Segment by identity.
Stop lateral movement after the breach.
Stop attackers from moving freely after the first breach. truePass Grid segments your network at the identity layer - not the network layer - isolating every user, device, and workload by who they are, not where they sit. Enforced dynamically, with AI-driven behavioral analytics, under one unified policy.
Built on.
From network-based to identity-based segmentation.
Traditional segmentation methods - VLANs, firewall rules, NACs - were built for a world where users had fixed locations and workloads had fixed boundaries. That world is gone. Today, users move between offices, cloud, and home. Workloads spin up across hybrid environments. Static network rules can't keep up - and once attackers breach one segment, they move laterally to everything connected to it.
truePass Grid takes a different approach. Instead of segmenting the network, Grid segments by identity. Every user, every device, every workload gets its own isolated micro-zone defined by who it is and what it's allowed to do — enforced dynamically, regardless of network location.
Four reasons traditional segmentation stops working at scale.
If you're seeing one or more of these in your network, your segmentation approach has already outgrown what static rules can deliver.
Flat networks enable lateral movement
Once an attacker breaches the network perimeter, traditional flat-network architecture lets them move freely between systems. Ransomware that lands on one workstation propagates to entire production environments within hours - sometimes minutes.
Over-privileged user access
Traditional access models grant excessive permissions by default. Users keep entitlements they no longer need. Service accounts accumulate access across systems. Every compromised credential becomes a path to the entire network.
Complexity of legacy segmentation
VLANs and firewall rules require manual configurations that grow exponentially with the network. Every change risks breaking production traffic. Organizations end up with hundreds of stale rules nobody dares to remove.
Lack of adaptive security
Static policies cannot adjust to evolving threats or changing user behaviors. A rule that made sense six months ago may now allow attack paths nobody predicted. Security drifts further from operational reality every day.
Network-based segmentation was never built for Zero Trust. It trusts anything inside the firewall, can't follow users across cloud and hybrid, and collapses into unmanageable rule sprawl. Grid closes that gap - isolating every identity in its own micro-zone, enforced dynamically and independent of network location.
Three components. One identity-aware fabric.
truePass Grid replaces network-based segmentation with an Identity-Based Firewall (IDFW) - built on patented Reverse Access™ architecture and enforced at every access request, across on-premises, cloud, and hybrid environments.
Role-Based Access Control + Application Control
Beyond "yes/no" access - granular by role, app, and content.
Grid defines access policies based on user identity, job role, and real-time risk assessment - not IP addresses or network zones. Every policy is human-readable, auditable, and tied directly to organizational structure.
Grid policy goes beyond "yes/no" access. Define exactly which applications a user can launch, which file types they can open or transfer, and from which browsers or endpoints. Same user, different context - different policy.
- Native AD, LDAP & SAML integration
- Role-aware policies by department, project, function
- Application-level policy (per process, per app)
- File-type restrictions (Word, PDF, images, etc.)
- Browser & endpoint context in evaluation
- Dynamic risk scoring per access request
Identity-Layer Micro-Segmentation
Every user, every workload - its own micro-zone.
Instead of relying on IP-based segmentation, Grid isolates access at the identity layer. Each user and workload operates in its own micro-zone, with explicit policy controlling every flow between zones. No more flat networks. No more "trust anything inside the firewall."
Segmentation follows the identity, not the subnet - so the same policy holds whether the user is on-premises, in the cloud, or working hybrid, with zero changes to the underlying network.
- Per-user / per-device / per-workload isolation
- Works across on-premises, cloud, and hybrid
- Zero changes to underlying network infrastructure
- Explicit policy on every flow between zones
- Stops lateral movement between identity zones
- Built on patented Reverse Access™
Adaptive Policy Engine with AI Behavioral Learning
Grid doesn't just enforce rules - it learns.
Every user's normal behavior - which applications they open, when they work, from which browsers and devices, how they interact with files - becomes a behavioral fingerprint that Grid continuously refines through AI-driven analytics.
When that fingerprint changes, Grid notices. A logged-in account behaving differently from its baseline - unusual hours, unfamiliar browser, atypical file activity - triggers escalation, additional authentication, or session block. Even when credentials are valid, identity isn't.
- AI behavioral learning - continuous per-user baseline
- Impersonation detection - catches anomalous sessions
- Browser & device context - policy adapts to where users work
- Step-up authentication triggered automatically on anomalies
- Valid credentials alone never equal trust
- Unified management console, audit & SIEM export
truePass Grid vs. traditional segmentation.
The question isn't whether segmentation works - it's whether your segmentation approach can scale with how organizations actually operate today.
| Criterion | Traditional (VLANs / Firewall) | truePass Grid |
|---|---|---|
| Segmentation principle | Network zones (IP, VLAN, subnet) | Identity zones (user, role, device) |
| Implementation | Reconfigure network, change firewalls | Deploy policy, no network changes |
| Adaptability | Static rules, manual changes | Dynamic policy, AI behavior-aware |
| Cloud / hybrid coverage | Limited or duplicated per environment | Unified across all environments |
| Granularity | Per-segment (often broad) | Per-user / per-workload (precise) |
| Content control | Not supported | File-type & application-level policy |
| Operational overhead | Hundreds of stale rules | Identity-tied policies, easy to audit |
| Lateral movement risk | High (within segment) | Eliminated (every identity isolated) |
Grid doesn't replace your firewall - it operates above it. Where the firewall enforces network boundaries, Grid enforces identity boundaries - turning every user, device, and workload into its own zero-trust zone.
Everything Grid does for your enterprise network.
Our identity-based micro-segmentation solution provides continuous monitoring, adaptive security controls, and Zero Trust enforcement to stop lateral movement and contain compromised identities - across on-premises, cloud, and hybrid.
Grants access based on user identity, job role, and real-time risk assessment - not IP addresses or network zones. Human-readable, auditable policies tied directly to organizational structure via native AD, LDAP, and SAML.
Goes beyond "yes/no" access - define exactly which applications a user can launch, which file types they can open or transfer, and from which browsers or endpoints. Same user, different context - different policy.
Isolates each user, device, and workload in its own micro-zone, with explicit policy controlling every flow between zones - stopping lateral movement without changing the underlying network.
Builds a continuous behavioral fingerprint for every user - apps, hours, browsers, devices, file activity - and detects when a logged-in account behaves unlike its real owner. Catches impersonation even when credentials are valid.
When behavior deviates from baseline - unusual hours, unfamiliar browser, atypical file access - Grid automatically triggers escalation, additional authentication, or a session block.
Granular per-identity logging under a unified management console, with centralized audit, Active Directory integration, and SIEM export - audit-ready trails for GDPR, HIPAA, PCI DSS, and SOC 2.
Enforces one identity policy across on-premises, cloud, and hybrid environments - unified everywhere, with zero changes to the underlying network infrastructure.
Three outcomes that start on day one.
Stop Lateral Movement
When ransomware lands on one endpoint, Grid contains it to that endpoint's identity zone. No flat-network paths exist between zones, so the attack cannot reach file shares, servers, or other workstations.
Get startedDetect Insider Threats & Credential Abuse
Grid's AI behavioral baseline detects when a logged-in account behaves unlike its real owner - unfamiliar browser, atypical hours, sudden mass file access. Stolen credentials become useless without behavioral consistency.
Get startedProtect Critical Assets & Databases
Sensitive applications, financial systems, and patient databases stay accessible only to authorized identities - even if attackers compromise lower-tier credentials elsewhere in the network.
Get startedPlugs into the stack you already run.
Grid integrates with the leading identity, security monitoring, and cloud platforms - extending identity-based micro-segmentation across your existing infrastructure with zero network changes.
Identity & Access Management
Active Directory · LDAP · SAML · Okta · Microsoft Entra ID
Security Event Management
Per-identity log export · Splunk · IBM QRadar
Endpoint Detection & Response
CrowdStrike · SentinelOne · Microsoft Defender
Cloud & Hybrid Deployments
AWS · Azure · Google Cloud · Private data centers
Zero Trust Network Access
Aligns with existing ZTNA policies & NIST SP 800-207
Where Grid matters most.
Segment by identity.
Stop lateral movement.
A 30-minute consultation with our security architects. We'll review your current segmentation architecture, identify where Grid replaces or complements your existing controls, and propose a tailored Proof of Concept.