Cisco Duo: Zero Trust Security
Start your zero trust journey with Duo's user and device trust.

Cisco Duo: Free


A New Approach to Security

Traditional security relies on location-based trust. A zero trust model establishes trust for every access request - regardless of location. It enforces adaptive controls, and continuously verifies trust. Trust levels are dynamic and change to adapt to your evolving business. This approach can help prevent unauthorised access, contain breaches and reduce the risk of an attacker's lateral movement.

Duo ensures only the right users and secure devices can access applications, providing a foundation for a zero trust framework and securing the workforce. A comprehensive approach to securing your entire IT ecosystem requires zero trust for the workforce, workloads and workplace.



Five Steps to a Zero Trust Enterprise



Establish Trust

Establish Trust in User Identities

Verify the identity of all users with secure access solutions such as two-factor authentication (2FA) before granting access to corporate applications and resources.

Gain Visibility into Devices & Activity

Gain Visibility into Devices & Activitys

Gain visibility into every device used to access corporate applications, whether or not the device is corporate managed, without device management agents.

Ensure Device Trustworthiness

Ensure Device Trustworthiness

Inspect all devices used to access corporate applications and resources at the time of access to determine their security posture and trustworthiness. Devices that do not meet the minimum security and trust requirements set by your organization are denied access to protected applications.

Enforce Adaptive & Risk-Based Policies

Enforce Adaptive & Risk-Based Policies

Protect every application by defining policies that limit access only to users and devices that meet your organization's risk tolerance levels. Define, with fine granularity, which users and which devices can access what applications under which circumstances.

Enable Secure Access to All Apps

Enable Secure Access to All Apps

Grant users secure access to all protected applications through a frictionless secure single sign-on interface accessible from anywhere without a VPN. Protect all applications - legacy, on-premises and cloud-based.


Zero Trust, Explained


Learn about what zero trust is, the three pillars of zero trust - the workforce, workloads and workplace - and why it's important to secure them all.



Cisco has been named a leader in the 2020 Zero Trust Platform Wave.


Cisco Zero Trust provides a comprehensive approach to securing all access across your applications and environment, from any user, device and location. It protects your workforce, workloads and workplace.

  • To protect the workforce, Cisco ensures only the right users and secure devices can access applications.
  • To protect workloads, Cisco secures all connections within your apps, across multi-cloud.
  • To protect the workplace, Cisco secures all user and device connections across your network, including IoT.

This complete zero trust security model allows you to mitigate, detect and respond to risks across your environment.

Zero Trust Report

Zero Trust Guide

Zero Trust: Going Beyond the Perimeter


Download this guide to learn the fundamentals of a zero trust approach to enterprise security - including the three pillars, risks addressed by each pillar, implementation and proposed maturity models.



Duo's Editions

Compare Duo's different plans to find which one is right for you.


Duo MFA

Duo MFA

With Duo MFA, you can easily deploy multi-factor authentication to your users, get basic access controls, advanced administrative management and an overview of your device security hygiene.


Duo Access

Duo Access

With Duo Access, you can get detailed device data to enable device access controls, give your users a secure single sign-on (SSO) experience and conduct vulnerability assessments.




Duo Beyond

Duo Beyond

With Duo Beyond, you can identify trusted endpoints by easily deploying device certificates, block any untrusted endpoints and give your users secure access without a VPN.


Duo Federal

Duo Federal

Duo offers two FedRAMP Authorised editions that deliver strong cloud-based authentication and device visibility tailored to the demands of public sector organizations.



Want to Learn More? Contact a Cisco Security Specialist Now!