Sign in

Pomerium

@pomerium.io
107 followers 8 following 165 posts

Pomerium is an open-source identity and context-aware access proxy for building secure connections to internal resources

PostsRepliesMedia
Pomerium @pomerium.io · 11/09/2026
In case you missed it, the full free MCP course from Pomerium is now live! Get hands-on with securing MCP servers and MCP apps, from local development to production. Start here: go.pomerium.com/mcp-course?u... #MCP #MCPApps #AI #ZeroTrust #Pomerium
go.pomerium.com
Securing MCP Servers and MCP Apps with Pomerium (course) | iximiuz Labs
A hands-on course on securing Model Context Protocol (MCP) servers and MCP apps with Pomerium, covering OAuth 2.1, upstream OAuth to APIs like GitHub, and per-user, per-tool authorization from dev to ...
130
Pomerium @pomerium.io · 11/09/2026
The latest interactive tutorial just dropped! See mTLS-based access policies in action: authenticate machine callers, authorize by fingerprint, verify logs, revoke access, & rotate credentials without downtime. CI is the example workload. #mTLS #ZeroTrust #DevSecOps go.pomerium.com/mtls-tutoria...
go.pomerium.com
Secure Machine-to-Machine Access with mTLS and Pomerium | iximiuz Labs
Run a GitHub Actions-compatible continuous integration (CI) job on a private runner and protect its internal API call with mutual TLS (mTLS) and Pomerium. Build separate server and client trust chains...
031
Reposted by Pomerium
Nick Taylor @nickyt.online · 25/08/2026
Super pumped to be speaking at @nerdearla.bsky.social Argentina. First Nerdearla and first time in Argentina. Let’s go! nerdearla.com/en/argentina...
nerdearla.com
Your SSH Keys Are Already Stale | Nerdearla Argentina 2026
Nick Taylor: Someone on your team left six months ago. Their SSH key is probably still on a server somewhere. That is the quiet horror of traditional SSH access. Keys get co
051
Reposted by Pomerium
Nick Taylor @nickyt.online · 20/08/2026
Nice to see @pomerium.io hit 5K stars on GitHub ⭐ An open-core (Apache 2) Identity Aware Proxy/MCP Gateway with cool features like native SSH support and more. 👀 github.com/pomerium/pom...
github.com
GitHub - pomerium/pomerium: Pomerium is an identity and context-aware access proxy.
Pomerium is an identity and context-aware access proxy. - pomerium/pomerium
041
Reposted by Pomerium
Nick Taylor @nickyt.online · 27/06/2026
My latest interactive guide is out. Lemme know what you think! 👀 usepom.link/reverse-ssh
usepom.link
Native SSH Reverse Tunneling with Pomerium | iximiuz Labs
Use Pomerium's native SSH support to publish a local service through a standard reverse SSH tunnel, with OpenID Connect (OIDC) authentication and continuous authorization on every request. Reach servi...
161
Pomerium @pomerium.io · 19/06/2026
Lots of talk about the MCP Authorization spec today. See how Pomerium powers secure AuthN and AuthZ for agents! www.youtube.com/watch?v=Q26p...
youtube.com
Ship Secure MCP Agents with Pomerium (Agent Never Sees Credentials)
YouTube video by Pomerium
142
Pomerium @pomerium.io · 17/06/2026
SSH Recording is nothing new. Most PAM systems offer something that helps you check the compliance boxes. We've actually rethought SSH Recording to work with our clientless access model. Read how we built it 👇 usepom.link/ssh-rec #ssh #pam
usepom.link
How We Designed a Tamper-Evident SSH Recording System for Zero-Trust infrastructure
011
Pomerium @pomerium.io · 16/06/2026
Come hang out with some members of the Pomerium team on Thursday to learn about SSH Session Recording in Pomerium enterprise! #ssh #compliance #devops www.youtube.com/watch?v=sRN9...
youtube.com
SSH Recording in Pomerium Enterprise
YouTube video by Pomerium
021
Pomerium @pomerium.io · 10/06/2026
Our very own @nickyt.online joins @acolombiadev.bsky.social this week on the @github.com YouTube channel to chat about all things open source with Pomerium! Tune in Friday! www.youtube.com/watch?v=MQZG...
youtube.com
Open Source Friday with Pomerium
YouTube video by GitHub
021
Pomerium @pomerium.io · 09/06/2026
Pomerium wins a 2026 Intellyx Digital Innovator Award. Building the access layer for AI infrastructure is hard. This recognition means a lot. usepom.link/2026-intellyx #ZeroTrust #MCP #AI
usepom.link
2026 Intellyx Digital Innovator Award Winners Announced
VORDEN, NETHERLANDS, JUNE 9 2026 — Innovative technology solutions that realize real customer results are hard to come by in today’s confusing [...]
011
Reposted by Pomerium
Nick Taylor @nickyt.online · 08/06/2026
Come hang with Marino Wijay and me tomorrow as we dig into the tech scene in Canada and networking for AI and K8s! 👀 www.youtube.com/watch?v=CXfB... #k8s #networking #ai #techcanada
youtube.com
Diving into Canada, Community, and Networking for AI and K8s
YouTube video by Pomerium
012
Pomerium @pomerium.io · 05/05/2026
Thanks @allthingsopen.bsky.social for the write up on our very own @nickyt.online's talk! How to tame kubeconfig access and SSH key sprawl via an identity-aware proxy. usepom.link/ato2025 #k8s #zerotrust #ssh
usepom.link
Zero trust Kubernetes: Context over credentials | We Love Open Source • All Things Open
Discover how zero trust Kubernetes security replaces SSH keys and kubeconfig credentials with identity-aware proxies for kubectl, K9s, and node access through context-based verification.
131
Pomerium @pomerium.io · 23/04/2026
New hands-on tutorial: Native SSH Access with Pomerium. Context-aware authorization in front of any SSH server. No tunnels, no custom client, no per-user keys. Remove a user from policy and their active session ends, not just future ones. usepom.link/ssh-tutorial #ZeroTrust #SSH #DevOps
usepom.link
Native SSH Access with Pomerium | iximiuz Labs
Pomerium can be used as a native SSH reverse proxy, adding OAuth authentication and flexible Pomerium policy enforcement to standard SSH connections, without the need for tunnels, or custom clients or...
010
Pomerium @pomerium.io · 17/04/2026
Join Jon Lebensold and @nickyt.online next week for a hands-on conversation about agent evaluations and how to systematically improve agent performance. Jon will dig into what a practical runbook for hill-climbing looks like. www.youtube.com/watch?v=QlwY...
youtube.com
Agents need a runbook for hill-climbing
YouTube video by Pomerium
010
Pomerium @pomerium.io · 14/04/2026
Just scheduled! @clarkio.com joins @nickyt.online April 28th at 1pm Eastern to discuss building securely with AI. 👀 www.youtube.com/watch?v=nt8K...
youtube.com
Building Securely with AI
YouTube video by Pomerium
020
Pomerium @pomerium.io · 14/04/2026
Pomerium v0.32.5 and related patch releases are now available. * Core (v0.32.5), usepom.link/pom-v0.32.5 * Ingress Controller (v0.32.6), usepom.link/ingress0.32.6 * CLI (v0.32.2), usepom.link/cli-v0.32.2 * Desktop Client (v0.32.2), usepom.link/desk-v0.32.2
usepom.link
Comparing v0.32.4...v0.32.5 · pomerium/pomerium
Pomerium is an identity and context-aware access proxy. - Comparing v0.32.4...v0.32.5 · pomerium/pomerium
011
Reposted by Pomerium
Nick Taylor @nickyt.online · 25/03/2026
Day 2 of KubeCon! Come say hello to the Pomerium crew in hall 1, booth #986. Come for some socks, stay for the ingress! #KubeCon
The Pomerium crew getting ready for day 2 of KubeCon
081
Pomerium @pomerium.io · 24/03/2026
The doors are open! Come say hey at booth 986! #KubeCon
Nick working the booth at KubeCon
010
Pomerium @pomerium.io · 22/03/2026
See you at KubeCon in Amsterdam. Stop by booth 986 for some Amsterdam swag. #KubeCon
Pomerium's favourite Pomeranian in Amsterdam!
020
Pomerium @pomerium.io · 18/03/2026
Come find us at booth 986 at KubeCon next week. We'll be talking native SSH, securing MCP servers for AI agents and more. See you in Amsterdam! #kubecon #zerotrust #mcp #ssh
KubeCon

See you in Amsterdam

March 23 - 26, 2026 | Booth 986 KubeCon Europe
021
Pomerium @pomerium.io · 04/03/2026
MCP Apps Are Here. Is Yours Secure on Day One? usepom.link/mcp-apps #mcp #mcpapps #ai #agenticai
usepom.link
MCP Apps Are Here. Is Yours Secure on Day One?
The Security Timing Problem
000
Pomerium @pomerium.io · 01/03/2026
Ingress NGINX was officially retired on March 1st, 2026. If you’re figuring out what comes next, we put together a practical migration guide for Kubernetes teams. Questions? Drop them in the comments or DM us. usepom.link/nginx #k8s #nginx #ingress
usepom.link
From NGINX to Pomerium: A Practical Migration Guide for Internal Kubernetes Applications
011
Pomerium @pomerium.io · 16/02/2026
The most successful app in the App Store's first year? A beer-drinking simulator! It made €20k/day by letting you 'drink' from your phone using gyroscope tech. Wild. What's it gonna be for MCP Apps? #MCP #EmergingTech #MCPApps #ChatGPTApps www.youtube.com/shorts/p6rAH...
youtube.com
Surprising App Success: Beer Simulator & MCP Apps' Future #shorts
YouTube video by Pomerium
131
Pomerium @pomerium.io · 12/02/2026
MCP Apps are here—ChatGPT apps, support in Claude, @vscode.dev & @opensource.block.xyz. Nobody wants to do auth when it's not their core business. Gateways handle auth plumbing (tokens, validation, caching) so you can focus on building. www.youtube.com/shorts/poGh8... #MCPApps #MCP #OAuth #DX
youtube.com
Unlock Server Security: Master Gateways for Effortless Auth #shorts
YouTube video by Pomerium
110
Pomerium @pomerium.io · 11/02/2026
MCP Apps are starting to gain traction. From ChatGPT apps, MCP app support in Claude, @vscode.dev & @opensource.block.xyz. Security is hard, especially those who aren't security experts that want to build MCP servers & MCP Apps. Use off the shelf tools. #MCP #MCPApps www.youtube.com/shorts/8lQJ7...
youtube.com
Secure MCP Servers: Use Existing Tools, Not From Scratch! #shorts
YouTube video by Pomerium
111
Pomerium @pomerium.io · 09/02/2026
Pomerium v0.32.0 is here! Less friction, more control for secure access: * SSH with standard OAuth auth code flow (no more device code required) * Hosted IdP improvements * Auto MCP token refresh * Advanced DNS tuning bit.ly/pomerium-32 #ZeroTrust #OAuth #SSH #MCP
bit.ly
Announcing Pomerium v0.32
010
Pomerium @pomerium.io · 28/01/2026
Happening tomorrow! Join @nickyt.online and Frédéric Barthelet as they discuss the Skybridge framework for building MCP applications. #MCP #MCPApps #AgenticAI #AI #typescript www.youtube.com/watch?v=GCjt...
youtube.com
ChatGPT apps & MCP apps with Skybridge
YouTube video by Pomerium
110
Pomerium @pomerium.io · 11/12/2025
Join Nick and Jim in 30 minutes as they dig into real-time guardrails for AI agents!
011
Pomerium @pomerium.io · 09/12/2025
Ingress NGINX retires March 2026. Pomerium Ingress Controller offers the same reverse proxy functionality + identity-aware access controls. Start simple, scale to zero trust. Dynamic fine-grained policies are 🔥 www.pomerium.com/blog/migrati... #Kubernetes #ZeroTrust
pomerium.com
Migrating from Ingress NGINX to Pomerium Ingress Controller
031
Pomerium @pomerium.io · 08/12/2025
Just scheduled! Join @nickyt.online and @infoxicator.bsky.social next week as they dive into the work of games in ChatGPT! #mcp #chatgpt #GameStop www.youtube.com/watch?v=0u8Z...
youtube.com
ChatGPT Original Games
YouTube video by Pomerium
020
Pomerium @pomerium.io · 05/12/2025
👀 #kubernetes #nginx #zerotrust #ingresscontroller
030
Pomerium @pomerium.io · 01/12/2025
Join @jimbobbennett.dev from Galileo and @nickyt.online as they dig into real-time guardrails for AI agents December 11th. 👀 www.youtube.com/watch?v=4cqR... #AI #AIGuardrails #AgenticAI
youtube.com
Real-Time Guardrails for AI Agents
Jim Bennett, principal developer advocate at Galileo, joins Nick Taylor to discuss real-time guardrails for AI to provide more boundary layers.
012
Pomerium @pomerium.io · 20/11/2025
Pomerium v0.31 is out! - Self-healing file-based databroker - Enhanced health checks - MCP support in Pomerium Zero www.pomerium.com/blog/announc... #mcp #aigateway #healthchecks #k8s #devops
pomerium.com
Announcing Pomerium v0.31
010
Pomerium @pomerium.io · 07/11/2025
Sometimes Postgres isn't the Answer. Pomerium v0.31 introduces a new file-based storage option for it's databroker using Pebble, a key-value store, with Raft clustering as an alternative to Postgres. Why? At scale, Postgres can be harder to operate. www.pomerium.com/blog/sometim...
pomerium.com
Sometimes Postgres isn’t the Answer
Pomerium v0.31 introduces a new Raft-based databroker option that is simpler, faster, and self-healing than the previous Postgres-based version.
000
Reposted by Pomerium
Nick Taylor @nickyt.online · 06/11/2025
Great video from Filip Lebiecki on @pomerium.io's native SSH capabilities! youtu.be/GuAvZZR0YSE "...  it feels well effortless. And the seemingly simple new approach,the one that makes secure SSH feel so smooth ..." Go smash that subscribe button on Filip's YouTube! #ZeroTrust #IAP #SSH #Security
youtu.be
OAuth2 Proxy: Secure Your Web App with Google Login (Easy!)
YouTube video by LinuxCloudHacks
011
Pomerium @pomerium.io · 31/10/2025
Hard blanket recs are hard: Cost of consistency? Maybe a couple of users log out. Self-healing, eventually consistent is the goal. #Data #DataBroker #Raft
000
Pomerium @pomerium.io · 30/10/2025
Health and readiness checks are often overlooked but crucial for zero-downtime scaling. Making your K8s cluster or on-prem environment operate reliably is surprisingly difficult. Read how we optimized readiness checks in Pomerium: www.pomerium.com/blog/designi... #DevOps #Kubernetes #HealthChecks
pomerium.com
Smarter Health Checks for Zero-Downtime Deployments
Why traditional health checks fail and how Pomerium built smarter, stack-aware probes for Kubernetes, Docker, and systemd.
120
Pomerium @pomerium.io · 30/10/2025
Raft is production-ready. Etcd (Kubernetes' storage) and HashiCorp use it. Nomad, Vault, CockroachDB and other modern SQL DBs rely on Raft for consistency across instances. Consistency comes at a cost. #Databases #Raft #DistributedSystems #Etcd #Kubernetes
000
Pomerium @pomerium.io · 29/10/2025
The database selection meme is generally true - PostgreSQL to fancy solutions back to PostgreSQL. We'll keep supporting Postgres, but we're also exploring new approaches for data storage that go beyond the traditional cycle. #DatabaseArchitecture #DataStorage #systemDesign
000
Pomerium @pomerium.io · 29/10/2025
Pomerium's data broker storage evolution: Started with cookies, moved to Redis, then PostgreSQL. Now adding file-based storage with clustering and leader election for self-healing, eventually consistent systems. Sometimes the simple solution wins. #DistributedSystems #DataArchitecture #ZeroTrust
000
Pomerium @pomerium.io · 28/10/2025
New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required. www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz
pomerium.com
Self-Healing File-Based Databroker Without The Postgres Headaches
Stay up to date with Pomerium news and announcements.
000
Pomerium @pomerium.io · 28/10/2025
New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required. www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz
pomerium.com
Self-Healing File-Based Databroker Without The Postgres Headaches
020
Pomerium @pomerium.io · 27/10/2025
Pomerium's IAP architecture: We separate concerns into authentication,proxy & authorization services. Each handles a specific role: login,request forwarding & access control. Our data broker evolved from early cookie-based session storage to coordinate between components. #DataBroker #ZeroTrust #IAP
100
Pomerium @pomerium.io · 24/10/2025
Flipping the switch doesn’t mean a Kubernetes pod is ready. With Pomerium, it also needs group memberships and policy data before it can serve traffic. Readiness probes make sure pods are truly ready, not just turned on. #Kubernetes #Pomerium #DevOps #CloudNative
010
Pomerium @pomerium.io · 23/10/2025
Kubernetes: “All systems go.” Users: “Nothing works.” #Kubernetes #CloudNative #DevOps cloudnativenow.com/contributed-...
cloudnativenow.com
When “Healthy” Isn’t Healthy: Rethinking Kubernetes Health Checks for Real-World Systems
Learn how to design smarter, context-aware probes that reflect true Kubernetes application health and prevent downtime.
031
Pomerium @pomerium.io · 23/10/2025
Kubernetes uses health probes to keep apps alive. Startup gets things booted, readiness controls traffic, and liveness restarts stuck pods. Self-healing in action. #Kubernetes #DevOps #CloudNative #Containers
010
Pomerium @pomerium.io · 22/10/2025
Startup probes let your app boot. Readiness probes control traffic. Liveness probes restart it when stuck. Together they keep apps stable. #Kubernetes #DevOps #HealthChecks
120
Pomerium @pomerium.io · 21/10/2025
New in Pomerium 0.31, smarter health checks for zero-downtime deployments #kubernetes #HealthChecks #DevOps www.pomerium.com/blog/smarter...
pomerium.com
Smarter Health Checks for Zero-Downtime Deployments
130
Pomerium @pomerium.io · 21/10/2025
Next month, the Pomerium team is headed to Atlanta for KubeCon North America! Stop by Booth 951, and pick up some cool swag, demos, and discussions about security and Kubernetes while you're there.
010
Pomerium @pomerium.io · 21/10/2025
Kubernetes health checks prevent bad pods from breaking production by pulling them out of service until they are healthy. #Kubernetes #DevOps #CloudNative #HealthChecks
220