Blog
Product updates, technical guides, and practical research on identity-aware access.
Featured
Pomerium v0.32.0 is all about less friction and more control: SSH access now uses the standard OAuth Authorization Code flow, onboarding can start with a hosted IdP, MCP token refresh is automated, and operators get clearer visibility into databroker state. We also tightened DNS controls and polished a few operational edges.
Blog
Two proxy architectures secure AI agent access, and they solve different problems. How data-layer and context-aware proxies differ, and when you need each.
The OWASP MCP Governance & Risk Framework v1.0 sets tiers, hard gates, and audit rules for AI agents. Here's what it requires and how to enforce it at runtime.
Non-human identities outnumber people 45-to-1. Learn why agentic AI redefines the identity attack surface and how Pomerium enforces Zero Trust for AI agents.
Every enterprise identity program was designed around a simple assumption: the thing logging in is a person. A person with a password, an MFA device, a predictable workday, and a manager who approves their access.
Why the five isolation boundaries in agent security research all point to the same conclusion: enforcement has to live outside the model.
Google spent the last year quietly admitting what we already knew: Kubernetes was never designed to run AI agents. As Janakiram MSV writes in The New Stack , Google's GKE Agent Sandbox and the new Agent Substrate project amount to an indirect admission "that the platform that won the container decade is not the right control plane for AI agents."
Archive
213 articles
Data-Layer Proxy vs Context-Aware Proxy: Which Do You Need?MCP Governance: What the OWASP Framework Requires, and Where Enforcement Has to LiveIdentity Was Built for Humans Logging In. Agentic AI Ripped Up That Assumption.Your IAM Was Built for People. Your Biggest Identity Problem Isn't People Anymore.Agents Have Boundary Issues. Your Infrastructure Shouldn't.Google Built an Agent Runtime on Kubernetes. Here's How to Build a Cloud-Agnostic One with Identity Included.png.CaqDtkk2.webp)
IAM for Agentic AI: 6 Platforms Compared | Pomerium.png.DEeZjDH3.webp)
How We Designed a Tamper-Evident SSH Recording System for Zero-Trust infrastructure.png.jT38w0LS.webp)
Understanding Anthropic's Zero Trust for AI Agents Guide.png.CLojiDYH.webp)
Another GlobalProtect bypass, another reminder that the VPN is the wrong place to put your trust.png.BOyLwQ5r.webp)
When the Web Becomes the Attacker: AI Agent Traps and the Case for Identity-Aware Access.png.D1dxPUm2.webp)
Top 5 Agentic Gateways for Securing MCP Tool Calls in 2026.png.DqqhEqND.webp)
Why Identity-Aware Access is the Missing Layer in Agentic Security.png.C8TvzZ8b.webp)
MCP Server Security Risks: What Development Teams Need to Know in 2026
The AIUC-1 Compliance Checklist: 5 Layers Every Enterprise Needs Before Deploying AI Agents
What Is an Agentic Gateway? Definition, Architecture, and Why It's Different from an API Gateway.png.CAHbD12i.webp)
The AIUC-1 Compliance Stack: The Architecture Auditors Are Actually Looking For.png.CbQUPgiG.webp)
Midmarket Security Teams Deserve Better Than Enterprise Hand-Me-Downs
What Made McKinsey's AI Platform Easy to Hack? And How to Fix it..png.Y_SOL6mu.webp)
Top Ingress NGINX Controller Migration Pain Points
Complete Guide: Zero Trust for Air-Gapped Networks
MCP Security: Why MCP Is an Authorization Crisis
Secure Internal Access to Grafana, Argo, GitLab, and Prometheus Without a VPN
From NGINX to Pomerium: A Practical Migration Guide for Internal Kubernetes Applications
Privilege Access Is the Past. Per Request Authorization Is the Future.
AI Is Your Biggest Security Risk
10 Kubernetes Security Tools DevOps Teams Should Be Using in 2026Announcing Pomerium v0.32.png.C3SYIPl6.webp)
Why Kubernetes Ingress Needs an Identity Layer
Replacing Ingress-NGINX: A Modern Approach to Secure Kubernetes Access
Hosted Clusters in Pomerium Zero & MCP Hacking (endpoints from localhost via ssh)
It’s always DNS part ∞: tracking down a use-after-free bug in Envoy’s DNS Resolver
Introducing Pomerium Ingress Controller for Kubernetes.png.DzRDCi6b.webp)
Migrating from Ingress NGINX to Pomerium Ingress Controller
Announcing Pomerium v0.31
Sometimes Postgres isn’t the Answer.png.CDKHY92n.webp)
Designing Smarter Health Checks for Pomerium
Self-Healing File-Based Databroker Without The Postgres Headaches
Smarter Health Checks for Zero-Downtime Deployments
September 2025 MCP Round‑Up: Growing Adoption Meets Rising Security Fears.png.DWMVlbSj.webp)
Secure SQL AI Analyst: Enabled by Pomerium & ChatGPT Developer Mode
7 Things to Know About Kubernetes Health Checks
Turning SANS Critical AI Security Guidelines Into Enforceable Agentic Controls with Pomerium
August 2025 Agentic Access and MCP Content Round‑Up: Security, Innovations & GrowthHIPAA & Context-Aware Access: How Pomerium Aligns with HIPAAThe OWASP Top 10 for LLMs and How to Defend Against Them
LiteLLM Alternatives: Best Open-Source and Secure LLM Gateways in 2025
LiteLLM vs. Pomerium: What's the Difference and Which One Do You Need?
Why Traditional Access Controls Fail in LLM DeploymentsJuly 2025 Agentic Access and MCP Content Round‑Up: Vulnerabilities, Governance & Growth
Why the Managed Context Protocol (MCP) Spec Still Leaves Gaping Security Holes
Best LLM Gateways in 2025: Top Tools for Managing and Securing AI ModelsHow Shadow AI Impacts SOC 2 and HIPAA, and What to Do About It
Shadow AI Is Already in Your Org. Here’s the 5-Minute Playbook to Secure It
Top 10 Articles in Agentic Access - MCP, Models, and Clients (June 2025)
Announcing Pomerium v0.30
When AI Has Root: Lessons from the Supabase MCP Data LeakJune 2025 MCP Content Round-Up: Incidents, Updates, Releases, and more!Your Employees Are Already Dumping Company Data to LLMs (Here’s What To Do About It)Asana's AI Connector Leak Exposed Sensitive Data Across Organizations: What It Means for MCP Security5 Actionable Zero Trust Patterns from NIST SP 1800-35 (and How to Implement Them)
5 Key Takeaways about ZTA from NIST SP 1800-35
Secure Access for Model Context Protocol (MCP)What We Heard From RedMonk Analysts—And Why Agentic Access Needs a New Security Model
Best Model Context Protocol (MCP) Servers in 2025Agentic Access Management for Model Context Protocol (MCP) Workflows
Zero Trust Without Lock-In: What We Heard at KubeCon EU 2025How To Achieve Zero Trust In Kubernetes With PomeriumMay 2025 Data Breaches: 184M Passwords, 364K SSNs Leaked
Why Per-Request Authorization Is the Foundation of Zero TrustHow Pomerium Makes Access Audit Ready and Turns It Into a Source of TruthHow Pomerium Secures Access for Human, Service, and Agent IdentitiesHow Pomerium Enforces Real-Time, Context-Based AccessNot All Zero Trust Is Created Equal: Why Enterprises Host Their OwnHow Pomerium Brings Zero Trust to Legacy, Hybrid, and Cloud-Native EnvironmentsHow Pomerium Secures SSH Access with Zero Trust5 Reasons Chief Information and Technology Officers Are Rewriting Access Strategies for AI in 2025
Pomerium Has SOC2, and So Could You!
April 2025 Data Breaches: 4 Million SSNs Leaked, 23M+ in Settlements
Pomerium’s OpenTelemetry Tracing Support: Deeper Observability, Made EasyMarch 2025 Data Breaches: 5M+ Impacted, $39.9M+ in Damages
Announcing Pomerium v0.29.0VPNs Are Increasing Your Attack Surface—Here’s Why That’s a ProblemKey Insights and Lessons from the KELA 2024 ReportExecutive Order 14144: Strengthening Cybersecurity — Key Mandates & Zero TrustFebruary 2025 Data Breaches [LIST]
Context-Based Access Control and Zero Trust: Key Insights from the CSA White PaperWhat You Need to Know From the 2024 ITRC Data Breach Report.jpg.DQ8OHx21.webp)
12 Crucial Mobile Device Management (MDM) Features - 2025
40 Unique IAM Interview Questions and Answers | 2025 Edition.png.BPatIN2E.webp)
8 Docker Image Scanning Tools: 2025 and Beyond
20 Top Remote Workforce Solutions for Businesses- 2025
7 Best Ingress Controllers for Kubernetes for 2025
7 Best Kubernetes Security Solutions and Vendors - 2025
10 Best Free Reverse Proxy Providers - Quick Guide | 2025
20 Best Kubernetes Management Tools for 2025January 2025 Data Breaches [LIST]The New Frontier: AI Companies Require New Approaches to Security
The Human Factor in Security: Lessons from the CyberArk Employee Risk SurveyCommon Pitfalls and 5 Must-Dos When Creating a Password
What is a "Pomerium"?December 2024 Data Breaches [LIST]
How Pomerium Supports FedRAMP ComplianceNovember 2024 Data Breaches [LIST]
12 Zero Trust Architecture Examples With Actionable Guide.png.BbM6W8pj.webp)
What is Zscaler and How Does it Work?
Reference Architecture: Using AWS EKS with Pomerium-.jpg.BpjnKpAI.webp)
Identity Aware Proxy (IAP): Meaning, Pricing, Solutions
The Great VPN Myth: What PCI DSS 4.0 Actually Requires for Remote Access
Zscaler vs. Tailscale vs. Pomerium: Detailed Comparison
Announcing Pomerium v0.28
8 Best Open Source Zero Trust Software Solutions
5 Top Tailscale Alternatives: Open Source and PaidOctober 2024 Data Breaches [LIST]
Announcing FleetDM integration for adding device context to access control
Heimdall Reverse Proxy: Features, Alternatives, Pros-Cons.jpg.Dl9y3d4l.webp)
The Best OAuth2 Proxy Alternative: Pomerium
10 Best Open Source Mobile Device Management (MDM) Solutions
Docker Container Scanning Tools: Open Source and Paid
Kubectl Cheat Sheet with Examples- 50 Quick Commands
Cloudflare Access vs. Tailscale vs. Pomerium
Cloudflare Alternatives & Competitors: CDN, Zero Trust & SASE
Cyber Security Awareness Month 2024: What’s New?
Security is Usability — Examining Cybersecurity ErosionKubernetes Compliance: NIST, CIS & PCI- Actionable Guide
Decisionmaker's Guide to Cloud WorkstationsSeptember 2024 Data Breaches [LIST]
Announcing Pomerium v0.27
10 Ugliest VPN Security Risks for Organizations and Users
Zero Trust VPN: Meaning and Alternatives
Twingate Vs. Tailscale Vs. Pomerium: 6 Key Differences
Breach Notification Letter: Samples, Templates, Examples
B2B VPN: Meaning, Examples, Alternatives
Palo Alto Clientless VPN: Pros - Cons, Alternatives
Clientless VPN: Meaning, Solutions, Cost, Alternatives, Drawbacks.jpg.CWC_SBoG.webp)
Context-Aware Authentication: Meaning, Tools, Examples.jpg.9Px7TmfF.webp)
IAP Definition in Cybersecurity | Meaning and Solutions
Kubernetes Reverse Proxy: Meaning and Solutions
2.9 Billion Social Security Number Breach: What to KnowAugust 2024 Newsletter
The Real Lessons from the Snowflake BreachNetwork-centric vs Application-centric Approach
CrowdStrike is a Harsh Reminder of the Danger of Third-Party Clients
Introducing Pomerium ZeroAnnouncing Pomerium v0.26
4 Trends Shaping the Future of Access ControlAnnouncing Pomerium v0.25Announcing Pomerium v0.24Elevating Remote Access: Understanding NextGen VPN FlawsApplying Zero Trust to Multi-Cloud Environments
Logs Are Incomplete Without the “Why”Signed Headers: A Safety Net for Application SecurityAnnouncing Pomerium v0.23
The Three Pillars of Observability
What is Zero Trust Architecture and Security?
Zero Trust Maturity Rubric and Tool Matrix
IAM Trends and Future Outlook
SSO: OAuth2 vs OIDC vs SAMLBest VPN Alternatives
5 Lessons Learned Connecting Every IdP to OIDC
Tailscale & Pomerium: Better TogetherAnnouncing Pomerium v0.22
What Is SASE? — A Buyer’s Guide
Device Management: Essential for Workplace Security and Efficiency
Pomerium Best PracticesThe Perimeter Problem: Why Traditional Network Security Fails
Pomerium and CHT Security Partner for Zero Trust Network Access Solution
A Case Against Layer 4 Security ToolsAnnouncing Pomerium v0.21
VPNs Are Killing ProductivityBenefits of Zero Trust Architecture as Defined by NISTA Close Read at NIST’s Definition of Zero Trust Architecture
Minimizing CORS Misconfigurations
Jsonnet is better than YAML for generating JSON
Your Portal is ShowingAnnouncing Pomerium v0.20Analyzing the US Government’s Adoption of Zero TrustStellenbosch University Secures Internal Assets with Pomerium
Proxy vs Reverse Proxy
Authn vs. Authz — Authentication vs. Authorization
Prevent Insider Attacks With Context-Aware Access
Highlights from IBM’s Cost of a Data Breach 2022Announcing Pomerium v0.18
Remote Work Infrastructure
How Context Drives Full Access Decision-making
How Breaches Affect Companies
Security Posture: When and How to Reevaluate
Q&A with Zero Trust Architecture Writers from NIST
Insulation from Third-Party BreachesAnnouncing Pomerium v0.17
The Far Reach of the White House’s Zero Trust Memo
Log4J and the Fragility of Modern InfrastructureAnnouncing Pomerium v0.16
Social Engineering — An Enduring Vulnerability
The Move to Passwordless Authentication
Elevate Productivity with Frictionless Security
CyberSecurity Awareness Month: Cybersecurity First Aligned With Explore. Experience. Share.
August Newsletter
Demystifying Zero Trust
Pomerium 0.10
Pomerium 0.9
Pomerium 0.8
Pomerium 0.7No articles match your search.
