity‑centric, dynamic network access control model that assumes no user, device, or system—whether inside or outside the network—is trustworthy by default, requiring continuous authentication and authorization to rebuild the trust foundation.

As traditional perimeter‑based defenses fade, zero‑trust is emerging as the next‑generation mainstream security approach.

Tencent Leads Zero‑Trust Practice

Since 2016, Tencent has deployed a zero‑trust architecture for its internal enterprise network, culminating in the iOA (Tencent Terminal Borderless Access Control System). iOA leverages three core capabilities—trusted terminals, trusted identities, and trusted applications—to provide a unified access gateway for on‑premise and cloud applications.

The system integrates Tencent’s top‑ranked anti‑malware solution, real‑time threat interception, and rapid vulnerability remediation, ensuring secure, stable, and efficient access to enterprise resources across any network environment. Tencent’s experience in gaming and hybrid‑cloud server access further enriches its comprehensive, one‑stop zero‑trust security ecosystem.

Building Next‑Gen Security Across Industries

iOA has been successfully implemented in government, healthcare, transportation, and financial sectors, addressing core challenges of identity management and endpoint protection while maintaining user experience and improving operational security efficiency.

Amid unprecedented security challenges in the industrial internet era, the new standard provides essential guidance for the market. Tencent plans to collaborate with domestic and international partners to promote the standard’s adoption and help construct a new generation of network security worldwide.