Why We Adopted Zero Trust Before It Became an Industry Standard 

Long before Zero Trust became a Gartner category, a boardroom priority, or the cybersecurity buzzword of the decade, we were having uncomfortable conversations with customers. We were challenging the belief that trusted internal networks were secure. We were questioning why organisations were investing millions into protecting perimeters while users, applications and data were rapidly moving beyond them. 

And we were advocating for a different future; one built on the principles of what we now call Modern Defensible Architecture. 

As we celebrate 10 years of partnership with Zscaler, we’re not simply marking an anniversary. We’re marking a decade of challenging conventional cybersecurity thinking. 

Ten years ago, the ideas that underpin Modern Defensible Architecture were often labelled unrealistic, disruptive, expensive or just plain crazy. Today, they’re widely accepted as best practice. 

That’s not because the industry suddenly became more security conscious. It’s because reality forced the conversation. Ransomware didn’t care about network boundaries. Cloud applications didn’t live behind firewalls. Remote work didn’t wait for security teams to catch up. 

And now AI is exposing the same architectural weaknesses many organisations have been carrying for years. 

Jeremy Nees, Chief Product Officer at VITG comments, “The industry’s biggest mistake wasn’t underestimating cybersecurity threats. It was overestimating the ability of traditional security architectures to stop them.” 

Modern Defensible Architecture: The Foundation of Long-Term Cyber Resilience  

The last decade has proven a simple truth: organisations don’t lose because they lack security products. They lose because they’re relying on architectures designed for a different era. 

Over the last ten years, our teams across VITG and our sister companies The Instillery and Security Centric have helped organisations move beyond legacy VPNs, reduce attack surfaces, improve visibility and modernise the way users connect to applications and data. 

We’ve watched security teams spend less time managing infrastructure and more time reducing risk. 

We’ve seen customers shift from defending networks to protecting what actually matters: identities, data and business outcomes. 

And we’ve seen first-hand what happens when organisations build security into the architecture itself, rather than layering on another tool every time a new threat emerges. 

Because customers don’t buy awards. They buy confidence and governance, risk and security outcomes. And they trust managed service and managed security providers (MSP/MSSP) who have already navigated the Zero Trust journey. 

A Decade of Delivering Zero Trust Outcomes with Zscaler  

Our recognition as Zscaler’s ANZ Service Partner of the Year 2025, combined with our Data Security Certification and ACES-certified expertise, reflects more than a decade of helping organisations across Australia and New Zealand turn Zero Trust principles into measurable security outcomes.

As a Zscaler partner for over 10 years, The Instillery has been enabling customers to modernise security architectures long before Zero Trust became the industry standard.  

Following the trans-Tasman merger of VITG and The Instillery, we established a dedicated Zero Trust Practice built on the Zscaler Zero Trust Exchange™ platform, delivering managed security solutions and architectural guidance that help organisations reduce risk, simplify operations and maximise the value of their security investments. 

As customer requirements have evolved, so have our capabilities. We expanded our security operations offering with the launch of Zero Trust Detection and Response (ZDR), providing advanced threat detection and response built on Zero Trust principles. More recently, we introduced Modern Managed Services (MMS) and Managed Detection and Response (MDR), giving organisations access to 24/7 SOC monitoring, threat detection, incident response and security expertise designed to strengthen cyber resilience in an increasingly complex threat landscape. 

Ronnie Meekers, Security Consultant at VITG said, “A decade ago, the goal was to extend the corporate network wherever users needed access. VPNs became the default answer. We challenged that thinking because we believed access should be based on identity, context and least privilege, not network connectivity. Today, those principles sit at the heart of modern security architectures.” 

What was once considered a future-state vision has become an operational necessity. And nowhere is that more evident than AI. 

AI Readiness Starts with Modern Security Architecture  

AI isn’t Creating new Security Problems. It’s exposing existing ones. There’s a dangerous assumption emerging in many organisations: that AI readiness is a technology challenge. It isn’t. It’s an architecture challenge. 

Every AI initiative eventually arrives at the same uncomfortable questions: 

• Who can access sensitive information? 

• What data can AI tools interact with? 

• How is that data protected? 

• Where does it move? 

• What controls actually exist? 

If organisations can’t answer those questions today, AI won’t solve the problem. It will amplify it. 

We’ve already seen shadow AI become the next iteration of shadow IT. We’ve seen businesses discover that their biggest AI risk isn’t the technology itself. It’s years of accumulated technical debt, excessive privilege, poor visibility and fragmented governance. 

Masaki Takeda, Security Consultant at The Instillery comments, “AI rarely introduces entirely new security problems, more often, it surfaces ones that were already there. The risks organisations are discovering today tend to be architectural weaknesses that have gone unnoticed for years, now brought to light under the pressure of AI. Ultimately, AI doesn’t respond to your security strategy; it instead responds to your architecture. That’s why genuine AI readiness begins with a Modern Defensible Architecture.”

The Future Arrived Earlier Than Most Expected 

A decade ago, Modern Defensible Architecture was viewed as a future-state aspiration. Today, it’s becoming the baseline requirement for cyber resilience, cloud transformation and AI adoption. The organisations best positioned for the next decade won’t be those with the biggest security budgets or the most tools. They’ll be the organisations that built architectures capable of adapting to whatever comes next. 

At VITG, The Instillery and Security Centric, we’ve spent the last 10 years helping customers build those foundations. 

The difference today? 

The cybersecurity industry has finally caught up. 

As we celebrate 10 years of partnership with Zscaler, we’re also looking ahead to the next chapter of cybersecurity. If you’re attending Zscaler’s Zenith Live’ 26 Conference in Sydney on 17 September, we’d love to continue the conversation about Modern Defensible Architecture, Zero Trust and AI readiness.

Get in touch to arrange a catchup with our team.