
We are changing how we license Pomerium builds
Pomerium’s official builds, binaries, and images are moving to the Pomerium Community Edition License while the source code remains Apache 2.0.
Blog
Product updates, technical guides, and practical research on identity-aware access.
Featured

Pomerium’s official builds, binaries, and images are moving to the Pomerium Community Edition License while the source code remains Apache 2.0.
Blog

Two proxy architectures secure AI agent access, and they solve different problems. How data-layer and context-aware proxies differ, and when you need each.

The OWASP MCP Governance & Risk Framework v1.0 sets tiers, hard gates, and audit rules for AI agents. Here's what it requires and how to enforce it at runtime.

Non-human identities outnumber people 45-to-1. Learn why agentic AI redefines the identity attack surface and how Pomerium enforces Zero Trust for AI agents.

Every enterprise identity program was designed around a simple assumption: the thing logging in is a person. A person with a password, an MFA device, a predictable workday, and a manager who approves their access.

Why the five isolation boundaries in agent security research all point to the same conclusion: enforcement has to live outside the model.

Google spent the last year quietly admitting what we already knew: Kubernetes was never designed to run AI agents. As Janakiram MSV writes in The New Stack , Google's GKE Agent Sandbox and the new Agent Substrate project amount to an indirect admission "that the platform that won the container decade is not the right control plane for AI agents."
Archive
214 articles
We are changing how we license Pomerium builds
Data-Layer Proxy vs Context-Aware Proxy: Which Do You Need?
MCP Governance: What the OWASP Framework Requires, and Where Enforcement Has to Live
Identity Was Built for Humans Logging In. Agentic AI Ripped Up That Assumption.
Your IAM Was Built for People. Your Biggest Identity Problem Isn't People Anymore.
Agents Have Boundary Issues. Your Infrastructure Shouldn't.
Google Built an Agent Runtime on Kubernetes. Here's How to Build a Cloud-Agnostic One with Identity Included
IAM for Agentic AI: 6 Platforms Compared | Pomerium
How We Designed a Tamper-Evident SSH Recording System for Zero-Trust infrastructure
Understanding Anthropic's Zero Trust for AI Agents Guide
Another GlobalProtect bypass, another reminder that the VPN is the wrong place to put your trust
When the Web Becomes the Attacker: AI Agent Traps and the Case for Identity-Aware Access
Top 5 Agentic Gateways for Securing MCP Tool Calls in 2026
Why Identity-Aware Access is the Missing Layer in Agentic Security
MCP Server Security Risks: What Development Teams Need to Know in 2026
The AIUC-1 Compliance Checklist: 5 Layers Every Enterprise Needs Before Deploying AI Agents
What Is an Agentic Gateway? Definition, Architecture, and Why It's Different from an API Gateway
The AIUC-1 Compliance Stack: The Architecture Auditors Are Actually Looking For
Midmarket Security Teams Deserve Better Than Enterprise Hand-Me-Downs
What Made McKinsey's AI Platform Easy to Hack? And How to Fix it.
Top Ingress NGINX Controller Migration Pain Points
Complete Guide: Zero Trust for Air-Gapped Networks
MCP Security: Why MCP Is an Authorization Crisis
Secure Internal Access to Grafana, Argo, GitLab, and Prometheus Without a VPN
From NGINX to Pomerium: A Practical Migration Guide for Internal Kubernetes Applications
Privilege Access Is the Past. Per Request Authorization Is the Future.
AI Is Your Biggest Security Risk
10 Kubernetes Security Tools DevOps Teams Should Be Using in 2026
Announcing Pomerium v0.32
Why Kubernetes Ingress Needs an Identity Layer
Replacing Ingress-NGINX: A Modern Approach to Secure Kubernetes Access
Hosted Clusters in Pomerium Zero & MCP Hacking (endpoints from localhost via ssh)
It’s always DNS part ∞: tracking down a use-after-free bug in Envoy’s DNS Resolver
Migrating from Ingress NGINX to Pomerium Ingress Controller
Announcing Pomerium v0.31
Designing Smarter Health Checks for Pomerium
Smarter Health Checks for Zero-Downtime Deployments
Secure SQL AI Analyst: Enabled by Pomerium & ChatGPT Developer Mode
Announcing Pomerium v0.30
Zero Trust Without Lock-In: What We Heard at KubeCon EU 2025
Pomerium Has SOC2, and So Could You!
Pomerium’s OpenTelemetry Tracing Support: Deeper Observability, Made Easy
12 Crucial Mobile Device Management (MDM) Features - 2025
40 Unique IAM Interview Questions and Answers | 2025 Edition
8 Docker Image Scanning Tools: 2025 and Beyond
20 Top Remote Workforce Solutions for Businesses- 2025
7 Best Ingress Controllers for Kubernetes for 2025
7 Best Kubernetes Security Solutions and Vendors - 2025
10 Best Free Reverse Proxy Providers - Quick Guide | 2025
20 Best Kubernetes Management Tools for 2025
The Human Factor in Security: Lessons from the CyberArk Employee Risk Survey
What is a "Pomerium"?
How Pomerium Supports FedRAMP Compliance
12 Zero Trust Architecture Examples With Actionable Guide
What is Zscaler and How Does it Work?
Reference Architecture: Using AWS EKS with Pomerium
Identity Aware Proxy (IAP): Meaning, Pricing, Solutions
The Great VPN Myth: What PCI DSS 4.0 Actually Requires for Remote Access
Zscaler vs. Tailscale vs. Pomerium: Detailed Comparison
Announcing Pomerium v0.28
8 Best Open Source Zero Trust Software Solutions
5 Top Tailscale Alternatives: Open Source and Paid
Announcing FleetDM integration for adding device context to access control
Heimdall Reverse Proxy: Features, Alternatives, Pros-Cons
The Best OAuth2 Proxy Alternative: Pomerium
10 Best Open Source Mobile Device Management (MDM) Solutions
Docker Container Scanning Tools: Open Source and Paid
Kubectl Cheat Sheet with Examples- 50 Quick Commands
Cloudflare Access vs. Tailscale vs. Pomerium
Cloudflare Alternatives & Competitors: CDN, Zero Trust & SASE
Cyber Security Awareness Month 2024: What’s New?
Security is Usability — Examining Cybersecurity Erosion
Kubernetes Compliance: NIST, CIS & PCI- Actionable Guide
Decisionmaker's Guide to Cloud Workstations
10 Ugliest VPN Security Risks for Organizations and Users
Zero Trust VPN: Meaning and Alternatives
Twingate Vs. Tailscale Vs. Pomerium: 6 Key Differences
Breach Notification Letter: Samples, Templates, Examples
B2B VPN: Meaning, Examples, Alternatives
Palo Alto Clientless VPN: Pros - Cons, Alternatives
Clientless VPN: Meaning, Solutions, Cost, Alternatives, Drawbacks
Context-Aware Authentication: Meaning, Tools, Examples
IAP Definition in Cybersecurity | Meaning and Solutions
Kubernetes Reverse Proxy: Meaning and Solutions
2.9 Billion Social Security Number Breach: What to Know
The Real Lessons from the Snowflake Breach
CrowdStrike is a Harsh Reminder of the Danger of Third-Party Clients
4 Trends Shaping the Future of Access Control
Logs Are Incomplete Without the “Why”
The Three Pillars of Observability
What is Zero Trust Architecture and Security?
Zero Trust Maturity Rubric and Tool Matrix
IAM Trends and Future Outlook
SSO: OAuth2 vs OIDC vs SAML
5 Lessons Learned Connecting Every IdP to OIDC
Tailscale & Pomerium: Better Together
What Is SASE? — A Buyer’s Guide
Device Management: Essential for Workplace Security and Efficiency
The Perimeter Problem: Why Traditional Network Security Fails
Pomerium and CHT Security Partner for Zero Trust Network Access Solution
A Case Against Layer 4 Security Tools
VPNs Are Killing Productivity
Benefits of Zero Trust Architecture as Defined by NIST
A Close Read at NIST’s Definition of Zero Trust Architecture
Minimizing CORS Misconfigurations
Jsonnet is better than YAML for generating JSON
Your Portal is Showing
Proxy vs Reverse Proxy
Authn vs. Authz — Authentication vs. Authorization
Prevent Insider Attacks With Context-Aware Access
Highlights from IBM’s Cost of a Data Breach 2022
Remote Work Infrastructure
How Context Drives Full Access Decision-making
How Breaches Affect Companies
Security Posture: When and How to Reevaluate
Q&A with Zero Trust Architecture Writers from NIST
Insulation from Third-Party Breaches
The Far Reach of the White House’s Zero Trust Memo
Log4J and the Fragility of Modern Infrastructure
Social Engineering — An Enduring Vulnerability
The Move to Passwordless Authentication
Elevate Productivity with Frictionless Security
CyberSecurity Awareness Month: Cybersecurity First Aligned With Explore. Experience. Share.
August Newsletter
Demystifying Zero Trust
Pomerium 0.10
Pomerium 0.9
Pomerium 0.8
Pomerium 0.7No articles match your search.