Methods and apparatus, including computer program products, implementing and using techniques for logically grouping Internet of Things (IoT) devices. One or more logical zones are defined. Each logical zone includes one or more physical zones, one or more virtual zones, or a combination of physical and virtual zones. Each IoT device is associated with at least one logical zone. Communication between the IoT devices is restricted based on the zones with which the IoT devices are associated.