Microsoft Bolsters Zero Trust Tools with AI and DevSecOps Pillars

Microsoft has updated its Zero Trust Assessment and Workshop tools to include new pillars focused on AI and DevSecOps.

The addition of an AI pillar to the Zero Trust Assessment tool allows developers to hand-code generation, dependency selection, and infrastructure configuration to AI tools. This expansion enables teams to evaluate tenant configuration and activity signals, then translate findings into recommendations ranked by priority.

With the introduction of the DevSecOps pillar in the Zero Trust Workshop, Microsoft aims to carry the three zero trust principles, verify explicitly, apply least privilege, and assume breach, into the development lifecycle. The new pillar targets AI-assisted development specifically, with four tasks focused on code governance, tool allowlisting, data protection, and pipeline supply-chain security.

The Zero Trust Workshop now offers a plan-baseline-execute sequence for teams to establish a baseline, then use findings to create a roadmap running 12-24 months. The updated tools also provide real-world enterprise adoption and deployment roadmaps from Ford Motor Company and SEB Group.