Akamai Zero Trust Security

Akamai Technologies, founded in 1998 and headquartered in Cambridge, Massachusetts, operates one of the world’s largest distributed computing platforms, with over 250,000 servers across 1,600 networks in 137 countries, reaching more than 90% of Internet users. While historically known as a content delivery network, Akamai has evolved into an “Intelligent Edge Platform” that both competes with and complements major cloud providers by offering a unified layer for application delivery, security, and integration across hybrid and multi-cloud environments.

The text argues that digital transformation, mobility, SaaS proliferation, and expanding cloud infrastructure have dissolved the traditional corporate perimeter and expanded the attack surface. Zero Trust is presented as a necessary architectural shift: every user, device, and data source is treated as untrusted, with strict least-privilege access, default-deny principles, and comprehensive auditing. A key theme is that Zero Trust is frequently misunderstood as a product that can be purchased and deployed quickly; instead, it requires incremental architectural change and business process adaptation, avoiding “rip and replace” approaches and unnecessary complexity.

Akamai’s proposed path begins with Enterprise Application Access (EAA), a cloud-delivered, identity-aware proxy that hides applications from public exposure and enforces MFA, SSO, and policy-based access consistently across on-premises and cloud-hosted apps, without inbound VPN. Access decisions are continuous and contextual, evaluating factors such as identity, geolocation, and time. To protect users and devices from external threats during long transition periods, Enterprise Threat Protector (ETP) provides DNS-based blocking of malicious destinations and proxy-based traffic inspection with multiple antimalware engines. Strengths include global scale, reduced infrastructure burden, hybrid consistency, and identity-agnostic integrations; challenges include incomplete coverage of all Zero Trust requirements and reliance on multiple software agents for full protection beyond web applications.

• Akamai Technologies was founded in 1998 and is headquartered in Cambridge, Massachusetts, USA.
• Akamai’s platform spans over 250,000 servers and 1,600 networks across 137 countries.
• Akamai’s Intelligent Edge Platform is within direct reach of over 90% of Internet users worldwide.
• Large enterprise customers include Microsoft, Apple, and Facebook.
• Enterprise Application Access (EAA) forces users to access applications through an Identity Aware Proxy.
• EAA supports integrations with identity stores and standards including Active Directory and SAML, and IAM vendors such as Okta.
• EAA’s MFA framework supports SMS, time-based one-time passwords, and Duo Security.
• Enterprise Threat Protector (ETP) can be implemented by redirecting DNS resolution requests to the service.
• ETP can forward risky websites or individual URLs to a cloud proxy for real-time analysis using multiple antimalware engines.
• Activity logs and security events can be sent to an existing SIEM for further analysis.

• “Going Zero Trust is a transformational process that requires organizations to radically rethink not just their IT architectures and security policies, but to adapt their entire business processes for the modern mobile workforce where there no longer is a notion of a trusted ‘inside’.”
• “Perhaps the biggest misconception is that the Zero Trust model can be purchased on a turn-key basis, instantly transforming a legacy network into a ‘next-generation perimeter’.”
• “A simple idea that a corporate network should no longer have a ‘trusted LAN’ zone and every user or device in it should be subjects of the same security and access control policies regardless of their location, sounded revolutionary, yet simple enough to be understood even by non-technical executives.”
• “Zero Trust is not an off-the-shelf-product and not even something that IT alone can implement.”
• “Zero Trust is a journey that begins with a long-term business strategy and focuses on a step-by-step implementation using existing or readily available tools and technologies.”
• “This not only significantly lowers the overall complexity of corporate network infrastructures, but also reinforces security best practices: any ‘implicit trust’ giving users access to whole networks by traditional VPN tools is eliminated.”
• “It’s worth stressing explicitly, however, that the authentication is not a one-time event, but a continuous, adaptive process.”
• “Different companies will have different priorities in implementing individual requirements of the Zero Trust model.”
• “For some time, businesses tried to address the challenge by throwing money at it, allocating bigger budgets for additional cybersecurity tools.”
• “In the future, the company is planning to offer tighter integrations with its own and third-party security solutions to evaluate even more variables like the risk posture of the device or threat signals from protected applications.”