Sometimes Postgres isn't the Answer. Pomerium v0.31 introduces a new file-based storage option for it's databroker using Pebble, a key-value store, with Raft clustering as an alternative to Postgres. Why? At scale, Postgres can be harder to operate. www.pomerium.com/blog/sometim...

Great video from Filip Lebiecki on @pomerium.io's native SSH capabilities! youtu.be/GuAvZZR0YSE "...  it feels well effortless. And the seemingly simple new approach,the one that makes secure SSH feel so smooth ..." Go smash that subscribe button on Filip's YouTube! #ZeroTrust #IAP #SSH #Security

Hard blanket recs are hard: Cost of consistency? Maybe a couple of users log out. Self-healing, eventually consistent is the goal. #Data #DataBroker #Raft

Health and readiness checks are often overlooked but crucial for zero-downtime scaling. Making your K8s cluster or on-prem environment operate reliably is surprisingly difficult. Read how we optimized readiness checks in Pomerium: www.pomerium.com/blog/designi... #DevOps #Kubernetes #HealthChecks

Raft is production-ready. Etcd (Kubernetes' storage) and HashiCorp use it. Nomad, Vault, CockroachDB and other modern SQL DBs rely on Raft for consistency across instances. Consistency comes at a cost. #Databases #Raft #DistributedSystems #Etcd #Kubernetes

The database selection meme is generally true - PostgreSQL to fancy solutions back to PostgreSQL. We'll keep supporting Postgres, but we're also exploring new approaches for data storage that go beyond the traditional cycle. #DatabaseArchitecture #DataStorage #systemDesign

Pomerium's data broker storage evolution: Started with cookies, moved to Redis, then PostgreSQL. Now adding file-based storage with clustering and leader election for self-healing, eventually consistent systems. Sometimes the simple solution wins. #DistributedSystems #DataArchitecture #ZeroTrust

New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required. www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz

New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required. www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz

Pomerium's IAP architecture: We separate concerns into authentication,proxy & authorization services. Each handles a specific role: login,request forwarding & access control. Our data broker evolved from early cookie-based session storage to coordinate between components. #DataBroker #ZeroTrust #IAP

Flipping the switch doesn’t mean a Kubernetes pod is ready. With Pomerium, it also needs group memberships and policy data before it can serve traffic. Readiness probes make sure pods are truly ready, not just turned on. #Kubernetes #Pomerium #DevOps #CloudNative

Kubernetes: “All systems go.” Users: “Nothing works.” #Kubernetes #CloudNative #DevOps cloudnativenow.com/contributed-...

Kubernetes uses health probes to keep apps alive. Startup gets things booted, readiness controls traffic, and liveness restarts stuck pods. Self-healing in action. #Kubernetes #DevOps #CloudNative #Containers

Startup probes let your app boot. Readiness probes control traffic. Liveness probes restart it when stuck. Together they keep apps stable. #Kubernetes #DevOps #HealthChecks

New in Pomerium 0.31, smarter health checks for zero-downtime deployments #kubernetes #HealthChecks #DevOps www.pomerium.com/blog/smarter...

Next month, the Pomerium team is headed to Atlanta for KubeCon North America! Stop by Booth 951, and pick up some cool swag, demos, and discussions about security and Kubernetes while you're there.

Kubernetes health checks prevent bad pods from breaking production by pulling them out of service until they are healthy. #Kubernetes #DevOps #CloudNative #HealthChecks

Thank You @allthingsopen.bsky.social for an incredible two days of meeting the community! Up next: KubeCon NA in Atlanta. In the meantime, keep an eye out for @nickyt.online's talks and guest appearances on various podcasts!

@erinmikail.bsky.social, Senior DX Engineer, joins @nickyt.online to discuss Agent frameworks and making them reliable. Join us on Wednesday, October 22 at 12:15PM ET: youtube.com/live/t_QHKdS...

All Things Open, you've been amazing to us! We're so excited for Day 2. Find us at Booth 85 for some fun conversations, stickers, and more. Catch @nickyt.online's talk today at 1:45 PM: Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads. 🏛️ Security – Room 303

We had a great time at the [email protected] speed networking event that we co-hosted with @torc.dev @digitalocean.com @coderabbitai.bsky.social yesterday! If you're at All Things Open, make sure to stop by our 85 booth (in front of Ballroom A) today for some epic swag!

MCP uses OAuth scopes for authorization, but they’re often coarse. You can add finer scopes or step-up auth, but there’s still no built-in way to dynamically enforce policy at the tool-operation level. That’s where @pomerium.io comes in. 👀 #mcp #agenticai

Don’t miss @nickyt.online talks at ATO! Agentic Access: OAuth Gets You In. Zero Trust Keeps You Safe 📅 Monday, Oct 13 @ 11:30 AM 🏛️Case Study/Demo 1 – Room 306 A Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads. 📅 Tuesday, Oct 14 @ 1:45 PM 🏛️ Security – Room 303

Headed to All Things Open? Want to meet other attendees before the official conference? Pomerium is co-hosting a networking event on Sunday, October 12 that you do not want to miss. Spots are limited! Sign up today. guild.host/events/torc-...

The Pomerium team is heading to Raleigh for @allthingsopen.bsky.social! Swing by Booth 84 to chat about #opensource and #security with us—and catch some demos and new swag while you’re here. PS: @nickyt.online will be doing some cool talks on #kubernetes and #oauth that you do not want to miss!

OpenAI’s new ChatGPT Developer Mode adds native support for Model Context Protocol (MCP) servers, meaning developers can now plug in custom MCP servers directly into ChatGPT! Make bridging local MCP servers with a cloud hosted LLM secure, simple, and scalable. bit.ly/3W94uXw

It's already been about a month since the Pomerium team was at Black Hat USA! Missed us in Vegas? No worries. You can still watch Developer Advocate @nickyt.online's talk at Black Hat: "Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe" www.youtube.com/watch?v=V33G...

And we're live! Come hang as we dig into almma.ai!

AI Profits for All Lucas Wall joins @nickyt.online to discuss the status of open source generative AI, marketplaces, and AlmmaGPT as a multi-LLM platform. Join us on September 18th at 12:15PM ET: www.youtube.com/watch?v=Ok-d...

CEO Bobby DeSimone, Senior SWE Caleb Doxsey, and Developer Advocate @nickyt.online are going live to discuss Pomerium’s move away from Postgres in the databroker. Catch the stream tomorrow at 12:30PM ET: www.youtube.com/watch?v=jKah...

The new SANS Critical AI Security Guidelines provide a clear framework for reducing AI risks. Key takeaway? Securing AI is not only about building smarter models, but about ensuring every interaction is authorized, auditable, and governed responsibly. Read more: bit.ly/4m6GAq7

Pomerium was highlighted as a solution for today’s evolving threat landscape by Vation Ventures as a network security innovator shaping how enterprises reduce risk in today’s hyper-connected environment. Read the article here: www.vationventures.com/research-art...

OWASP's Top 10 for LLMs indicates that prompt injection, insecure output handling, and sensitive data leaks are now among the most critical risks for GenAI applications. Zero Trust access controls can help defend against these threats. Read the full breakdown: bit.ly/45KIW9q

Join @nickyt.online at the MCP Developers Summit on Thursday, October 2 in London! Nick will be walking through how to use Pomerium to take an MCP server from prototype to production-ready with OAuth 2.1 and identity-aware security.

The Pomerium team will be going live tomorrow together for the very first time at 12:30PM ET! Join CEO Bobby DeSimone, Senior Software Engineer Alexandre Lamarre, and Developer Advocate @nickyt.online's candid conversation on Kubernetes health checks. www.youtube.com/watch?v=cMBU...

Catch the live now!

Twilio Voice Al & LangChain @rishab.cloud, Staff Developer Evangelist at Twilio, joins @nickyt.online to discuss Twilio Voice Al & LangChain. Join us tomorrow, August 27th at 12:15PM ET: www.youtube.com/watch?v=8xy0...

Static API keys and IAM roles don’t cut it for LLMs. Prompt-driven apps need continuous, identity-aware policy at every request. Explore why traditional access controls fail in LLM deployments and how identity-aware policy at the edge keeps access safe: www.pomerium.com/blog/why-tra...

Code and Chill: Messing around with LibreChat and @pomerium.io Pick your poison: - www.twitch.tv/nickytonline - www.youtube.com/watch?v=czyH...

@nickyt.online recently spoke to @quincy.bsky.social about dev life, open source, AI’s impact on tech, and more for the freeCodeCamp podcast! Learn how developers can stay productive and adaptable in today’s fast-changing tech landscape. Catch the podcast here: www.youtube.com/watch?v=m7nk...

Last chance to join this webinar on autonomous AI agents! Sign up for the webinar and the recording using the link below. ntl.fyi/4mMLR7l

Bobby will be speaking on securing autonomous AI agents along with other industry experts at @netlify.com's virtual event! Make sure to sign up to join the live TOMORROW at 12PM ET. ntl.fyi/4mMLR7l

Congratulations to @nickyt.online for giving a successful talk on Agentic Access at Black Hat USA! Missed the talk? You can come talk to Nick at Booth #6216, right next to Startup City Theater. #BlackHat #BlackHatUSA #cybersecurity #agenticai #mcp

Attending Black Hat USA? Pick up free swag, enter our raffle, watch a demo, and talk to the Pomerium team at Booth #6216. We're located right next to Startup City Theater. #cybersecurity #blackhatusa

On August 12, our CEO Bobby DeSimone will join other security experts to speak about AI agents at Netlify's virtual event. Working in security, AI/AX, or trying to stay ahead of the curve? This session is for you. Join the live or sign up to receive the recording afterwards: ntl.fyi/4mMLR7l

No AuthZ. No identity checks. No context-aware policy. The MCP spec is missing core security features, meaning teams deploying MCP-compatible tools are exposing internal APIs without realizing it. It's time to lock down agent access before it becomes a breach vector. Read more: bit.ly/4of50QJ

"74% of organizations have already experienced data leakage through unsanctioned AI use, yet most lack visibility into when or how it happens." Shadow AI breaks the control systems that SOC 2 and HIPAA rely on. Identity-aware, per-route policy enforcement can help. Read more: bit.ly/4lpG8mR

Shadow AI Is Already in Your Organization. Employees are pasting sensitive code, customer data, and roadmaps into public LLMs—without approval, visibility, or guardrails. Blocking ChatGPT at the firewall? That won’t cut it. ShadowAI and Why Prompt Filters and Regex Fall Short: bit.ly/4l6dfLX

We’re heading to Vegas for Black Hat! 📍 Stop by Booth #6216 for live demos, free swag, and more. 🎤 Make sure to catch @nickyt.online's talk, “Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe” 🗓️ August 6 at 10:45 AM | Startup City Theater Come say hi! We're so excited to meet you🥳

LIVE NOW! Come hang out with @nickyt.online and @den.dev. youtube.com/live/U9rSRnj...