Security framework replacing VPNs with identity-based access to applications. Validates user, device, and context before granting per-application access.