How Subtractive Security Is Gaining Momentum in Cybersecurity in 2026
Cybersecurity Insiders, Tuesday, August 25th, 2026
A growing security philosophy asks 'what can we remove?' instead of what tools to add next.
This piece describes 'subtractive security,' a shift from continually adding tools to actively removing unnecessary applications, permissions and access points to shrink the attack surface.
It argues that tool sprawl causes alert fatigue and that consolidation improves visibility, while unused accounts, excess privileges and unretired legacy systems all create unnecessary risk.
The article ties the trend to least-privilege and zero-trust principles for limiting lateral movement after a compromise, framing subtraction as an increasingly important complement to traditional defenses against ransomware, supply-chain and AI-enabled threats in 2026.