It's already been about a month since the Pomerium team was at Black Hat USA! Missed us in Vegas? No worries. You can still watch Developer Advocate @nickyt.online's talk at Black Hat: "Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe" www.youtube.com/watch?v=V33G...

And we're live! Come hang as we dig into almma.ai!

AI Profits for All Lucas Wall joins @nickyt.online to discuss the status of open source generative AI, marketplaces, and AlmmaGPT as a multi-LLM platform. Join us on September 18th at 12:15PM ET: www.youtube.com/watch?v=Ok-d...

CEO Bobby DeSimone, Senior SWE Caleb Doxsey, and Developer Advocate @nickyt.online are going live to discuss Pomerium’s move away from Postgres in the databroker. Catch the stream tomorrow at 12:30PM ET: www.youtube.com/watch?v=jKah...

The new SANS Critical AI Security Guidelines provide a clear framework for reducing AI risks. Key takeaway? Securing AI is not only about building smarter models, but about ensuring every interaction is authorized, auditable, and governed responsibly. Read more: bit.ly/4m6GAq7

Pomerium was highlighted as a solution for today’s evolving threat landscape by Vation Ventures as a network security innovator shaping how enterprises reduce risk in today’s hyper-connected environment. Read the article here: www.vationventures.com/research-art...

OWASP's Top 10 for LLMs indicates that prompt injection, insecure output handling, and sensitive data leaks are now among the most critical risks for GenAI applications. Zero Trust access controls can help defend against these threats. Read the full breakdown: bit.ly/45KIW9q

Join @nickyt.online at the MCP Developers Summit on Thursday, October 2 in London! Nick will be walking through how to use Pomerium to take an MCP server from prototype to production-ready with OAuth 2.1 and identity-aware security.

The Pomerium team will be going live tomorrow together for the very first time at 12:30PM ET! Join CEO Bobby DeSimone, Senior Software Engineer Alexandre Lamarre, and Developer Advocate @nickyt.online's candid conversation on Kubernetes health checks. www.youtube.com/watch?v=cMBU...

Catch the live now!

Twilio Voice Al & LangChain @rishab.cloud, Staff Developer Evangelist at Twilio, joins @nickyt.online to discuss Twilio Voice Al & LangChain. Join us tomorrow, August 27th at 12:15PM ET: www.youtube.com/watch?v=8xy0...

Static API keys and IAM roles don’t cut it for LLMs. Prompt-driven apps need continuous, identity-aware policy at every request. Explore why traditional access controls fail in LLM deployments and how identity-aware policy at the edge keeps access safe: www.pomerium.com/blog/why-tra...

Code and Chill: Messing around with LibreChat and @pomerium.io Pick your poison: - www.twitch.tv/nickytonline - www.youtube.com/watch?v=czyH...

@nickyt.online recently spoke to @quincy.bsky.social about dev life, open source, AI’s impact on tech, and more for the freeCodeCamp podcast! Learn how developers can stay productive and adaptable in today’s fast-changing tech landscape. Catch the podcast here: www.youtube.com/watch?v=m7nk...

Last chance to join this webinar on autonomous AI agents! Sign up for the webinar and the recording using the link below. ntl.fyi/4mMLR7l

Bobby will be speaking on securing autonomous AI agents along with other industry experts at @netlify.com's virtual event! Make sure to sign up to join the live TOMORROW at 12PM ET. ntl.fyi/4mMLR7l

Congratulations to @nickyt.online for giving a successful talk on Agentic Access at Black Hat USA! Missed the talk? You can come talk to Nick at Booth #6216, right next to Startup City Theater. #BlackHat #BlackHatUSA #cybersecurity #agenticai #mcp

Attending Black Hat USA? Pick up free swag, enter our raffle, watch a demo, and talk to the Pomerium team at Booth #6216. We're located right next to Startup City Theater. #cybersecurity #blackhatusa

On August 12, our CEO Bobby DeSimone will join other security experts to speak about AI agents at Netlify's virtual event. Working in security, AI/AX, or trying to stay ahead of the curve? This session is for you. Join the live or sign up to receive the recording afterwards: ntl.fyi/4mMLR7l

No AuthZ. No identity checks. No context-aware policy. The MCP spec is missing core security features, meaning teams deploying MCP-compatible tools are exposing internal APIs without realizing it. It's time to lock down agent access before it becomes a breach vector. Read more: bit.ly/4of50QJ

"74% of organizations have already experienced data leakage through unsanctioned AI use, yet most lack visibility into when or how it happens." Shadow AI breaks the control systems that SOC 2 and HIPAA rely on. Identity-aware, per-route policy enforcement can help. Read more: bit.ly/4lpG8mR

Shadow AI Is Already in Your Organization. Employees are pasting sensitive code, customer data, and roadmaps into public LLMs—without approval, visibility, or guardrails. Blocking ChatGPT at the firewall? That won’t cut it. ShadowAI and Why Prompt Filters and Regex Fall Short: bit.ly/4l6dfLX

We’re heading to Vegas for Black Hat! 📍 Stop by Booth #6216 for live demos, free swag, and more. 🎤 Make sure to catch @nickyt.online's talk, “Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe” 🗓️ August 6 at 10:45 AM | Startup City Theater Come say hi! We're so excited to meet you🥳

LIVE NOW! Come hang out with @nickyt.online and @den.dev. youtube.com/live/U9rSRnj...

With v0.30, Pomerium now supports native SSH access. No agents, no tunnels, no special clients required! Your SSH connections are: 🔐 Zero Trust-aligned 🔑 OAuth-backed and centrally authorized 🔍 Ephemeral & auditable 📈 Easy to manage at scale Full Changelog for Native SSH Access: bit.ly/4lIInCA

You're friendly reminder that @pomerium.io makes for a great reverse proxy for third party services like @posthog.com so your analytics or tools aren't blocked. 👀 posthog.com/docs/advance...

Why expose OAuth tokens to every MCP client? @pomerium.io keeps the 'keys to the kingdom' safely locked away while still enabling seamless Google integrations #zerotrust #mcp #security #agenticai

@nickyt.online will be speaking about how AI agents need Zero Trust policies that go beyond OAuth's 'what can you do' to answer 'should you be doing this right now' with context-aware, fine-grained controls. Apply to attend GMI Cloud's AI After Hours—spots are limited: lu.ma/dr1t68rs

And we're live! Come hang as we chat about the 0.30 release with some demos!

...And we're live! 🥳 Join @nickyt.online's livestream as he explores Pomerium v0.30! www.youtube.com/live/Iz4fBb-...

Explore and deep dive into the features of Pomerium v0.30 with @nickyt.online, Developer Advocate at Pomerium. Join us TOMORROW, July 16 at 1PM ET!

MCP Security & Authorization @den.dev‬, Model Context Protocol (MCP) Steering Committee Member - Security, joins @nickyt.online to discuss MCP security and authorization. Join us on Wednesday, July 23 at 1PM ET: www.youtube.com/live/U9rSRnj...

Model Context Protocol (MCP) lets AI agents connect to your tools, but without access control, one prompt can do too much. With @pomerium.io, we set fine-grained policies on servers, all the way down to the tool level. No cooking the books today with zero trust. #mcp #zerotrust #ai

Just in: Pomerium v0.30! Pomerium now covers LLM agents, secure SSH, enterprise-grade policy enforcement, and more! v0.30 features: 🛡️ 𝗡𝗮𝘁𝗶𝘃𝗲 𝗦𝗦𝗛 𝗔𝗰𝗰𝗲𝘀𝘀 🤖 𝗔𝗴𝗲𝗻𝘁𝗶𝗰 𝗔𝗰𝗰𝗲𝘀𝘀 𝗚𝗮𝘁𝗲𝘄𝗮𝘆 🌐 𝗖𝗿𝗼𝘀𝘀-𝗢𝗿𝗶𝗴𝗶𝗻 𝗔𝘂𝘁𝗵 𝗙𝗶𝘅𝗲𝘀 📈 𝗦𝗰𝗮𝗹𝗮𝗯𝗶𝗹𝗶𝘁𝘆 + 𝗢𝗯𝘀𝗲𝗿𝘃𝗮𝗯𝗶𝗹𝗶𝘁𝘆 🌍 𝗠𝘂𝗹𝘁𝗶-𝗖𝗹𝘂𝘀𝘁𝗲𝗿 𝗖𝗼𝗻𝘁𝗿𝗼𝗹 𝗣𝗹𝗮𝗻𝗲 Full release: bit.ly/3IkRPx8

A Claude-based IDE with root-level database access was tricked into exfiltrating secrets—just by reading a support ticket. No vulnerability. Just a convincing prompt. Read what went wrong, why Row-Level Security (RLS) failed, and what defenses can actually work. bit.ly/406KwPE

Your team is already sharing sensitive internal data with AI. These AI agents must be bounded by proper guardrails. Our latest post breaks down: • “Shadow AI,” your biggest security blindspot • How to build a secure, low-friction LLM gateway • Real-world case studies Read more: bit.ly/3Ir3N8h

Discuss Event-Driven Architecture for AI Agents! Abhimanyu Selvan, Head of Developer Advocacy (EMEA/APAC) at DigitalOcean, joins @nickyt.online to discuss event-driven architecture for AI Agents. Join us on Wednesday, July 16 at 9AM ET: www.youtube.com/watch?v=-ai4...

It’s been a busy month in the world of Model Context Protocol (MCP), so we’ve compiled June 2025's MCP incidents, industry news, blogs, and other reports for you. There's a lot to keep up within the space, but it's clear that MCP is here and needs to be secured. Find it here: bit.ly/4exZvIz

Zero Trust is all about reducing attack surface, enforcing least privilege, and continuously reevaluating risk. NIST SP 1800-35 is a a how-to Zero Trust manual based on real technologies, interoperable open standards, and 19 separate implementation builds. Read key takeaways: bit.ly/3TfcpBl

Asana’s MCP bug exposing cross-tenant data serves as a warning that you need guardrails with AI agents. Things can go wrong when: → OAuth is treated as authorization → Agent access isn’t scoped or audited → No enforcement layer stands between the agent and the system Read more:

Traditional security models weren't built for autonomous agents. Our latest MCP guide breaks down: → Why MCP changes the security model → How Zero Trust protects agent actions in real time → What you need to do before connecting LLMs to internal tools Read the security blueprint: bit.ly/4687OID

OAuth ≠ secure by default. Proxy-enforced OAuth is mandatory, not optional Read the break down on what the MCP Security Best Practices actually require and where current implementations are falling short on @nickyt.online's latest @thenewstack.io piece: thenewstack.io/the-model-co...

Tomorrow, we have an incredible guest speaker lineup for our livestreams hosted by @nickyt.online ! Tune in and listen to what @tej.as and @javasquip.bsky.social have to say about building and shipping LLMs and MCPs.

"How do we build these microservice architectures and serverless apps?" @remotesynthesis.com joined @nickyt.online to discuss LocalStack, an open-core tool that lets developers run a complete AWS cloud environment on their laptop for faster, cost-effective development and testing.

We recently synced with @monkchips.com and @kateholterhoff.bsky.social at @redmonk.com on how MCP is here—and how we've been securing it. Real-time, context-aware authorization is the key to securing MCP and agentic access. Read more about our conversation: www.pomerium.com/blog/what-we...

@nickyt.online spoke at the @mcpdevsummit.bsky.social to talk and demo one of the most urgent challenges in AI system design: securing agentic access to APIs and data. Autonomous tools should only access what they should, when they should. Watch the full session: www.youtube.com/watch?v=KY1k...

Missed our webinar on securing MCP? No worries. You can find our full webinar recording and list of resources below. Learn how to securely build and expose MCP servers without leaking tokens and offload OAuth and identity complexities to Pomerium! www.youtube.com/watch?v=p0UJ...

LLMs don’t just answer questions anymore. They take action. Thanks to Model Context Protocol (MCP), AI agents can now read docs, call APIs, trigger workflows. Traditional IAM was built for humans. Agentic Access Management is built for AI. Secure your Agents: www.pomerium.com/blog/agentic...

Our #webinar on learning how to protect your #MCP servers is in 30 minutes! It's not too late to attend. Sign up now to instantly get the link! See you there. bit.ly/PomeriumMCP

Our webinar for securing MCP Servers is TOMORROW at 10AM PT! Sign Up Today! bit.ly/PomeriumMCP