Topic starter
11/11/2026 6:05 pm
TL;DR: Zero Trust weakens when organisations cannot verify against an accurate, current estate, according to Lansweeper. Asset discovery and ownership data have to stay current or access decisions drift away from reality.
Editorial analysis by NHI Mgmt Group, based on content published by Lansweeper: “The Thing That Nobody Knew Was There”.
Key questions
Q: Why do unknown assets weaken zero trust controls?
A: Unknown assets weaken zero trust controls because policy can only govern devices, services and workloads it knows about.
Q: How do AI agents complicate asset discovery and access control?
A: AI agents complicate asset discovery and access control because they can create, spawn or use tools, services and secrets dynamically during runtime.
Q: What should teams do first when zero trust is still only partially deployed?
A: Start with the controls that remove the most obvious exposure: MFA, least privilege, shared credential protection and removal of default admin accounts.
Practitioner guidance
- Establish a single estate inventory Create one reconciled source of truth for assets, users, applications, and AI-connected services so access controls are based on the same record set across teams.
- Classify AI tools and agents on connection Require every AI-connected service, agent, or integration to be inventoried, owned, and mapped to the data and systems it can reach before it is allowed into production.
- Reconcile IT and security views regularly Set a recurring reconciliation process for asset, access, and ownership data so policy engines and segmentation rules do not drift from the live environment.
Bottom line: Zero Trust depends on an accurate estate view, and that dependency becomes critical when AI tools and machine identities are added faster than governance can classify them.
Glossary terms: Zero Trust, Asset Discovery, Machine Identity, Shadow AI
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/11/2026 6:07 pm
Zero Trust fails first at the data layer, not the policy layer. If the organisation cannot say what is in scope, policy engines and access controls inherit that uncertainty. The practical result is governance theatre: rules exist, but they are enforced against stale or incomplete records.
A question worth separating out:
Q: Can segmented networks still fail if inventories are outdated?
A: Yes. Segmented networks can still fail when inventories are outdated because segmentation policy depends on knowing which hosts, subnets, services and trust zones exist. If a forgotten server, cloud workload or new bridge sits outside the inventory, traffic may be routed or allowed around intended firewall rules, ACLs or microsegmentation controls.
👉 Read our full editorial: Zero Trust fails when asset discovery cannot keep pace