{"id":13817,"date":"2026-04-02T19:39:48","date_gmt":"2026-04-02T17:39:48","guid":{"rendered":"https:\/\/fortgale.com\/it\/?page_id=13817"},"modified":"2026-04-02T19:42:36","modified_gmt":"2026-04-02T17:42:36","slug":"zero-trust","status":"publish","type":"page","link":"https:\/\/fortgale.com\/it\/zero-trust\/","title":{"rendered":"Zero Trust"},"content":{"rendered":"
\r\n \r\n
\r\n \r\n \r\n
\r\n \r\n
\r\n \r\n
\r\n \r\n
\r\n
\r\n \r\n \r\n
\r\n \r\n
\r\n \r\n
\r\n \r\n\r\n\r\n\r\n \r\n \r\n Zero Trust: Guida Definitiva per Aziende Italiane | Fortgale<\/title>\r\n <meta name=\"description\" content=\"Zero Trust non \u00e8 un prodotto, \u00e8 un modello. Scopri cos'\u00e8, perch\u00e9 il perimetro di rete non esiste pi\u00f9 e come implementarlo step by step nella tua azienda. Guida tecnica Fortgale.\">\r\n <meta name=\"keywords\" content=\"Zero Trust, Zero Trust security, ZTNA, Zero Trust Network Access, microsegmentazione, least privilege, sicurezza perimetrale, verifica continua, identit\u00e0 digitale, Zero Trust Italia, architettura Zero Trust, implementazione Zero Trust\">\r\n <meta name=\"robots\" content=\"index, follow\">\r\n <link rel=\"canonical\" href=\"https:\/\/fortgale.com\/it\/zero-trust\/\">\r\n\r\n <meta property=\"og:title\" content=\"Zero Trust: la Guida Definitiva per le Aziende Italiane \u2014 Fortgale\">\r\n <meta property=\"og:description\" content=\"Cos'\u00e8 Zero Trust, perch\u00e9 il perimetro non esiste pi\u00f9 e come implementarlo step by step. La visione di Fortgale sulla sicurezza moderna.\">\r\n <meta property=\"og:type\" content=\"article\">\r\n <meta property=\"og:url\" content=\"https:\/\/fortgale.com\/it\/zero-trust\/\">\r\n\r\n <script type=\"application\/ld+json\">\r\n {\r\n \"@context\": \"https:\/\/schema.org\",\r\n \"@type\": \"Article\",\r\n \"headline\": \"Zero Trust: la Guida Definitiva per le Aziende Italiane\",\r\n \"description\": \"Guida completa al modello Zero Trust: principi fondamentali, perch\u00e9 la sicurezza perimetrale \u00e8 superata, roadmap di implementazione step by step e benefici per le infrastrutture aziendali moderne.\",\r\n \"url\": \"https:\/\/fortgale.com\/it\/zero-trust\/\",\r\n \"inLanguage\": \"it-IT\",\r\n \"publisher\": {\r\n \"@type\": \"Organization\",\r\n \"name\": \"Fortgale\",\r\n \"url\": \"https:\/\/fortgale.com\/it\/\",\r\n \"logo\": \"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2023\/02\/cropped-fortgale_logo.png\",\r\n \"address\": {\r\n \"@type\": \"PostalAddress\",\r\n \"streetAddress\": \"Via San Damiano 2\",\r\n \"addressLocality\": \"Milano\",\r\n \"addressCountry\": \"IT\"\r\n }\r\n }\r\n }\r\n <\/script>\r\n\r\n <script type=\"application\/ld+json\">\r\n {\r\n \"@context\": \"https:\/\/schema.org\",\r\n \"@type\": \"FAQPage\",\r\n \"mainEntity\": [{\r\n \"@type\": \"Question\",\r\n \"name\": \"Zero Trust \u00e8 adatto alle PMI o solo alle grandi aziende?\",\r\n \"acceptedAnswer\": {\r\n \"@type\": \"Answer\",\r\n \"text\": \"Zero Trust \u00e8 un modello architetturale, non un prodotto da acquistare in blocco. Pu\u00f2 essere adottato in modo progressivo e modulare, rendendolo accessibile anche alle PMI. Si pu\u00f2 iniziare dall'identit\u00e0 e dall'autenticazione multifattore (MFA), estendendo gradualmente il modello ad altri livelli (device, rete, applicazioni). Fortgale supporta le aziende di ogni dimensione nella definizione di una roadmap realistica e sostenibile.\"\r\n }\r\n },\r\n {\r\n \"@type\": \"Question\",\r\n \"name\": \"Quanto tempo richiede un'implementazione Zero Trust?\",\r\n \"acceptedAnswer\": {\r\n \"@type\": \"Answer\",\r\n \"text\": \"Un'implementazione Zero Trust completa richiede tipicamente da 12 a 36 mesi a seconda della complessit\u00e0 infrastrutturale, del numero di utenti e del punto di partenza. \u00c8 un percorso iterativo: le prime fasi (inventario, MFA, segmentazione base) producono benefici di sicurezza immediati gi\u00e0 nei primi 3-6 mesi, mentre le fasi avanzate (microsegmentazione, UEBA, automazione policy) completano la maturit\u00e0 del modello.\"\r\n }\r\n },\r\n {\r\n \"@type\": \"Question\",\r\n \"name\": \"Zero Trust e cloud sono compatibili?\",\r\n \"acceptedAnswer\": {\r\n \"@type\": \"Answer\",\r\n \"text\": \"Zero Trust nasce proprio per rispondere all'era cloud. A differenza della sicurezza perimetrale, che presuppone un confine fisso tra interno ed esterno, Zero Trust gestisce nativamente ambienti multi-cloud, ibridi e remote-first. Ogni risorsa \u2014 indipendentemente da dove si trova \u2014 viene protetta con gli stessi controlli di verifica continua: identit\u00e0, dispositivo, contesto e comportamento.\"\r\n }\r\n },\r\n {\r\n \"@type\": \"Question\",\r\n \"name\": \"Qual \u00e8 la differenza tra Zero Trust e VPN?\",\r\n \"acceptedAnswer\": {\r\n \"@type\": \"Answer\",\r\n \"text\": \"La VPN tradizionale garantisce accesso all'intera rete una volta autenticato l'utente \u2014 un modello implicito di fiducia che Zero Trust elimina. Con Zero Trust Network Access (ZTNA), l'utente ottiene accesso solo alla specifica applicazione o risorsa di cui ha bisogno, verificato ogni volta in base a identit\u00e0, dispositivo e contesto. Se un account VPN viene compromesso, l'attaccante pu\u00f2 muoversi lateralmente sull'intera rete; con ZTNA, il blast radius \u00e8 limitato a una singola risorsa.\"\r\n }\r\n },\r\n {\r\n \"@type\": \"Question\",\r\n \"name\": \"Fortgale implementa direttamente soluzioni Zero Trust?\",\r\n \"acceptedAnswer\": {\r\n \"@type\": \"Answer\",\r\n \"text\": \"Fortgale supporta le aziende nella progettazione e nell'implementazione del modello Zero Trust con un approccio vendor-agnostic: valutazione della postura attuale, definizione della roadmap, supporto all'integrazione di tecnologie (Identity Provider, EDR, CASB, SIEM, microsegmentazione) e monitoraggio continuo degli accessi tramite il servizio MDR e CTI. Contattaci per un assessment Zero Trust senza impegno.\"\r\n }\r\n }\r\n ]\r\n }\r\n <\/script>\r\n\r\n <link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\r\n <link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin=\"\">\r\n <link href=\"https:\/\/fonts.googleapis.com\/css2?family=Poppins:wght@300;400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap\" rel=\"stylesheet\">\r\n\r\n <style>\r\n *,\r\n *::before,\r\n *::after {\r\n box-sizing: border-box;\r\n margin: 0;\r\n padding: 0;\r\n }\r\n\r\n :root {\r\n --navy: #001B3B;\r\n --navy-mid: #0A2250;\r\n --navy-btn: #303E7A;\r\n --navy-light: #1a2e5a;\r\n --white: #FFFFFF;\r\n --gray-light: #F2F2F2;\r\n --gray-mid: #C3C4C7;\r\n --text-dark: #001B3B;\r\n --text-body: #2c3340;\r\n --text-muted: #65615f;\r\n --amber: #c9920a;\r\n --amber-light: #f5c842;\r\n --amber-glow: rgba(245, 200, 66, 0.15);\r\n --amber-dim: rgba(245, 200, 66, 0.55);\r\n --teal: #00c2a8;\r\n --teal-dim: rgba(0, 194, 168, 0.15);\r\n }\r\n\r\n html {\r\n scroll-behavior: smooth;\r\n }\r\n\r\n body {\r\n font-family: 'Poppins', sans-serif;\r\n color: var(--text-body);\r\n background: var(--white);\r\n line-height: 1.7;\r\n font-size: 16px;\r\n }\r\n\r\n a {\r\n text-decoration: none;\r\n color: inherit;\r\n }\r\n\r\n img {\r\n max-width: 100%;\r\n display: block;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 HERO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .hero {\r\n background: linear-gradient(to right, rgba(0, 27, 59, 0.96) 45%, rgba(0, 27, 59, 0.60) 100%), url('https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/managed-detection-and-response-mdr.png') center\/cover no-repeat;\r\n min-height: 100vh;\r\n display: flex;\r\n align-items: center;\r\n position: relative;\r\n overflow: hidden;\r\n padding-top: 40px;\r\n }\r\n\r\n \/* Grid lines background *\/\r\n\r\n .hero::before {\r\n content: '';\r\n position: absolute;\r\n inset: 0;\r\n background-image: linear-gradient(rgba(245, 200, 66, 0.04) 1px, transparent 1px), linear-gradient(90deg, rgba(245, 200, 66, 0.04) 1px, transparent 1px);\r\n background-size: 60px 60px;\r\n pointer-events: none;\r\n }\r\n\r\n .hero-content {\r\n position: relative;\r\n z-index: 3;\r\n padding: 80px 80px 120px;\r\n max-width: 640px;\r\n }\r\n\r\n .hero-tag {\r\n display: inline-block;\r\n font-size: 11px;\r\n font-weight: 600;\r\n letter-spacing: 0.15em;\r\n text-transform: uppercase;\r\n color: var(--amber-light);\r\n border: 1px solid rgba(245, 200, 66, 0.35);\r\n padding: 5px 14px;\r\n border-radius: 3px;\r\n margin-bottom: 28px;\r\n }\r\n\r\n .hero h1 {\r\n font-size: clamp(34px, 3.8vw, 52px);\r\n font-weight: 800;\r\n color: var(--white);\r\n line-height: 1.12;\r\n margin-bottom: 24px;\r\n letter-spacing: -0.02em;\r\n }\r\n\r\n .hero h1 span {\r\n color: var(--amber-light);\r\n }\r\n\r\n .hero-subtitle {\r\n font-size: 17px;\r\n font-weight: 400;\r\n color: rgba(240, 246, 252, 0.72);\r\n line-height: 1.75;\r\n margin-bottom: 40px;\r\n max-width: 520px;\r\n }\r\n\r\n .hero-ctas {\r\n display: flex;\r\n gap: 16px;\r\n flex-wrap: wrap;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 TRUST PANEL (Hero right side) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .zt-panel {\r\n position: absolute;\r\n right: 8%;\r\n top: 50%;\r\n transform: translateY(-50%);\r\n width: 380px;\r\n z-index: 4;\r\n }\r\n\r\n .zt-panel-box {\r\n background: rgba(4, 13, 26, 0.82);\r\n border: 1px solid rgba(255, 255, 255, 0.1);\r\n border-radius: 14px;\r\n padding: 28px 30px;\r\n backdrop-filter: blur(12px);\r\n box-shadow: 0 24px 64px rgba(0, 0, 0, 0.45);\r\n }\r\n\r\n .zt-panel-header {\r\n display: flex;\r\n align-items: center;\r\n gap: 10px;\r\n margin-bottom: 22px;\r\n padding-bottom: 16px;\r\n border-bottom: 1px solid rgba(255, 255, 255, 0.07);\r\n }\r\n\r\n .zt-panel-dot {\r\n width: 9px;\r\n height: 9px;\r\n border-radius: 50%;\r\n background: var(--amber-light);\r\n box-shadow: 0 0 8px var(--amber-light);\r\n animation: blink 2s ease-in-out infinite;\r\n }\r\n\r\n .zt-panel-title {\r\n font-size: 11px;\r\n font-weight: 700;\r\n letter-spacing: 0.14em;\r\n text-transform: uppercase;\r\n color: rgba(255, 255, 255, 0.7);\r\n }\r\n\r\n .zt-label {\r\n font-size: 10px;\r\n font-weight: 700;\r\n letter-spacing: 0.14em;\r\n text-transform: uppercase;\r\n color: rgba(255, 255, 255, 0.35);\r\n margin-bottom: 10px;\r\n }\r\n\r\n .zt-request {\r\n background: rgba(255, 255, 255, 0.04);\r\n border: 1px solid rgba(255, 255, 255, 0.08);\r\n border-radius: 8px;\r\n padding: 14px 16px;\r\n margin-bottom: 18px;\r\n }\r\n\r\n .zt-req-row {\r\n display: flex;\r\n justify-content: space-between;\r\n align-items: center;\r\n margin-bottom: 6px;\r\n }\r\n\r\n .zt-req-row:last-child {\r\n margin-bottom: 0;\r\n }\r\n\r\n .zt-req-key {\r\n font-size: 12px;\r\n color: rgba(255, 255, 255, 0.45);\r\n }\r\n\r\n .zt-req-val {\r\n font-size: 12px;\r\n font-weight: 600;\r\n color: rgba(255, 255, 255, 0.85);\r\n font-family: 'JetBrains Mono', monospace;\r\n }\r\n\r\n .zt-req-val.amber {\r\n color: var(--amber-light);\r\n }\r\n\r\n .zt-checks {\r\n display: flex;\r\n flex-direction: column;\r\n gap: 9px;\r\n margin-bottom: 18px;\r\n }\r\n\r\n .zt-check {\r\n display: flex;\r\n align-items: center;\r\n gap: 10px;\r\n }\r\n\r\n .zt-check-icon {\r\n width: 22px;\r\n height: 22px;\r\n border-radius: 50%;\r\n flex-shrink: 0;\r\n display: flex;\r\n align-items: center;\r\n justify-content: center;\r\n font-size: 11px;\r\n font-weight: 700;\r\n }\r\n\r\n .zt-check-icon.ok {\r\n background: rgba(0, 194, 168, 0.18);\r\n color: var(--teal);\r\n border: 1px solid rgba(0, 194, 168, 0.35);\r\n }\r\n\r\n .zt-check-icon.pending {\r\n background: rgba(245, 200, 66, 0.12);\r\n color: var(--amber-light);\r\n border: 1px solid rgba(245, 200, 66, 0.3);\r\n animation: blink 1.4s ease-in-out infinite;\r\n }\r\n\r\n .zt-check-label {\r\n font-size: 12px;\r\n color: rgba(255, 255, 255, 0.7);\r\n }\r\n\r\n .zt-check-label .sub {\r\n font-size: 10px;\r\n color: rgba(255, 255, 255, 0.35);\r\n display: block;\r\n }\r\n\r\n .zt-verdict {\r\n background: rgba(0, 194, 168, 0.1);\r\n border: 1px solid rgba(0, 194, 168, 0.3);\r\n border-radius: 8px;\r\n padding: 12px 16px;\r\n text-align: center;\r\n }\r\n\r\n .zt-verdict-label {\r\n font-size: 10px;\r\n font-weight: 700;\r\n letter-spacing: 0.14em;\r\n text-transform: uppercase;\r\n color: var(--teal);\r\n }\r\n\r\n .zt-verdict-value {\r\n font-size: 13px;\r\n font-weight: 700;\r\n color: var(--white);\r\n margin-top: 2px;\r\n }\r\n\r\n .zt-verdict.denied {\r\n background: rgba(192, 57, 43, 0.12);\r\n border-color: rgba(192, 57, 43, 0.3);\r\n }\r\n\r\n .zt-verdict.denied .zt-verdict-label {\r\n color: #f1a1a1;\r\n }\r\n\r\n \/* Policy engine animation *\/\r\n\r\n .zt-engine {\r\n display: flex;\r\n align-items: center;\r\n gap: 8px;\r\n margin: 14px 0;\r\n padding: 10px 14px;\r\n background: rgba(48, 62, 122, 0.25);\r\n border: 1px solid rgba(48, 62, 122, 0.5);\r\n border-radius: 8px;\r\n }\r\n\r\n .zt-engine-icon {\r\n width: 28px;\r\n height: 28px;\r\n border-radius: 50%;\r\n border: 1.5px solid var(--navy-btn);\r\n display: flex;\r\n align-items: center;\r\n justify-content: center;\r\n font-size: 13px;\r\n animation: rotate-slow 6s linear infinite;\r\n }\r\n\r\n .zt-engine-text {\r\n font-size: 11px;\r\n color: rgba(255, 255, 255, 0.6);\r\n }\r\n\r\n .zt-engine-text strong {\r\n color: rgba(255, 255, 255, 0.9);\r\n font-size: 12px;\r\n display: block;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 ANIMATIONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n @keyframes blink {\r\n 0%,\r\n 100% {\r\n opacity: 1\r\n }\r\n 50% {\r\n opacity: .3\r\n }\r\n }\r\n\r\n @keyframes pulse-ring {\r\n 0% {\r\n transform: translate(-50%, -50%) scale(0.6);\r\n opacity: 0.9;\r\n }\r\n 100% {\r\n transform: translate(-50%, -50%) scale(2.4);\r\n opacity: 0;\r\n }\r\n }\r\n\r\n @keyframes rotate-slow {\r\n from {\r\n transform: rotate(0deg);\r\n }\r\n to {\r\n transform: rotate(360deg);\r\n }\r\n }\r\n\r\n @keyframes slide-in {\r\n from {\r\n opacity: 0;\r\n transform: translateY(12px);\r\n }\r\n to {\r\n opacity: 1;\r\n transform: translateY(0);\r\n }\r\n }\r\n\r\n @keyframes fill-bar {\r\n from {\r\n width: 0;\r\n }\r\n to {\r\n width: var(--target-w);\r\n }\r\n }\r\n\r\n @keyframes count-up {\r\n from {\r\n opacity: 0;\r\n }\r\n to {\r\n opacity: 1;\r\n }\r\n }\r\n\r\n @keyframes float-z {\r\n 0%,\r\n 100% {\r\n transform: translateY(0px);\r\n }\r\n 50% {\r\n transform: translateY(-8px);\r\n }\r\n }\r\n\r\n @keyframes ping-out {\r\n 0% {\r\n transform: scale(1);\r\n opacity: 0.7;\r\n }\r\n 100% {\r\n transform: scale(2.2);\r\n opacity: 0;\r\n }\r\n }\r\n\r\n \/* \u2500\u2500\u2500 HERO STATS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .hero-bottom {\r\n position: absolute;\r\n bottom: 36px;\r\n left: 80px;\r\n display: flex;\r\n gap: 48px;\r\n }\r\n\r\n .hero-stat-value {\r\n font-size: 30px;\r\n font-weight: 800;\r\n color: var(--white);\r\n line-height: 1;\r\n }\r\n\r\n .hero-stat-value.accent {\r\n color: var(--amber-light);\r\n }\r\n\r\n .hero-stat-label {\r\n font-size: 11px;\r\n font-weight: 500;\r\n color: rgba(240, 246, 252, 0.5);\r\n text-transform: uppercase;\r\n letter-spacing: 0.08em;\r\n margin-top: 4px;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 BUTTONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .btn-primary {\r\n background: var(--navy-btn);\r\n color: var(--white);\r\n font-family: 'Poppins', sans-serif;\r\n font-size: 12px;\r\n font-weight: 600;\r\n letter-spacing: 0.1em;\r\n text-transform: uppercase;\r\n padding: 14px 30px;\r\n border-radius: 56px;\r\n border: 1.6px solid var(--navy-btn);\r\n cursor: pointer;\r\n transition: all 0.25s;\r\n display: inline-block;\r\n }\r\n\r\n .btn-primary:hover {\r\n background: #253070;\r\n border-color: #253070;\r\n transform: translateY(-1px);\r\n box-shadow: 0 6px 20px rgba(0, 0, 0, 0.25);\r\n }\r\n\r\n .btn-amber {\r\n background: transparent;\r\n color: var(--amber-light);\r\n font-family: 'Poppins', sans-serif;\r\n font-size: 12px;\r\n font-weight: 600;\r\n letter-spacing: 0.1em;\r\n text-transform: uppercase;\r\n padding: 14px 30px;\r\n border-radius: 56px;\r\n border: 1.6px solid rgba(245, 200, 66, 0.5);\r\n cursor: pointer;\r\n transition: all 0.25s;\r\n display: inline-block;\r\n }\r\n\r\n .btn-amber:hover {\r\n border-color: var(--amber-light);\r\n background: rgba(245, 200, 66, 0.06);\r\n }\r\n\r\n .btn-amber-solid {\r\n background: var(--amber-light);\r\n color: var(--navy);\r\n font-family: 'Poppins', sans-serif;\r\n font-size: 12px;\r\n font-weight: 700;\r\n letter-spacing: 0.1em;\r\n text-transform: uppercase;\r\n padding: 14px 30px;\r\n border-radius: 56px;\r\n border: none;\r\n cursor: pointer;\r\n transition: all 0.25s;\r\n display: inline-block;\r\n }\r\n\r\n .btn-amber-solid:hover {\r\n background: #f8d54e;\r\n transform: translateY(-1px);\r\n box-shadow: 0 6px 20px rgba(245, 200, 66, 0.3);\r\n }\r\n\r\n .btn-secondary {\r\n background: transparent;\r\n color: var(--white);\r\n font-family: 'Poppins', sans-serif;\r\n font-size: 12px;\r\n font-weight: 600;\r\n letter-spacing: 0.1em;\r\n text-transform: uppercase;\r\n padding: 14px 30px;\r\n border-radius: 56px;\r\n border: 1.6px solid rgba(255, 255, 255, 0.4);\r\n cursor: pointer;\r\n transition: all 0.25s;\r\n display: inline-block;\r\n }\r\n\r\n .btn-secondary:hover {\r\n border-color: var(--white);\r\n background: rgba(255, 255, 255, 0.07);\r\n }\r\n\r\n \/* \u2500\u2500\u2500 GENERAL SECTIONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .section {\r\n padding: 96px 80px;\r\n }\r\n\r\n .section-narrow {\r\n max-width: 1200px;\r\n margin: 0 auto;\r\n }\r\n\r\n .section-tag {\r\n display: inline-block;\r\n font-size: 11px;\r\n font-weight: 700;\r\n letter-spacing: 0.18em;\r\n text-transform: uppercase;\r\n color: var(--navy-btn);\r\n margin-bottom: 16px;\r\n }\r\n\r\n .section-tag-amber {\r\n color: var(--amber-dim);\r\n }\r\n\r\n .section-tag-light {\r\n color: rgba(245, 200, 66, 0.7);\r\n }\r\n\r\n .section-tag-teal {\r\n color: rgba(0, 194, 168, 0.8);\r\n }\r\n\r\n .section h2 {\r\n font-size: clamp(26px, 2.8vw, 38px);\r\n font-weight: 800;\r\n color: var(--text-dark);\r\n line-height: 1.2;\r\n letter-spacing: -0.02em;\r\n margin-bottom: 20px;\r\n }\r\n\r\n .section-dark h2 {\r\n color: var(--white);\r\n }\r\n\r\n .section-lead {\r\n font-size: 17px;\r\n color: var(--text-muted);\r\n max-width: 720px;\r\n line-height: 1.75;\r\n margin-bottom: 56px;\r\n }\r\n\r\n .section-dark .section-lead {\r\n color: rgba(240, 246, 252, 0.68);\r\n }\r\n\r\n .section-dark {\r\n background: var(--navy);\r\n color: var(--white);\r\n }\r\n\r\n .section-alt {\r\n background: var(--gray-light);\r\n }\r\n\r\n .section-ink {\r\n background: #040d1a;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 INTRO CALLOUT BOX \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .callout-definition {\r\n background: rgba(48, 62, 122, 0.07);\r\n border-left: 4px solid var(--navy-btn);\r\n border-radius: 0 10px 10px 0;\r\n padding: 28px 36px;\r\n margin: 40px 0;\r\n max-width: 800px;\r\n }\r\n\r\n .callout-definition p {\r\n font-size: 17px;\r\n color: var(--text-dark);\r\n line-height: 1.75;\r\n font-style: italic;\r\n }\r\n\r\n .callout-definition cite {\r\n font-size: 12px;\r\n color: var(--text-muted);\r\n font-style: normal;\r\n font-weight: 600;\r\n display: block;\r\n margin-top: 10px;\r\n letter-spacing: 0.04em;\r\n text-transform: uppercase;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 WHY PERIMETER FAILS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .fail-grid {\r\n display: grid;\r\n grid-template-columns: repeat(3, 1fr);\r\n gap: 24px;\r\n margin-top: 52px;\r\n }\r\n\r\n .fail-card {\r\n background: var(--white);\r\n border: 1px solid rgba(192, 57, 43, 0.15);\r\n border-radius: 12px;\r\n padding: 36px 32px;\r\n position: relative;\r\n overflow: hidden;\r\n transition: transform 0.25s, box-shadow 0.25s;\r\n }\r\n\r\n .fail-card:hover {\r\n transform: translateY(-4px);\r\n box-shadow: 0 12px 40px rgba(192, 57, 43, 0.1);\r\n }\r\n\r\n .fail-card::before {\r\n content: '';\r\n position: absolute;\r\n top: 0;\r\n left: 0;\r\n right: 0;\r\n height: 3px;\r\n background: linear-gradient(90deg, rgba(192, 57, 43, 0.7), rgba(192, 57, 43, 0.2));\r\n }\r\n\r\n .fail-icon {\r\n font-size: 36px;\r\n margin-bottom: 20px;\r\n }\r\n\r\n .fail-title {\r\n font-size: 18px;\r\n font-weight: 800;\r\n color: var(--text-dark);\r\n margin-bottom: 12px;\r\n }\r\n\r\n .fail-desc {\r\n font-size: 14px;\r\n color: var(--text-muted);\r\n line-height: 1.75;\r\n }\r\n\r\n .fail-tag {\r\n display: inline-block;\r\n margin-top: 16px;\r\n font-size: 11px;\r\n font-weight: 700;\r\n text-transform: uppercase;\r\n letter-spacing: 0.1em;\r\n background: rgba(192, 57, 43, 0.08);\r\n color: rgba(192, 57, 43, 0.8);\r\n padding: 4px 12px;\r\n border-radius: 4px;\r\n border: 1px solid rgba(192, 57, 43, 0.18);\r\n }\r\n\r\n \/* \u2500\u2500\u2500 PRINCIPLES \/ PILLARS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .pillars {\r\n display: grid;\r\n grid-template-columns: repeat(3, 1fr);\r\n gap: 2px;\r\n margin-top: 56px;\r\n }\r\n\r\n .pillar {\r\n background: rgba(255, 255, 255, 0.03);\r\n border: 1px solid rgba(255, 255, 255, 0.07);\r\n padding: 44px 36px;\r\n position: relative;\r\n transition: background 0.3s;\r\n }\r\n\r\n .pillar:hover {\r\n background: rgba(255, 255, 255, 0.06);\r\n }\r\n\r\n .pillar-num {\r\n font-size: 56px;\r\n font-weight: 800;\r\n color: rgba(245, 200, 66, 0.12);\r\n line-height: 1;\r\n margin-bottom: 20px;\r\n letter-spacing: -0.04em;\r\n }\r\n\r\n .pillar h3 {\r\n font-size: 18px;\r\n font-weight: 700;\r\n color: var(--white);\r\n margin-bottom: 14px;\r\n line-height: 1.3;\r\n }\r\n\r\n .pillar p {\r\n font-size: 14px;\r\n color: rgba(240, 246, 252, 0.62);\r\n line-height: 1.75;\r\n }\r\n\r\n .pillar-line {\r\n position: absolute;\r\n top: 0;\r\n left: 0;\r\n width: 3px;\r\n height: 0;\r\n background: var(--amber-light);\r\n transition: height 0.4s ease;\r\n }\r\n\r\n .pillar:hover .pillar-line {\r\n height: 100%;\r\n }\r\n\r\n .pillar-icon {\r\n font-size: 26px;\r\n margin-bottom: 16px;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 ROADMAP \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .roadmap {\r\n display: flex;\r\n flex-direction: column;\r\n gap: 0;\r\n margin-top: 52px;\r\n position: relative;\r\n }\r\n\r\n .roadmap::before {\r\n content: '';\r\n position: absolute;\r\n left: 27px;\r\n top: 0;\r\n bottom: 0;\r\n width: 2px;\r\n background: linear-gradient(to bottom, var(--amber-light), rgba(245, 200, 66, 0.1));\r\n }\r\n\r\n .roadmap-step {\r\n display: flex;\r\n gap: 36px;\r\n align-items: flex-start;\r\n padding: 32px 0;\r\n position: relative;\r\n }\r\n\r\n .roadmap-step:not(:last-child) {\r\n border-bottom: 1px solid rgba(0, 27, 59, 0.07);\r\n }\r\n\r\n .step-num {\r\n width: 56px;\r\n height: 56px;\r\n border-radius: 50%;\r\n flex-shrink: 0;\r\n background: var(--navy);\r\n color: var(--amber-light);\r\n font-size: 18px;\r\n font-weight: 800;\r\n font-family: 'JetBrains Mono', monospace;\r\n display: flex;\r\n align-items: center;\r\n justify-content: center;\r\n border: 2px solid rgba(245, 200, 66, 0.4);\r\n position: relative;\r\n z-index: 2;\r\n transition: background 0.25s, border-color 0.25s;\r\n }\r\n\r\n .roadmap-step:hover .step-num {\r\n background: var(--amber-light);\r\n color: var(--navy);\r\n border-color: var(--amber-light);\r\n }\r\n\r\n .step-body {\r\n padding-top: 10px;\r\n }\r\n\r\n .step-phase {\r\n font-size: 10px;\r\n font-weight: 700;\r\n letter-spacing: 0.2em;\r\n text-transform: uppercase;\r\n color: var(--amber);\r\n margin-bottom: 6px;\r\n }\r\n\r\n .step-title {\r\n font-size: 20px;\r\n font-weight: 800;\r\n color: var(--text-dark);\r\n margin-bottom: 10px;\r\n line-height: 1.25;\r\n }\r\n\r\n .step-desc {\r\n font-size: 15px;\r\n color: var(--text-muted);\r\n line-height: 1.75;\r\n max-width: 680px;\r\n }\r\n\r\n .step-pills {\r\n display: flex;\r\n flex-wrap: wrap;\r\n gap: 8px;\r\n margin-top: 16px;\r\n }\r\n\r\n .step-pill {\r\n font-size: 11px;\r\n font-weight: 600;\r\n color: var(--navy-btn);\r\n background: rgba(48, 62, 122, 0.08);\r\n border: 1px solid rgba(48, 62, 122, 0.15);\r\n padding: 4px 12px;\r\n border-radius: 20px;\r\n }\r\n\r\n .step-timeline {\r\n font-size: 11px;\r\n font-weight: 700;\r\n color: var(--amber);\r\n margin-top: 14px;\r\n display: flex;\r\n align-items: center;\r\n gap: 6px;\r\n }\r\n\r\n .step-timeline::before {\r\n content: '\u23f1';\r\n font-style: normal;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 COMPARISON TABLE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .compare-wrap {\r\n margin-top: 52px;\r\n overflow: hidden;\r\n border-radius: 14px;\r\n border: 1px solid rgba(255, 255, 255, 0.08);\r\n }\r\n\r\n .compare-header {\r\n display: grid;\r\n grid-template-columns: 1fr 1fr 1fr;\r\n background: rgba(255, 255, 255, 0.04);\r\n border-bottom: 1px solid rgba(255, 255, 255, 0.08);\r\n }\r\n\r\n .compare-header-cell {\r\n padding: 18px 24px;\r\n font-size: 12px;\r\n font-weight: 700;\r\n letter-spacing: 0.12em;\r\n text-transform: uppercase;\r\n }\r\n\r\n .compare-header-cell.label {\r\n color: rgba(255, 255, 255, 0.4);\r\n }\r\n\r\n .compare-header-cell.old {\r\n color: rgba(192, 57, 43, 0.9);\r\n }\r\n\r\n .compare-header-cell.new {\r\n color: var(--teal);\r\n }\r\n\r\n .compare-row {\r\n display: grid;\r\n grid-template-columns: 1fr 1fr 1fr;\r\n border-bottom: 1px solid rgba(255, 255, 255, 0.05);\r\n transition: background 0.2s;\r\n }\r\n\r\n .compare-row:last-child {\r\n border-bottom: none;\r\n }\r\n\r\n .compare-row:hover {\r\n background: rgba(255, 255, 255, 0.02);\r\n }\r\n\r\n .compare-cell {\r\n padding: 18px 24px;\r\n font-size: 14px;\r\n color: rgba(255, 255, 255, 0.85);\r\n line-height: 1.5;\r\n }\r\n\r\n .compare-cell.topic {\r\n font-weight: 700;\r\n color: rgba(255, 255, 255, 0.5);\r\n font-size: 12px;\r\n text-transform: uppercase;\r\n letter-spacing: 0.08em;\r\n }\r\n\r\n .compare-cell.old-val {\r\n color: rgba(241, 161, 161, 0.9);\r\n }\r\n\r\n .compare-cell.new-val {\r\n color: rgba(0, 194, 168, 0.9);\r\n }\r\n\r\n .cmp-x {\r\n color: rgba(192, 57, 43, 0.7);\r\n margin-right: 6px;\r\n font-weight: 700;\r\n }\r\n\r\n .cmp-ok {\r\n color: var(--teal);\r\n margin-right: 6px;\r\n font-weight: 700;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 BENEFIT CARDS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .benefit-grid {\r\n display: grid;\r\n grid-template-columns: repeat(3, 1fr);\r\n gap: 20px;\r\n margin-top: 52px;\r\n }\r\n\r\n .benefit-card {\r\n border: 1px solid rgba(0, 27, 59, 0.1);\r\n border-radius: 12px;\r\n padding: 32px 28px;\r\n background: var(--white);\r\n transition: box-shadow 0.25s, transform 0.25s;\r\n position: relative;\r\n overflow: hidden;\r\n }\r\n\r\n .benefit-card:hover {\r\n box-shadow: 0 12px 40px rgba(0, 27, 59, 0.1);\r\n transform: translateY(-3px);\r\n }\r\n\r\n .benefit-card::before {\r\n content: '';\r\n position: absolute;\r\n top: 0;\r\n left: 0;\r\n right: 0;\r\n height: 3px;\r\n background: linear-gradient(90deg, var(--amber-light), var(--navy-btn));\r\n }\r\n\r\n .benefit-icon {\r\n font-size: 32px;\r\n margin-bottom: 18px;\r\n }\r\n\r\n .benefit-title {\r\n font-size: 18px;\r\n font-weight: 800;\r\n color: var(--text-dark);\r\n margin-bottom: 10px;\r\n }\r\n\r\n .benefit-desc {\r\n font-size: 14px;\r\n color: var(--text-muted);\r\n line-height: 1.75;\r\n }\r\n\r\n .benefit-stat {\r\n font-size: 28px;\r\n font-weight: 800;\r\n color: var(--navy-btn);\r\n margin-top: 16px;\r\n line-height: 1;\r\n }\r\n\r\n .benefit-stat span {\r\n font-size: 13px;\r\n font-weight: 500;\r\n color: var(--text-muted);\r\n display: block;\r\n margin-top: 4px;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 STATS BAND \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .stats-band {\r\n display: grid;\r\n grid-template-columns: repeat(4, 1fr);\r\n gap: 1px;\r\n }\r\n\r\n .stat-box {\r\n padding: 48px 36px;\r\n text-align: center;\r\n background: rgba(255, 255, 255, 0.03);\r\n border: 1px solid rgba(255, 255, 255, 0.05);\r\n }\r\n\r\n .stat-box-val {\r\n font-size: 48px;\r\n font-weight: 800;\r\n color: var(--white);\r\n line-height: 1;\r\n letter-spacing: -0.03em;\r\n }\r\n\r\n .stat-box-val .accent {\r\n color: var(--amber-light);\r\n }\r\n\r\n .stat-box-label {\r\n font-size: 13px;\r\n color: rgba(240, 246, 252, 0.55);\r\n margin-top: 10px;\r\n line-height: 1.5;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 FORTGALE APPROACH \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .two-col {\r\n display: grid;\r\n grid-template-columns: 1fr 1fr;\r\n gap: 64px;\r\n align-items: start;\r\n }\r\n\r\n .feature-list {\r\n display: flex;\r\n flex-direction: column;\r\n gap: 28px;\r\n margin-top: 24px;\r\n }\r\n\r\n .feature-item {\r\n display: flex;\r\n gap: 20px;\r\n align-items: flex-start;\r\n }\r\n\r\n .feature-num {\r\n width: 36px;\r\n height: 36px;\r\n flex-shrink: 0;\r\n border-radius: 6px;\r\n background: rgba(245, 200, 66, 0.12);\r\n color: var(--amber-light);\r\n font-size: 13px;\r\n font-weight: 700;\r\n display: flex;\r\n align-items: center;\r\n justify-content: center;\r\n border: 1px solid rgba(245, 200, 66, 0.25);\r\n }\r\n\r\n .feature-text h4 {\r\n font-size: 15px;\r\n font-weight: 700;\r\n color: var(--white);\r\n margin-bottom: 5px;\r\n }\r\n\r\n .feature-text p {\r\n font-size: 14px;\r\n color: rgba(240, 246, 252, 0.62);\r\n line-height: 1.68;\r\n }\r\n\r\n \/* Assessment box *\/\r\n\r\n .assess-box {\r\n background: rgba(255, 255, 255, 0.03);\r\n border: 1px solid rgba(255, 255, 255, 0.09);\r\n border-radius: 14px;\r\n padding: 40px;\r\n position: relative;\r\n overflow: hidden;\r\n }\r\n\r\n .assess-box::after {\r\n content: '';\r\n position: absolute;\r\n bottom: -40px;\r\n right: -40px;\r\n width: 180px;\r\n height: 180px;\r\n border-radius: 50%;\r\n background: radial-gradient(circle, rgba(245, 200, 66, 0.07) 0%, transparent 70%);\r\n }\r\n\r\n .assess-title {\r\n font-size: 20px;\r\n font-weight: 800;\r\n color: var(--white);\r\n margin-bottom: 16px;\r\n }\r\n\r\n .assess-list {\r\n list-style: none;\r\n display: flex;\r\n flex-direction: column;\r\n gap: 12px;\r\n margin-bottom: 28px;\r\n }\r\n\r\n .assess-list li {\r\n font-size: 14px;\r\n color: rgba(240, 246, 252, 0.72);\r\n line-height: 1.6;\r\n display: flex;\r\n gap: 10px;\r\n align-items: flex-start;\r\n }\r\n\r\n .assess-list li::before {\r\n content: '\u25c6';\r\n color: var(--amber-light);\r\n font-size: 8px;\r\n margin-top: 6px;\r\n flex-shrink: 0;\r\n }\r\n\r\n .assess-badge {\r\n display: inline-block;\r\n background: rgba(0, 194, 168, 0.12);\r\n border: 1px solid rgba(0, 194, 168, 0.3);\r\n border-radius: 6px;\r\n padding: 6px 14px;\r\n font-size: 11px;\r\n font-weight: 700;\r\n color: var(--teal);\r\n letter-spacing: 0.06em;\r\n text-transform: uppercase;\r\n margin: 3px;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 RELATED SERVICES \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .related-grid {\r\n display: grid;\r\n grid-template-columns: repeat(3, 1fr);\r\n gap: 20px;\r\n margin-top: 52px;\r\n }\r\n\r\n .related-card {\r\n background: rgba(255, 255, 255, 0.03);\r\n border: 1px solid rgba(255, 255, 255, 0.08);\r\n border-radius: 10px;\r\n padding: 32px 28px;\r\n transition: border-color 0.25s, background 0.25s;\r\n }\r\n\r\n .related-card:hover {\r\n border-color: rgba(245, 200, 66, 0.3);\r\n background: rgba(255, 255, 255, 0.05);\r\n }\r\n\r\n .related-icon {\r\n font-size: 28px;\r\n margin-bottom: 16px;\r\n }\r\n\r\n .related-title {\r\n font-size: 17px;\r\n font-weight: 800;\r\n color: var(--white);\r\n margin-bottom: 10px;\r\n }\r\n\r\n .related-desc {\r\n font-size: 13px;\r\n color: rgba(240, 246, 252, 0.58);\r\n line-height: 1.7;\r\n margin-bottom: 20px;\r\n }\r\n\r\n .related-link {\r\n font-size: 11px;\r\n font-weight: 700;\r\n letter-spacing: 0.12em;\r\n text-transform: uppercase;\r\n color: var(--amber-light);\r\n display: inline-flex;\r\n align-items: center;\r\n gap: 6px;\r\n transition: gap 0.2s;\r\n }\r\n\r\n .related-link:hover {\r\n gap: 10px;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 FAQ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .faq-list {\r\n display: flex;\r\n flex-direction: column;\r\n gap: 0;\r\n margin-top: 52px;\r\n border: 1px solid rgba(255, 255, 255, 0.08);\r\n border-radius: 12px;\r\n overflow: hidden;\r\n }\r\n\r\n .faq-item {\r\n border-bottom: 1px solid rgba(255, 255, 255, 0.06);\r\n }\r\n\r\n .faq-item:last-child {\r\n border-bottom: none;\r\n }\r\n\r\n .faq-q {\r\n width: 100%;\r\n padding: 26px 32px;\r\n background: none;\r\n border: none;\r\n cursor: pointer;\r\n display: flex;\r\n justify-content: space-between;\r\n align-items: center;\r\n gap: 20px;\r\n font-family: 'Poppins', sans-serif;\r\n font-size: 16px;\r\n font-weight: 700;\r\n color: var(--white);\r\n text-align: left;\r\n transition: background 0.2s;\r\n }\r\n\r\n .faq-q:hover {\r\n background: rgba(255, 255, 255, 0.03);\r\n }\r\n\r\n .faq-q .faq-arrow {\r\n font-size: 20px;\r\n color: var(--amber-light);\r\n flex-shrink: 0;\r\n transition: transform 0.3s;\r\n }\r\n\r\n .faq-q.open .faq-arrow {\r\n transform: rotate(45deg);\r\n }\r\n\r\n .faq-a {\r\n max-height: 0;\r\n overflow: hidden;\r\n transition: max-height 0.4s ease, padding 0.3s;\r\n padding: 0 32px;\r\n }\r\n\r\n .faq-a-inner {\r\n padding-bottom: 26px;\r\n font-size: 15px;\r\n color: rgba(240, 246, 252, 0.68);\r\n line-height: 1.78;\r\n }\r\n\r\n .faq-a.open {\r\n max-height: 400px;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 CTA SECTION \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n .cta-section {\r\n background: linear-gradient(135deg, var(--navy-mid) 0%, #060f22 100%);\r\n padding: 96px 80px;\r\n text-align: center;\r\n position: relative;\r\n overflow: hidden;\r\n }\r\n\r\n .cta-section::before {\r\n content: '';\r\n position: absolute;\r\n inset: 0;\r\n background: radial-gradient(ellipse at 50% 50%, rgba(245, 200, 66, 0.07) 0%, transparent 65%);\r\n }\r\n\r\n .cta-section h2 {\r\n font-size: clamp(28px, 3vw, 42px);\r\n font-weight: 800;\r\n color: var(--white);\r\n margin-bottom: 18px;\r\n position: relative;\r\n z-index: 2;\r\n }\r\n\r\n .cta-section p {\r\n font-size: 17px;\r\n color: rgba(240, 246, 252, 0.68);\r\n max-width: 580px;\r\n margin: 0 auto 40px;\r\n line-height: 1.75;\r\n position: relative;\r\n z-index: 2;\r\n }\r\n\r\n .cta-btns {\r\n display: flex;\r\n justify-content: center;\r\n gap: 16px;\r\n flex-wrap: wrap;\r\n position: relative;\r\n z-index: 2;\r\n }\r\n\r\n \/* \u2500\u2500\u2500 RESPONSIVE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\r\n\r\n @media (max-width: 1100px) {\r\n .zt-panel {\r\n display: none;\r\n }\r\n .hero-content {\r\n max-width: 100%;\r\n }\r\n }\r\n\r\n @media (max-width: 1024px) {\r\n .section {\r\n padding: 72px 40px;\r\n }\r\n .hero-content {\r\n padding: 72px 40px 100px;\r\n }\r\n .hero-bottom {\r\n left: 40px;\r\n }\r\n .cta-section {\r\n padding: 72px 40px;\r\n }\r\n .pillars {\r\n grid-template-columns: repeat(2, 1fr);\r\n }\r\n .fail-grid {\r\n grid-template-columns: 1fr 1fr;\r\n }\r\n .benefit-grid {\r\n grid-template-columns: 1fr 1fr;\r\n }\r\n .related-grid {\r\n grid-template-columns: 1fr 1fr;\r\n }\r\n .two-col {\r\n grid-template-columns: 1fr;\r\n gap: 48px;\r\n }\r\n .stats-band {\r\n grid-template-columns: repeat(2, 1fr);\r\n }\r\n .compare-header-cell,\r\n .compare-cell {\r\n padding: 14px 18px;\r\n font-size: 13px;\r\n }\r\n }\r\n\r\n @media (max-width: 768px) {\r\n .section {\r\n padding: 56px 24px;\r\n }\r\n .hero-content {\r\n padding: 56px 24px 80px;\r\n }\r\n .hero-bottom {\r\n left: 24px;\r\n gap: 28px;\r\n bottom: 24px;\r\n }\r\n .hero-stat-value {\r\n font-size: 22px;\r\n }\r\n .cta-section {\r\n padding: 56px 24px;\r\n }\r\n .pillars {\r\n grid-template-columns: 1fr;\r\n }\r\n .fail-grid {\r\n grid-template-columns: 1fr;\r\n }\r\n .benefit-grid {\r\n grid-template-columns: 1fr;\r\n }\r\n .related-grid {\r\n grid-template-columns: 1fr;\r\n }\r\n .stats-band {\r\n grid-template-columns: 1fr 1fr;\r\n }\r\n .compare-wrap {\r\n overflow-x: auto;\r\n }\r\n .compare-header,\r\n .compare-row {\r\n min-width: 560px;\r\n }\r\n .roadmap::before {\r\n display: none;\r\n }\r\n .roadmap-step {\r\n flex-direction: column;\r\n gap: 16px;\r\n }\r\n .step-num {\r\n width: 44px;\r\n height: 44px;\r\n font-size: 15px;\r\n }\r\n }\r\n <\/style>\r\n\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n HERO\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"hero\">\r\n\r\n <!-- Trust Verification Panel -->\r\n <div class=\"zt-panel\">\r\n <div class=\"zt-panel-box\">\r\n <div class=\"zt-panel-header\">\r\n <div class=\"zt-panel-dot\"><\/div>\r\n <span class=\"zt-panel-title\">Zero Trust Policy Engine<\/span>\r\n <\/div>\r\n\r\n <div class=\"zt-label\">Richiesta di accesso<\/div>\r\n <div class=\"zt-request\">\r\n <div class=\"zt-req-row\">\r\n <span class=\"zt-req-key\">Utente<\/span>\r\n <span class=\"zt-req-val amber\">m.bianchi@acme.it<\/span>\r\n <\/div>\r\n <div class=\"zt-req-row\">\r\n <span class=\"zt-req-key\">Dispositivo<\/span>\r\n <span class=\"zt-req-val\">WIN-LPT-0342<\/span>\r\n <\/div>\r\n <div class=\"zt-req-row\">\r\n <span class=\"zt-req-key\">Risorsa<\/span>\r\n <span class=\"zt-req-val\">ERP \u00b7 Modulo Finanza<\/span>\r\n <\/div>\r\n <div class=\"zt-req-row\">\r\n <span class=\"zt-req-key\">Posizione<\/span>\r\n <span class=\"zt-req-val\">Milano, IT<\/span>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"zt-engine\">\r\n <div class=\"zt-engine-icon\">\u2699<\/div>\r\n <div class=\"zt-engine-text\">\r\n <strong>Verifica in corso\u2026<\/strong> Analisi identit\u00e0, device, contesto\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"zt-label\">Risultati verifica<\/div>\r\n <div class=\"zt-checks\">\r\n <div class=\"zt-check\">\r\n <div class=\"zt-check-icon ok\">\u2713<\/div>\r\n <div class=\"zt-check-label\">\r\n Identit\u00e0 verificata (MFA)\r\n <span class=\"sub\">Azure AD \u00b7 Condizione soddisfatta<\/span>\r\n <\/div>\r\n <\/div>\r\n <div class=\"zt-check\">\r\n <div class=\"zt-check-icon ok\">\u2713<\/div>\r\n <div class=\"zt-check-label\">\r\n Dispositivo conforme\r\n <span class=\"sub\">Patch level OK \u00b7 EDR attivo<\/span>\r\n <\/div>\r\n <\/div>\r\n <div class=\"zt-check\">\r\n <div class=\"zt-check-icon ok\">\u2713<\/div>\r\n <div class=\"zt-check-label\">\r\n Contesto nella norma\r\n <span class=\"sub\">Orario lavorativo \u00b7 Posizione coerente<\/span>\r\n <\/div>\r\n <\/div>\r\n <div class=\"zt-check\">\r\n <div class=\"zt-check-icon ok\">\u2713<\/div>\r\n <div class=\"zt-check-label\">\r\n Ruolo autorizzato\r\n <span class=\"sub\">Policy: CFO_TEAM \u00b7 Least Privilege<\/span>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"zt-verdict\">\r\n <div class=\"zt-verdict-label\">Decisione policy<\/div>\r\n <div class=\"zt-verdict-value\">\u2713 Accesso concesso \u2014 Sessione monitorata<\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"hero-content\">\r\n <div class=\"hero-tag\">Architettura di Sicurezza<\/div>\r\n <h1>Zero Trust:\r\n <br><span>la guida definitiva<\/span>\r\n <br>per le aziende italiane<\/h1>\r\n <p class=\"hero-subtitle\">Il perimetro di rete non esiste pi\u00f9. Lavoratori remoti, cloud ibrido e supply chain digitale hanno dissolto il confine tra “dentro” e “fuori”. Zero Trust \u00e8 il modello che risponde a questa realt\u00e0: <em>non fidarsi mai, verificare sempre<\/em>.<\/p>\r\n <div class=\"hero-ctas\">\r\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Richiedi Zero Trust Assessment<\/a>\r\n <a href=\"#roadmap\" class=\"btn-secondary\">Roadmap di implementazione \u2193<\/a>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"hero-bottom\">\r\n <div>\r\n <div class=\"hero-stat-value accent\">0<\/div>\r\n <div class=\"hero-stat-label\">Fiducia implicita<\/div>\r\n <\/div>\r\n <div>\r\n <div class=\"hero-stat-value\">Always<\/div>\r\n <div class=\"hero-stat-label\">Verify<\/div>\r\n <\/div>\r\n <div>\r\n <div class=\"hero-stat-value accent\">Least<\/div>\r\n <div class=\"hero-stat-label\">Privilege<\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n COS'\u00c8 ZERO TRUST\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-alt\" id=\"cose-zero-trust\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag\">Il Paradigma<\/div>\r\n <h2>Cos’\u00e8 Zero Trust \u2014 e cosa <em>non<\/em> \u00e8<\/h2>\r\n\r\n <div class=\"callout-definition\">\r\n <p>“Non fidarti mai, verifica sempre.” Zero Trust non \u00e8 un prodotto da acquistare n\u00e9 un vendor da scegliere: \u00e8 un <strong>modello architetturale<\/strong> che elimina la fiducia implicita dai sistemi informativi e richiede la verifica\r\n continua di ogni richiesta di accesso \u2014 indipendentemente da dove proviene.<\/p>\r\n <cite>NIST SP 800-207 \u2014 Zero Trust Architecture<\/cite>\r\n <\/div>\r\n\r\n <p class=\"section-lead\" style=\"margin-bottom:32px;\">Il termine fu coniato da John Kindervag di Forrester Research nel 2010, ma \u00e8 con la diffusione massiva del cloud e del lavoro remoto che Zero Trust \u00e8 diventato il framework di riferimento per le organizzazioni che vogliono proteggere\r\n infrastrutture distribuite senza sacrificare l’operativit\u00e0.<\/p>\r\n\r\n <p style=\"font-size:16px; color:var(--text-muted); line-height:1.8; max-width:800px;\">Zero Trust non nega l’accesso per definizione: lo <strong>concede in modo consapevole<\/strong>, valutando ogni sessione sulla base di identit\u00e0 dell’utente, postura del dispositivo, posizione, comportamento e contesto applicativo.\r\n L’accesso \u00e8 sempre minimo (least privilege), temporalmente limitato e continuamente rivalutato \u2014 non solo al momento del login.<\/p>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n PERCH\u00c9 IL PERIMETRO NON ESISTE PI\u00d9\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section\" id=\"perimetro\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag\">Il problema<\/div>\r\n <h2>Perch\u00e9 il perimetro di rete \u00e8 <span style=\"color:#c0392b;\">diventato obsoleto<\/span><\/h2>\r\n <p class=\"section-lead\">La sicurezza perimetrale nasce in un’era in cui le risorse erano fisicamente nel datacenter e gli utenti lavoravano in ufficio. Quel mondo non esiste pi\u00f9. Tre forze strutturali hanno reso il modello firewall-centric inservibile.<\/p>\r\n\r\n <div class=\"fail-grid\">\r\n <div class=\"fail-card\">\r\n <div class=\"fail-icon\">\u2601\ufe0f<\/div>\r\n <div class=\"fail-title\">Il cloud ha dissolto il perimetro<\/div>\r\n <div class=\"fail-desc\">SaaS, IaaS, PaaS: le applicazioni aziendali risiedono fuori dal datacenter. Un firewall perimetrale non pu\u00f2 proteggere Microsoft 365, Salesforce o AWS. Il traffico non passa pi\u00f9 dalla rete aziendale \u2014 passa direttamente da\r\n browser a cloud.<\/div>\r\n <span class=\"fail-tag\">Firewall perimetrale: inefficace<\/span>\r\n <\/div>\r\n <div class=\"fail-card\">\r\n <div class=\"fail-icon\">\ud83c\udfe0<\/div>\r\n <div class=\"fail-title\">Il lavoro remoto \u00e8 la norma<\/div>\r\n <div class=\"fail-desc\">Gli utenti si connettono da casa, hotel, aeroporti e reti mobili. Le VPN tradizionali aprono un tunnel all’intera rete aziendale per un dispositivo che potrebbe essere compromesso, non aggiornato o condiviso. La fiducia \u00e8 implicita\r\n \u2014 e questo \u00e8 il problema.<\/div>\r\n <span class=\"fail-tag\">VPN tradizionale: troppo ampia<\/span>\r\n <\/div>\r\n <div class=\"fail-card\">\r\n <div class=\"fail-icon\">\ud83d\udd17<\/div>\r\n <div class=\"fail-title\">La supply chain amplia la superficie<\/div>\r\n <div class=\"fail-desc\">Fornitori, partner, consulenti esterni accedono ai sistemi aziendali. Ogni accesso privilegiato di un terzo \u00e8 un potenziale punto di ingresso. I movimenti laterali post-compromissione sfruttano esattamente questa fiducia implicita\r\n verso chi \u00e8 “gi\u00e0 dentro”.<\/div>\r\n <span class=\"fail-tag\">Accessi di terzi: rischio critico<\/span>\r\n <\/div>\r\n <\/div>\r\n\r\n <div style=\"margin-top:48px; padding:28px 36px; background:rgba(0,27,59,0.05); border-radius:12px; border-left:4px solid var(--navy-btn);\">\r\n <p style=\"font-size:16px; color:var(--text-body); line-height:1.8;\"><strong>La realt\u00e0 degli attacchi moderni conferma il problema:<\/strong> l’80% delle violazioni sfrutta credenziali compromesse, e una volta ottenuto un accesso legittimo l’attaccante pu\u00f2 muoversi lateralmente per settimane senza\r\n essere rilevato. Zero Trust limita strutturalmente questo blast radius \u2014 perch\u00e9 ogni segmento, ogni risorsa, ogni accesso richiede una nuova verifica.<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n STATS BAND\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section-dark\" style=\"padding:0;\">\r\n <div class=\"stats-band\">\r\n <div class=\"stat-box\">\r\n <div class=\"stat-box-val\"><span class=\"accent\" data-target=\"80\">0<\/span>%<\/div>\r\n <div class=\"stat-box-label\">delle violazioni sfrutta\r\n <br>credenziali compromesse<\/div>\r\n <\/div>\r\n <div class=\"stat-box\">\r\n <div class=\"stat-box-val\"><span class=\"accent\" data-target=\"287\">0<\/span><\/div>\r\n <div class=\"stat-box-label\">giorni medi per identificare\r\n <br>una violazione (modello classico)<\/div>\r\n <\/div>\r\n <div class=\"stat-box\">\r\n <div class=\"stat-box-val\"><span class=\"accent\" data-target=\"72\">0<\/span>%<\/div>\r\n <div class=\"stat-box-label\">riduzione degli incidenti\r\n <br>con Zero Trust maturo<\/div>\r\n <\/div>\r\n <div class=\"stat-box\">\r\n <div class=\"stat-box-val\"><span class=\"accent\" data-target=\"50\">0<\/span>%<\/div>\r\n <div class=\"stat-box-label\">riduzione del costo medio\r\n <br>di una violazione<\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n I 5 PRINCIPI ZERO TRUST\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-dark\" id=\"principi\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag section-tag-amber\">I Principi<\/div>\r\n <h2>I 5 pilastri fondamentali di Zero Trust<\/h2>\r\n <p class=\"section-lead\">Zero Trust si poggia su principi operativi precisi \u2014 non su singole tecnologie. Ogni pilastro affronta una dimensione specifica della superficie di attacco moderna.<\/p>\r\n\r\n <div class=\"pillars\">\r\n <div class=\"pillar\">\r\n <div class=\"pillar-line\"><\/div>\r\n <div class=\"pillar-num\">01<\/div>\r\n <div class=\"pillar-icon\">\ud83e\udeaa<\/div>\r\n <h3>Verifica esplicita dell’identit\u00e0<\/h3>\r\n <p>Ogni utente, dispositivo e servizio viene autenticato e autorizzato in modo esplicito \u2014 sempre, non solo al login. L’identit\u00e0 \u00e8 il nuovo perimetro: MFA, identity provider federati, conditional access e continuous authentication\r\n sono le fondamenta del modello.<\/p>\r\n <\/div>\r\n <div class=\"pillar\">\r\n <div class=\"pillar-line\"><\/div>\r\n <div class=\"pillar-num\">02<\/div>\r\n <div class=\"pillar-icon\">\ud83d\udd12<\/div>\r\n <h3>Accesso con privilegi minimi<\/h3>\r\n <p>Gli utenti ricevono esattamente i permessi necessari per il loro ruolo, per il tempo necessario. Just-In-Time (JIT) e Just-Enough-Access (JEA) limitano strutturalmente il danno potenziale di un account compromesso \u2014 riducendo\r\n il blast radius a una singola risorsa.<\/p>\r\n <\/div>\r\n <div class=\"pillar\">\r\n <div class=\"pillar-line\"><\/div>\r\n <div class=\"pillar-num\">03<\/div>\r\n <div class=\"pillar-icon\">\ud83e\uddf1<\/div>\r\n <h3>Microsegmentazione<\/h3>\r\n <p>La rete non \u00e8 un grande spazio aperto: viene suddivisa in segmenti granulari, ciascuno con policy di accesso indipendenti. Un attaccante che compromette un endpoint non pu\u00f2 muoversi lateralmente verso altri sistemi \u2014 ogni hop\r\n richiede una nuova autorizzazione esplicita.<\/p>\r\n <\/div>\r\n <div class=\"pillar\">\r\n <div class=\"pillar-line\"><\/div>\r\n <div class=\"pillar-num\">04<\/div>\r\n <div class=\"pillar-icon\">\ud83d\udcca<\/div>\r\n <h3>Visibilit\u00e0 e analisi continua<\/h3>\r\n <p>Zero Trust richiede la capacit\u00e0 di vedere tutto: log di accesso, comportamento utente, postura del dispositivo, traffico di rete. UEBA, SIEM e detection avanzata rilevano le anomalie in tempo reale \u2014 anche quando le credenziali\r\n sono legittime ma il comportamento \u00e8 sospetto.<\/p>\r\n <\/div>\r\n <div class=\"pillar\">\r\n <div class=\"pillar-line\"><\/div>\r\n <div class=\"pillar-num\">05<\/div>\r\n <div class=\"pillar-icon\">\u2699\ufe0f<\/div>\r\n <h3>Automazione e orchestrazione<\/h3>\r\n <p>Le policy Zero Trust devono essere dinamiche e adattive. L’automazione consente di rispondere in tempo reale: revocare sessioni, isolare endpoint, scalare permessi in base al rischio calcolato \u2014 senza dipendere da interventi\r\n manuali che allungano i tempi di risposta.<\/p>\r\n <\/div>\r\n <div class=\"pillar\" style=\"background:rgba(245,200,66,0.04);\">\r\n <div class=\"pillar-line\" style=\"background:var(--amber-light); height:100%;\"><\/div>\r\n <div class=\"pillar-num\">+<\/div>\r\n <div class=\"pillar-icon\">\ud83d\udd04<\/div>\r\n <h3>Assume Breach<\/h3>\r\n <p>Zero Trust adotta per design l’ipotesi che la violazione sia gi\u00e0 avvenuta o possa avvenire in qualsiasi momento. Questo cambia radicalmente l’approccio difensivo: non si tratta solo di prevenire l’ingresso, ma di limitare il\r\n danno e rilevare rapidamente ogni movimento anomalo all’interno.<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n ROADMAP\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-alt\" id=\"roadmap\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag\">Implementazione<\/div>\r\n <h2>Come implementare Zero Trust: roadmap step by step<\/h2>\r\n <p class=\"section-lead\">Zero Trust non si installa \u2014 si costruisce. \u00c8 un percorso iterativo che parte dalle fondamenta dell’identit\u00e0 e si estende progressivamente a dispositivi, rete, applicazioni e dati. Ogni fase produce benefici immediati e prepara\r\n il terreno per quella successiva.<\/p>\r\n\r\n <div class=\"roadmap\">\r\n\r\n <div class=\"roadmap-step\">\r\n <div class=\"step-num\">01<\/div>\r\n <div class=\"step-body\">\r\n <div class=\"step-phase\">Fase 1 \u2014 Fondamenta<\/div>\r\n <div class=\"step-title\">Inventario e classificazione delle risorse<\/div>\r\n <div class=\"step-desc\">Non puoi proteggere ci\u00f2 che non conosci. Il punto di partenza \u00e8 un inventario completo: utenti, dispositivi, applicazioni, dati e flussi di comunicazione. \u00c8 la fase di mappatura che determina la superficie di attacco reale\r\n e i punti di accesso critici da proteggere prioritariamente.<\/div>\r\n <div class=\"step-pills\">\r\n <span class=\"step-pill\">Asset Discovery<\/span>\r\n <span class=\"step-pill\">Data Classification<\/span>\r\n <span class=\"step-pill\">Identity Inventory<\/span>\r\n <span class=\"step-pill\">Network Flow Analysis<\/span>\r\n <\/div>\r\n <div class=\"step-timeline\">Durata media: 4\u20138 settimane<\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"roadmap-step\">\r\n <div class=\"step-num\">02<\/div>\r\n <div class=\"step-body\">\r\n <div class=\"step-phase\">Fase 2 \u2014 Identit\u00e0<\/div>\r\n <div class=\"step-title\">Rafforzamento dell’identit\u00e0 e autenticazione<\/div>\r\n <div class=\"step-desc\">L’identit\u00e0 \u00e8 il primo perimetro Zero Trust. MFA robusto (FIDO2 o app authenticator), Single Sign-On federato, Privileged Access Management (PAM) e Conditional Access sono le misure che producono il maggiore impatto immediato\r\n sulla riduzione del rischio. Questa fase porta benefici visibili gi\u00e0 nelle prime settimane.<\/div>\r\n <div class=\"step-pills\">\r\n <span class=\"step-pill\">MFA \u00b7 FIDO2<\/span>\r\n <span class=\"step-pill\">Identity Provider (IdP)<\/span>\r\n <span class=\"step-pill\">PAM \u00b7 Just-in-Time<\/span>\r\n <span class=\"step-pill\">Conditional Access<\/span>\r\n <span class=\"step-pill\">SSO Federato<\/span>\r\n <\/div>\r\n <div class=\"step-timeline\">Durata media: 4\u201310 settimane<\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"roadmap-step\">\r\n <div class=\"step-num\">03<\/div>\r\n <div class=\"step-body\">\r\n <div class=\"step-phase\">Fase 3 \u2014 Dispositivi<\/div>\r\n <div class=\"step-title\">Device Trust e gestione della postura<\/div>\r\n <div class=\"step-desc\">Un’identit\u00e0 valida su un dispositivo compromesso non \u00e8 un accesso sicuro. In questa fase si integra la postura del dispositivo nelle decisioni di accesso: MDM\/UEM per la conformit\u00e0, EDR per la visibilit\u00e0 sugli endpoint, verifica\r\n dei patch level e blocco dei dispositivi non gestiti o fuori policy.<\/div>\r\n <div class=\"step-pills\">\r\n <span class=\"step-pill\">MDM \u00b7 UEM<\/span>\r\n <span class=\"step-pill\">EDR Integration<\/span>\r\n <span class=\"step-pill\">Device Compliance Policy<\/span>\r\n <span class=\"step-pill\">Certificate-Based Auth<\/span>\r\n <\/div>\r\n <div class=\"step-timeline\">Durata media: 6\u201312 settimane<\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"roadmap-step\">\r\n <div class=\"step-num\">04<\/div>\r\n <div class=\"step-body\">\r\n <div class=\"step-phase\">Fase 4 \u2014 Rete<\/div>\r\n <div class=\"step-title\">ZTNA e microsegmentazione della rete<\/div>\r\n <div class=\"step-desc\">Sostituzione progressiva della VPN tradizionale con Zero Trust Network Access (ZTNA): accesso granulare solo all’applicazione richiesta, non all’intera rete. Parallelamente, la microsegmentazione suddivide la rete in zone\r\n isolate \u2014 rendendo impossibile il movimento laterale non autorizzato tra segmenti.<\/div>\r\n <div class=\"step-pills\">\r\n <span class=\"step-pill\">ZTNA<\/span>\r\n <span class=\"step-pill\">Microsegmentazione<\/span>\r\n <span class=\"step-pill\">Software-Defined Perimeter<\/span>\r\n <span class=\"step-pill\">East-West Traffic Control<\/span>\r\n <\/div>\r\n <div class=\"step-timeline\">Durata media: 8\u201316 settimane<\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"roadmap-step\">\r\n <div class=\"step-num\">05<\/div>\r\n <div class=\"step-body\">\r\n <div class=\"step-phase\">Fase 5 \u2014 Applicazioni e Dati<\/div>\r\n <div class=\"step-title\">Protezione delle applicazioni e dei dati<\/div>\r\n <div class=\"step-desc\">In questa fase si estende Zero Trust alle applicazioni cloud e on-premise con CASB, WAF e API security. I dati vengono classificati e protetti con DLP e crittografia contestuale. Le policy di accesso diventano data-aware:\r\n chi accede a cosa, quando, da dove e con quale dispositivo determina dinamicamente il livello di accesso concesso.<\/div>\r\n <div class=\"step-pills\">\r\n <span class=\"step-pill\">CASB<\/span>\r\n <span class=\"step-pill\">WAF \u00b7 API Security<\/span>\r\n <span class=\"step-pill\">DLP<\/span>\r\n <span class=\"step-pill\">Data Classification<\/span>\r\n <span class=\"step-pill\">Encryption at Rest\/Transit<\/span>\r\n <\/div>\r\n <div class=\"step-timeline\">Durata media: 8\u201320 settimane<\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div class=\"roadmap-step\">\r\n <div class=\"step-num\">06<\/div>\r\n <div class=\"step-body\">\r\n <div class=\"step-phase\">Fase 6 \u2014 Maturit\u00e0<\/div>\r\n <div class=\"step-title\">Visibilit\u00e0 continua, UEBA e automazione delle policy<\/div>\r\n <div class=\"step-desc\">La fase finale consolida la maturit\u00e0 Zero Trust: UEBA per rilevare anomalie comportamentali, SIEM integrato con il motore di policy per risposte automatiche, e ottimizzazione continua delle regole basata sulla telemetria\r\n raccolta. L’organizzazione passa da Zero Trust “implementato” a Zero Trust “operativo” \u2014 un ciclo continuo di verifica e adattamento.<\/div>\r\n <div class=\"step-pills\">\r\n <span class=\"step-pill\">UEBA<\/span>\r\n <span class=\"step-pill\">SIEM Integration<\/span>\r\n <span class=\"step-pill\">SOAR \u00b7 Automated Response<\/span>\r\n <span class=\"step-pill\">Continuous Validation<\/span>\r\n <span class=\"step-pill\">Risk-Based Adaptive Access<\/span>\r\n <\/div>\r\n <div class=\"step-timeline\">Durata media: 12\u201324 settimane \u00b7 Ciclo continuo<\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n COMPARISON TABLE\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-dark\" id=\"confronto\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag section-tag-amber\">Confronto<\/div>\r\n <h2>Sicurezza tradizionale vs. Zero Trust<\/h2>\r\n <p class=\"section-lead\">Il cambiamento non \u00e8 solo tecnologico \u2014 \u00e8 concettuale. Zero Trust ribalta ogni assunzione della sicurezza perimetrale classica.<\/p>\r\n\r\n <div class=\"compare-wrap\">\r\n <div class=\"compare-header\">\r\n <div class=\"compare-header-cell label\">Dimensione<\/div>\r\n <div class=\"compare-header-cell old\">\ud83d\udd34 Modello Tradizionale<\/div>\r\n <div class=\"compare-header-cell new\">\ud83d\udfe2 Zero Trust<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Fiducia<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Implicita \u2014 “sei dentro, sei fidato”<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Esplicita \u2014 verificata ad ogni richiesta<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Perimetro<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Fisso \u2014 firewall e DMZ<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Distribuito \u2014 ogni risorsa \u00e8 il perimetro<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Accesso remoto<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>VPN \u2014 accesso all’intera rete<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>ZTNA \u2014 accesso solo alla singola app<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Movimento laterale<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Possibile \u2014 rete flat interna<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Bloccato \u2014 microsegmentazione<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Dispositivi<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Ignorati \u2014 l’IP \u00e8 sufficiente<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Valutati \u2014 postura inclusa nel decision point<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Cloud e SaaS<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Fuori dal perimetro \u2014 non protetti<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Nativo \u2014 policy estese al cloud<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Rilevazione anomalie<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Reattiva \u2014 dopo la violazione<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Continua \u2014 UEBA e behavioral analytics<\/div>\r\n <\/div>\r\n <div class=\"compare-row\">\r\n <div class=\"compare-cell topic\">Blast radius<\/div>\r\n <div class=\"compare-cell old-val\"><span class=\"cmp-x\">\u2717<\/span>Ampio \u2014 l’intera rete \u00e8 a rischio<\/div>\r\n <div class=\"compare-cell new-val\"><span class=\"cmp-ok\">\u2713<\/span>Limitato \u2014 singola risorsa o segmento<\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n BENEFICI\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section\" id=\"benefici\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag\">Vantaggi<\/div>\r\n <h2>Perch\u00e9 Zero Trust migliora la postura difensiva<\/h2>\r\n <p class=\"section-lead\">Adottare Zero Trust non significa solo ridurre i rischi \u2014 significa costruire un’infrastruttura pi\u00f9 flessibile, scalabile e adatta alle esigenze del business moderno.<\/p>\r\n\r\n <div class=\"benefit-grid\">\r\n <div class=\"benefit-card\">\r\n <div class=\"benefit-icon\">\ud83d\udee1\ufe0f<\/div>\r\n <div class=\"benefit-title\">Riduzione del blast radius<\/div>\r\n <div class=\"benefit-desc\">Anche in caso di compromissione, la microsegmentazione e il least privilege limitano strutturalmente i danni. L’attaccante \u00e8 confinato in un segmento isolato e non pu\u00f2 propagarsi lateralmente.<\/div>\r\n <div class=\"benefit-stat\">\u221276%<span>riduzione della superficie di attacco interna<\/span><\/div>\r\n <\/div>\r\n <div class=\"benefit-card\">\r\n <div class=\"benefit-icon\">\u2601\ufe0f<\/div>\r\n <div class=\"benefit-title\">Flessibilit\u00e0 cloud-native<\/div>\r\n <div class=\"benefit-desc\">Zero Trust abilita il lavoro da qualsiasi luogo con sicurezza equivalente all’ufficio. Multi-cloud, hybrid e remote-first sono nativamente supportati \u2014 senza compromessi di sicurezza o produttivit\u00e0.<\/div>\r\n <div class=\"benefit-stat\">100%<span>copertura cloud, ibrido e on-premise<\/span><\/div>\r\n <\/div>\r\n <div class=\"benefit-card\">\r\n <div class=\"benefit-icon\">\ud83d\udc41\ufe0f<\/div>\r\n <div class=\"benefit-title\">Visibilit\u00e0 completa<\/div>\r\n <div class=\"benefit-desc\">Zero Trust richiede log completi di ogni accesso: chi, cosa, quando, da dove, con quale dispositivo. Questo livello di visibilit\u00e0 accelera l’indagine su incidenti e migliora il rilevamento delle minacce insider.<\/div>\r\n <div class=\"benefit-stat\">\u221260%<span>tempo medio di rilevazione (MTTD)<\/span><\/div>\r\n <\/div>\r\n <div class=\"benefit-card\">\r\n <div class=\"benefit-icon\">\ud83d\udccb<\/div>\r\n <div class=\"benefit-title\">Compliance e audit semplificati<\/div>\r\n <div class=\"benefit-desc\">NIS2, DORA, ISO 27001 e GDPR richiedono controlli sull’accesso ai dati e tracciabilit\u00e0 degli accessi privilegiati. Zero Trust soddisfa strutturalmente queste esigenze \u2014 riducendo il lavoro di compliance e audit.<\/div>\r\n <div class=\"benefit-stat\">NIS2<span>DORA \u00b7 ISO 27001 \u00b7 GDPR<\/span><\/div>\r\n <\/div>\r\n <div class=\"benefit-card\">\r\n <div class=\"benefit-icon\">\ud83c\udfd7\ufe0f<\/div>\r\n <div class=\"benefit-title\">Infrastruttura pi\u00f9 solida<\/div>\r\n <div class=\"benefit-desc\">Uscire dalla logica perimetrale significa costruire un’infrastruttura che regge l’evoluzione del business: acquisizioni, nuovi fornitori, espansione geografica, nuovi servizi cloud \u2014 senza riconfigurare il perimetro ogni volta.<\/div>\r\n <div class=\"benefit-stat\">\u221250%<span>costo medio di una violazione (fonte IBM)<\/span><\/div>\r\n <\/div>\r\n <div class=\"benefit-card\">\r\n <div class=\"benefit-icon\">\u26a1<\/div>\r\n <div class=\"benefit-title\">Risposta agli incidenti accelerata<\/div>\r\n <div class=\"benefit-desc\">La combinazione di visibilit\u00e0 totale, segmentazione e automazione delle policy consente di revocare accessi, isolare endpoint e contenere un incidente in minuti \u2014 non in ore o giorni come nel modello tradizionale.<\/div>\r\n <div class=\"benefit-stat\">\u221280%<span>tempo di contenimento post-violazione<\/span><\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n FORTGALE APPROACH\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-dark\" id=\"fortgale-zero-trust\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag section-tag-light\">Fortgale<\/div>\r\n <h2>Come Fortgale supporta l’adozione di Zero Trust<\/h2>\r\n <p class=\"section-lead\">Zero Trust \u00e8 un percorso \u2014 non un interruttore da accendere. Fortgale accompagna le aziende italiane in ogni fase: dall’assessment iniziale alla maturit\u00e0 operativa, con un approccio vendor-agnostic e orientato al rischio reale.<\/p>\r\n\r\n <div class=\"two-col\">\r\n <div>\r\n <div class=\"feature-list\">\r\n <div class=\"feature-item\">\r\n <div class=\"feature-num\">01<\/div>\r\n <div class=\"feature-text\">\r\n <h4>Zero Trust Assessment<\/h4>\r\n <p>Valutazione della postura attuale rispetto al modello Zero Trust: gap analysis su identit\u00e0, dispositivi, rete, applicazioni e visibilit\u00e0. Output: mappa della maturit\u00e0 e roadmap prioritizzata per rischio.<\/p>\r\n <\/div>\r\n <\/div>\r\n <div class=\"feature-item\">\r\n <div class=\"feature-num\">02<\/div>\r\n <div class=\"feature-text\">\r\n <h4>Progettazione dell’architettura<\/h4>\r\n <p>Definizione dell’architettura Zero Trust target in base all’infrastruttura esistente, agli obiettivi di business e ai vincoli operativi. Vendor-agnostic: il modello viene costruito sui requisiti, non sul vendor.<\/p>\r\n <\/div>\r\n <\/div>\r\n <div class=\"feature-item\">\r\n <div class=\"feature-num\">03<\/div>\r\n <div class=\"feature-text\">\r\n <h4>Supporto all’implementazione<\/h4>\r\n <p>Affiancamento tecnico nelle fasi di deploy: identit\u00e0, device trust, ZTNA, microsegmentazione, integrazione SIEM. Gestione della transizione senza impatto sull’operativit\u00e0.<\/p>\r\n <\/div>\r\n <\/div>\r\n <div class=\"feature-item\">\r\n <div class=\"feature-num\">04<\/div>\r\n <div class=\"feature-text\">\r\n <h4>Monitoraggio continuo con MDR + CTI<\/h4>\r\n <p>Zero Trust non \u00e8 “set and forget”: richiede monitoraggio continuo delle anomalie di accesso. Il servizio MDR di Fortgale e la CTI proprietaria garantiscono visibilit\u00e0 24\/7 e rilevazione avanzata delle minacce che cercano\r\n di aggirare le policy.<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n\r\n <div>\r\n <div class=\"assess-box\">\r\n <div class=\"assess-title\">Zero Trust Assessment gratuito<\/div>\r\n <p style=\"font-size:14px; color:rgba(240,246,252,0.65); line-height:1.7; margin-bottom:20px;\">In una sessione di 90 minuti con il team Fortgale, analizziamo la tua infrastruttura attuale e identifichiamo i gap critici rispetto al modello Zero Trust. Output concreto, senza impegno.<\/p>\r\n <ul class=\"assess-list\">\r\n <li>Valutazione della maturit\u00e0 su identit\u00e0 e accessi privilegiati<\/li>\r\n <li>Analisi della postura di rete e segmentazione esistente<\/li>\r\n <li>Assessment degli accessi cloud e SaaS (M365, Google Workspace, AWS\u2026)<\/li>\r\n <li>Identificazione dei 3 gap critici prioritari<\/li>\r\n <li>Roadmap di implementazione personalizzata<\/li>\r\n <\/ul>\r\n <div style=\"margin-bottom:24px;\">\r\n <span class=\"assess-badge\">MDR<\/span>\r\n <span class=\"assess-badge\">CTI<\/span>\r\n <span class=\"assess-badge\">ITDR<\/span>\r\n <span class=\"assess-badge\">Incident Response<\/span>\r\n <\/div>\r\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\" style=\"width:100%; text-align:center; display:block; padding:16px;\">Prenota il tuo Zero Trust Assessment<\/a>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n SERVIZI CORRELATI\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-ink\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag section-tag-light\">Servizi Fortgale<\/div>\r\n <h2 style=\"color:var(--white);\">I servizi che abilitano Zero Trust<\/h2>\r\n <p class=\"section-lead\">Zero Trust richiede capacit\u00e0 operative avanzate. Fortgale offre i servizi complementari che rendono il modello reale e sostenibile nel tempo.<\/p>\r\n\r\n <div class=\"related-grid\">\r\n <div class=\"related-card\">\r\n <div class=\"related-icon\">\ud83d\udd2d<\/div>\r\n <div class=\"related-title\">MDR \u2014 Managed Detection & Response<\/div>\r\n <div class=\"related-desc\">Monitoraggio 24\/7 degli accessi e delle anomalie comportamentali. Il SOC Fortgale rileva le minacce che cercano di aggirare le policy Zero Trust \u2014 con tempi di risposta in minuti.<\/div>\r\n <a href=\"https:\/\/fortgale.com\/it\/managed-detection-and-response\/\" class=\"related-link\">Scopri MDR \u2192<\/a>\r\n <\/div>\r\n <div class=\"related-card\">\r\n <div class=\"related-icon\">\ud83e\udeaa<\/div>\r\n <div class=\"related-title\">ITDR \u2014 Identity Threat Detection<\/div>\r\n <div class=\"related-desc\">Protezione del pilastro identit\u00e0 di Zero Trust: rilevazione di attacchi all’Active Directory, Entra ID e identit\u00e0 cloud. DCSync, Golden Ticket, pass-the-hash bloccati in tempo reale.<\/div>\r\n <a href=\"https:\/\/fortgale.com\/it\/protezione-identita\/\" class=\"related-link\">Scopri ITDR \u2192<\/a>\r\n <\/div>\r\n <div class=\"related-card\">\r\n <div class=\"related-icon\">\ud83e\udde0<\/div>\r\n <div class=\"related-title\">Cyber Threat Intelligence<\/div>\r\n <div class=\"related-desc\">Intelligence proprietaria su threat actor, IOC e TTP aggiornata quotidianamente. Alimenta le policy adattive Zero Trust con contesto reale sulle minacce attive verso il tuo settore.<\/div>\r\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\" class=\"related-link\">Scopri CTI \u2192<\/a>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n FAQ\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"section section-dark\" id=\"faq\">\r\n <div class=\"section-narrow\">\r\n <div class=\"section-tag section-tag-amber\">FAQ<\/div>\r\n <h2>Domande frequenti su Zero Trust<\/h2>\r\n <p class=\"section-lead\">Le domande pi\u00f9 comuni che riceviamo dalle aziende italiane che valutano l’adozione del modello Zero Trust.<\/p>\r\n\r\n <div class=\"faq-list\">\r\n <div class=\"faq-item\">\r\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\r\n Zero Trust \u00e8 adatto alle PMI o solo alle grandi aziende?\r\n <span class=\"faq-arrow\">+<\/span>\r\n <\/button>\r\n <div class=\"faq-a\">\r\n <div class=\"faq-a-inner\">Zero Trust \u00e8 un modello architetturale, non un prodotto da acquistare in blocco. Pu\u00f2 essere adottato in modo progressivo e modulare, rendendolo accessibile anche alle PMI. Si pu\u00f2 iniziare dall’identit\u00e0 e dall’autenticazione\r\n multifattore (MFA), estendendo gradualmente il modello ad altri livelli. Fortgale supporta le aziende di ogni dimensione nella definizione di una roadmap realistica e sostenibile.<\/div>\r\n <\/div>\r\n <\/div>\r\n <div class=\"faq-item\">\r\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\r\n Quanto tempo richiede un’implementazione Zero Trust?\r\n <span class=\"faq-arrow\">+<\/span>\r\n <\/button>\r\n <div class=\"faq-a\">\r\n <div class=\"faq-a-inner\">Un’implementazione Zero Trust completa richiede tipicamente da 12 a 36 mesi, a seconda della complessit\u00e0 infrastrutturale e del punto di partenza. \u00c8 un percorso iterativo: le prime fasi (inventario, MFA, segmentazione base)\r\n producono benefici di sicurezza immediati gi\u00e0 nei primi 3\u20136 mesi, mentre le fasi avanzate (microsegmentazione, UEBA, automazione policy) completano la maturit\u00e0 del modello nel tempo.<\/div>\r\n <\/div>\r\n <\/div>\r\n <div class=\"faq-item\">\r\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\r\n Qual \u00e8 la differenza tra Zero Trust e VPN?\r\n <span class=\"faq-arrow\">+<\/span>\r\n <\/button>\r\n <div class=\"faq-a\">\r\n <div class=\"faq-a-inner\">La VPN tradizionale garantisce accesso all’intera rete una volta autenticato l’utente \u2014 un modello di fiducia implicita che Zero Trust elimina. Con ZTNA (Zero Trust Network Access), l’utente ottiene accesso solo alla specifica\r\n applicazione o risorsa autorizzata, verificato ogni volta in base a identit\u00e0, dispositivo e contesto. Se un account VPN viene compromesso, l’attaccante pu\u00f2 muoversi su tutta la rete; con ZTNA il danno \u00e8 limitato a una singola\r\n risorsa.<\/div>\r\n <\/div>\r\n <\/div>\r\n <div class=\"faq-item\">\r\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\r\n Zero Trust e cloud sono compatibili?\r\n <span class=\"faq-arrow\">+<\/span>\r\n <\/button>\r\n <div class=\"faq-a\">\r\n <div class=\"faq-a-inner\">Zero Trust nasce proprio per rispondere all’era cloud. A differenza della sicurezza perimetrale, che presuppone un confine fisso tra interno ed esterno, Zero Trust gestisce nativamente ambienti multi-cloud, ibridi e remote-first.\r\n Ogni risorsa \u2014 indipendentemente da dove si trova \u2014 viene protetta con gli stessi controlli di verifica continua: identit\u00e0, dispositivo, contesto e comportamento.<\/div>\r\n <\/div>\r\n <\/div>\r\n <div class=\"faq-item\">\r\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\r\n Fortgale implementa direttamente soluzioni Zero Trust?\r\n <span class=\"faq-arrow\">+<\/span>\r\n <\/button>\r\n <div class=\"faq-a\">\r\n <div class=\"faq-a-inner\">Fortgale supporta le aziende nella progettazione e nell’implementazione del modello Zero Trust con un approccio vendor-agnostic: valutazione della postura attuale, definizione della roadmap, supporto all’integrazione di tecnologie\r\n (Identity Provider, EDR, CASB, SIEM, microsegmentazione) e monitoraggio continuo degli accessi tramite il servizio MDR e CTI. Contattaci per un assessment Zero Trust senza impegno.<\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n CTA\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\r\n <section class=\"cta-section\">\r\n <h2>Pronto ad adottare Zero Trust?<\/h2>\r\n <p>Parti dall’assessment. In 90 minuti identifichiamo i gap critici della tua infrastruttura e costruiamo insieme la roadmap di implementazione \u2014 concreta, prioritizzata, sostenibile.<\/p>\r\n <div class=\"cta-btns\">\r\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Prenota Zero Trust Assessment<\/a>\r\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\" class=\"btn-secondary\">Scopri la CTI Fortgale<\/a>\r\n <\/div>\r\n <\/section>\r\n\r\n\r\n <script>\r\n \/\/ \u2500\u2500 FAQ toggle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n function toggleFaq(btn) {\r\n const answer = btn.nextElementSibling;\r\n const isOpen = answer.classList.contains('open');\r\n document.querySelectorAll('.faq-a').forEach(a => a.classList.remove('open'));\r\n document.querySelectorAll('.faq-q').forEach(b => b.classList.remove('open'));\r\n if (!isOpen) {\r\n answer.classList.add('open');\r\n btn.classList.add('open');\r\n }\r\n }\r\n\r\n \/\/ \u2500\u2500 Animated counters \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n function animateCount(el, target, duration) {\r\n let start = 0;\r\n const step = Math.ceil(target \/ (duration \/ 16));\r\n const timer = setInterval(() => {\r\n start += step;\r\n if (start >= target) {\r\n start = target;\r\n clearInterval(timer);\r\n }\r\n el.textContent = start;\r\n }, 16);\r\n }\r\n\r\n const counterObs = new IntersectionObserver((entries) => {\r\n entries.forEach(entry => {\r\n if (entry.isIntersecting) {\r\n const el = entry.target;\r\n const target = parseInt(el.dataset.target, 10);\r\n animateCount(el, target, 1400);\r\n counterObs.unobserve(el);\r\n }\r\n });\r\n }, {\r\n threshold: 0.4\r\n });\r\n\r\n document.querySelectorAll('[data-target]').forEach(el => counterObs.observe(el));\r\n\r\n \/\/ \u2500\u2500 ZT Panel: rotate through verdicts \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n const verdicts = [{\r\n label: '\u2713 Accesso concesso \u2014 Sessione monitorata',\r\n type: 'granted'\r\n },\r\n {\r\n label: '\u2717 Accesso negato \u2014 Dispositivo non conforme',\r\n type: 'denied'\r\n },\r\n {\r\n label: '\u2713 Accesso concesso \u2014 Ambito ridotto (read-only)',\r\n type: 'granted'\r\n },\r\n {\r\n label: '\u26a0 Step-up richiesto \u2014 Contesto anomalo',\r\n type: 'stepup'\r\n },\r\n ];\r\n const requests = [{\r\n utente: 'm.bianchi@acme.it',\r\n dispositivo: 'WIN-LPT-0342',\r\n risorsa: 'ERP \u00b7 Modulo Finanza',\r\n posizione: 'Milano, IT'\r\n },\r\n {\r\n utente: 'a.ferrari@acme.it',\r\n dispositivo: 'MAC-WRK-0118',\r\n risorsa: 'SharePoint \u00b7 HR Docs',\r\n posizione: 'Roma, IT'\r\n },\r\n {\r\n utente: 'vendor@supplier.eu',\r\n dispositivo: 'BYOD-AND-7821',\r\n risorsa: 'Ticketing \u00b7 Portale',\r\n posizione: 'Berlino, DE'\r\n },\r\n {\r\n utente: 'c.rossi@acme.it',\r\n dispositivo: 'WIN-LPT-0509',\r\n risorsa: 'CRM \u00b7 Dashboard',\r\n posizione: 'Milano, IT'\r\n },\r\n ];\r\n let vtIdx = 0;\r\n const verdictEl = document.querySelector('.zt-verdict');\r\n const verdictLbl = verdictEl ? verdictEl.querySelector('.zt-verdict-label') : null;\r\n const verdictVal = verdictEl ? verdictEl.querySelector('.zt-verdict-value') : null;\r\n const reqRows = document.querySelectorAll('.zt-req-val');\r\n\r\n if (verdictEl && verdictLbl) {\r\n setInterval(() => {\r\n vtIdx = (vtIdx + 1) % verdicts.length;\r\n const v = verdicts[vtIdx];\r\n const r = requests[vtIdx];\r\n verdictEl.className = 'zt-verdict' + (v.type === 'denied' ? ' denied' : '');\r\n verdictLbl.textContent = v.type === 'denied' ? 'ACCESSO NEGATO' : (v.type === 'stepup' ? 'VERIFICA AGGIUNTIVA' : 'Decisione policy');\r\n verdictVal.textContent = v.label;\r\n if (reqRows.length >= 4) {\r\n reqRows[0].textContent = r.utente;\r\n reqRows[1].textContent = r.dispositivo;\r\n reqRows[2].textContent = r.risorsa;\r\n reqRows[3].textContent = r.posizione;\r\n }\r\n }, 4000);\r\n }\r\n <\/script>\r\n\r\n\r\n\r\n \r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n <\/div>\r\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Zero Trust: Guida Definitiva per Aziende Italiane | Fortgale Zero Trust Policy Engine Richiesta di accesso Utente m.bianchi@acme.it Dispositivo WIN-LPT-0342 Risorsa ERP \u00b7 Modulo Finanza Posizione Milano, IT \u2699 Verifica in corso\u2026 Analisi identit\u00e0, device, contesto Risultati verifica \u2713 Identit\u00e0 verificata (MFA) Azure AD \u00b7 Condizione soddisfatta \u2713 Dispositivo conforme Patch level OK \u00b7 EDR […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/full-width-page.php","meta":{"footnotes":""},"class_list":["post-13817","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/comments?post=13817"}],"version-history":[{"count":2,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13817\/revisions"}],"predecessor-version":[{"id":13821,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13817\/revisions\/13821"}],"wp:attachment":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/media?parent=13817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}