Google Cloud won a contract with the Defense Innovation Unit (DIU), an agency within the U.S. Department of Defense (DoD), to deploy its Secure Cloud Management across the organization.

The deal comes as Google Cloud CEO Thomas Kurian works to attract enterprise and government customers — in part with its security services. The contract also sets “the stage for potential broader adoption across defense agencies worldwide,” the cloud provider said in a statement.

The software-as-a-service (SaaS) app, developed with Palo Alto Networks, is a container-based service for secure application access and monitoring. It’s built on Google Cloud’s Secure Application Access Anywhere — this is one of several new Google Cloud Security offerings that Kurian announced at the Google Cloud Government Security Summit over the summer. It followed the White House executive order on cybersecurity, and, along with all the security services announced at the summit, it aims to help government organizations implement zero-trust security architectures.

Secure Cloud Management also uses Google Cloud’s Kubernetes-based Anthos to manage hybrid clouds and multi-cloud applications. And it includes Palo Alto Networks’ virtual and container-based firewalls to protect microservices-based applications as well as that vendor’s Prisma Access, which provides endpoint inspection, authentication, and remote access.

These combined capabilities will help secure access to DIU resources from anywhere, directly over the internet, according to Google Cloud.

“In today’s new cybersecurity paradigm, it’s critical that government agencies see the benefits of adopting a zero-trust security strategy and have the option of selecting more modern, cloud-native solutions that meet their unique needs,” Google Cloud VP Lynn Martin said. “We are honored to partner with DIU as the organization undergoes the next phase in its zero-trust journey, as we believe other DoD agencies can benefit and learn from this security approach.”

The DIU partners with organizations across the Department of Defense to prototype commercial technologies that address national security challenges. Now that it’s selected Secure Cloud Management, the product is available for acquisition by other DoD agencies as they adopt their White House mandated zero-trust plans.

Google Cloud pioneered zero trust 20 years ago with BeyondCorp. This was a zero-trust access approach that assigned rules and policies to workloads, virtual machines, or network connections, and then only allowed necessary actions and connections in a workload or application and blocked anything else. The goal was to enable every Google employee to work from untrusted networks without the use of a VPN.