Thanks @allthingsopen.bsky.social for the write up on our very own @nickyt.online's talk! How to tame kubeconfig access and SSH key sprawl via an identity-aware proxy. usepom.link/ato2025 #k8s #zerotrust #ssh

New hands-on tutorial: Native SSH Access with Pomerium. Context-aware authorization in front of any SSH server. No tunnels, no custom client, no per-user keys. Remove a user from policy and their active session ends, not just future ones. usepom.link/ssh-tutorial #ZeroTrust #SSH #DevOps

Join Jon Lebensold and @nickyt.online next week for a hands-on conversation about agent evaluations and how to systematically improve agent performance. Jon will dig into what a practical runbook for hill-climbing looks like. www.youtube.com/watch?v=QlwY...

Just scheduled! @clarkio.com joins @nickyt.online April 28th at 1pm Eastern to discuss building securely with AI. 👀 www.youtube.com/watch?v=nt8K...

Pomerium v0.32.5 and related patch releases are now available. * Core (v0.32.5), usepom.link/pom-v0.32.5 * Ingress Controller (v0.32.6), usepom.link/ingress0.32.6 * CLI (v0.32.2), usepom.link/cli-v0.32.2 * Desktop Client (v0.32.2), usepom.link/desk-v0.32.2

Day 2 of KubeCon! Come say hello to the Pomerium crew in hall 1, booth #986. Come for some socks, stay for the ingress! #KubeCon

The doors are open! Come say hey at booth 986! #KubeCon

See you at KubeCon in Amsterdam. Stop by booth 986 for some Amsterdam swag. #KubeCon

Come find us at booth 986 at KubeCon next week. We'll be talking native SSH, securing MCP servers for AI agents and more. See you in Amsterdam! #kubecon #zerotrust #mcp #ssh

MCP Apps Are Here. Is Yours Secure on Day One? usepom.link/mcp-apps #mcp #mcpapps #ai #agenticai

Ingress NGINX was officially retired on March 1st, 2026. If you’re figuring out what comes next, we put together a practical migration guide for Kubernetes teams. Questions? Drop them in the comments or DM us. usepom.link/nginx #k8s #nginx #ingress

The most successful app in the App Store's first year? A beer-drinking simulator! It made €20k/day by letting you 'drink' from your phone using gyroscope tech. Wild. What's it gonna be for MCP Apps? #MCP #EmergingTech #MCPApps #ChatGPTApps www.youtube.com/shorts/p6rAH...

MCP Apps are here—ChatGPT apps, support in Claude, @vscode.dev & @opensource.block.xyz. Nobody wants to do auth when it's not their core business. Gateways handle auth plumbing (tokens, validation, caching) so you can focus on building. www.youtube.com/shorts/poGh8... #MCPApps #MCP #OAuth #DX

MCP Apps are starting to gain traction. From ChatGPT apps, MCP app support in Claude, @vscode.dev & @opensource.block.xyz. Security is hard, especially those who aren't security experts that want to build MCP servers & MCP Apps. Use off the shelf tools. #MCP #MCPApps www.youtube.com/shorts/8lQJ7...

Pomerium v0.32.0 is here! Less friction, more control for secure access: * SSH with standard OAuth auth code flow (no more device code required) * Hosted IdP improvements * Auto MCP token refresh * Advanced DNS tuning bit.ly/pomerium-32 #ZeroTrust #OAuth #SSH #MCP

Happening tomorrow! Join @nickyt.online and Frédéric Barthelet as they discuss the Skybridge framework for building MCP applications. #MCP #MCPApps #AgenticAI #AI #typescript www.youtube.com/watch?v=GCjt...

Join Nick and Jim in 30 minutes as they dig into real-time guardrails for AI agents!

Ingress NGINX retires March 2026. Pomerium Ingress Controller offers the same reverse proxy functionality + identity-aware access controls. Start simple, scale to zero trust. Dynamic fine-grained policies are 🔥 www.pomerium.com/blog/migrati... #Kubernetes #ZeroTrust

Just scheduled! Join @nickyt.online and @infoxicator.bsky.social next week as they dive into the work of games in ChatGPT! #mcp #chatgpt #GameStop www.youtube.com/watch?v=0u8Z...

👀 #kubernetes #nginx #zerotrust #ingresscontroller

Join @jimbobbennett.dev from Galileo and @nickyt.online as they dig into real-time guardrails for AI agents December 11th. 👀 www.youtube.com/watch?v=4cqR... #AI #AIGuardrails #AgenticAI

Pomerium v0.31 is out! - Self-healing file-based databroker - Enhanced health checks - MCP support in Pomerium Zero www.pomerium.com/blog/announc... #mcp #aigateway #healthchecks #k8s #devops

Sometimes Postgres isn't the Answer. Pomerium v0.31 introduces a new file-based storage option for it's databroker using Pebble, a key-value store, with Raft clustering as an alternative to Postgres. Why? At scale, Postgres can be harder to operate. www.pomerium.com/blog/sometim...

Great video from Filip Lebiecki on @pomerium.io's native SSH capabilities! youtu.be/GuAvZZR0YSE "...  it feels well effortless. And the seemingly simple new approach,the one that makes secure SSH feel so smooth ..." Go smash that subscribe button on Filip's YouTube! #ZeroTrust #IAP #SSH #Security

Hard blanket recs are hard: Cost of consistency? Maybe a couple of users log out. Self-healing, eventually consistent is the goal. #Data #DataBroker #Raft

Health and readiness checks are often overlooked but crucial for zero-downtime scaling. Making your K8s cluster or on-prem environment operate reliably is surprisingly difficult. Read how we optimized readiness checks in Pomerium: www.pomerium.com/blog/designi... #DevOps #Kubernetes #HealthChecks

Raft is production-ready. Etcd (Kubernetes' storage) and HashiCorp use it. Nomad, Vault, CockroachDB and other modern SQL DBs rely on Raft for consistency across instances. Consistency comes at a cost. #Databases #Raft #DistributedSystems #Etcd #Kubernetes

The database selection meme is generally true - PostgreSQL to fancy solutions back to PostgreSQL. We'll keep supporting Postgres, but we're also exploring new approaches for data storage that go beyond the traditional cycle. #DatabaseArchitecture #DataStorage #systemDesign

Pomerium's data broker storage evolution: Started with cookies, moved to Redis, then PostgreSQL. Now adding file-based storage with clustering and leader election for self-healing, eventually consistent systems. Sometimes the simple solution wins. #DistributedSystems #DataArchitecture #ZeroTrust

New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required. www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz

New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required. www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz

Pomerium's IAP architecture: We separate concerns into authentication,proxy & authorization services. Each handles a specific role: login,request forwarding & access control. Our data broker evolved from early cookie-based session storage to coordinate between components. #DataBroker #ZeroTrust #IAP

Flipping the switch doesn’t mean a Kubernetes pod is ready. With Pomerium, it also needs group memberships and policy data before it can serve traffic. Readiness probes make sure pods are truly ready, not just turned on. #Kubernetes #Pomerium #DevOps #CloudNative

Kubernetes: “All systems go.” Users: “Nothing works.” #Kubernetes #CloudNative #DevOps cloudnativenow.com/contributed-...

Kubernetes uses health probes to keep apps alive. Startup gets things booted, readiness controls traffic, and liveness restarts stuck pods. Self-healing in action. #Kubernetes #DevOps #CloudNative #Containers

Startup probes let your app boot. Readiness probes control traffic. Liveness probes restart it when stuck. Together they keep apps stable. #Kubernetes #DevOps #HealthChecks

New in Pomerium 0.31, smarter health checks for zero-downtime deployments #kubernetes #HealthChecks #DevOps www.pomerium.com/blog/smarter...

Next month, the Pomerium team is headed to Atlanta for KubeCon North America! Stop by Booth 951, and pick up some cool swag, demos, and discussions about security and Kubernetes while you're there.

Kubernetes health checks prevent bad pods from breaking production by pulling them out of service until they are healthy. #Kubernetes #DevOps #CloudNative #HealthChecks

Thank You @allthingsopen.bsky.social for an incredible two days of meeting the community! Up next: KubeCon NA in Atlanta. In the meantime, keep an eye out for @nickyt.online's talks and guest appearances on various podcasts!

@erinmikail.bsky.social, Senior DX Engineer, joins @nickyt.online to discuss Agent frameworks and making them reliable. Join us on Wednesday, October 22 at 12:15PM ET: youtube.com/live/t_QHKdS...

All Things Open, you've been amazing to us! We're so excited for Day 2. Find us at Booth 85 for some fun conversations, stickers, and more. Catch @nickyt.online's talk today at 1:45 PM: Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads. 🏛️ Security – Room 303

We had a great time at the [email protected] speed networking event that we co-hosted with @torc.dev @digitalocean.com @coderabbitai.bsky.social yesterday! If you're at All Things Open, make sure to stop by our 85 booth (in front of Ballroom A) today for some epic swag!

MCP uses OAuth scopes for authorization, but they’re often coarse. You can add finer scopes or step-up auth, but there’s still no built-in way to dynamically enforce policy at the tool-operation level. That’s where @pomerium.io comes in. 👀 #mcp #agenticai

Don’t miss @nickyt.online talks at ATO! Agentic Access: OAuth Gets You In. Zero Trust Keeps You Safe 📅 Monday, Oct 13 @ 11:30 AM 🏛️Case Study/Demo 1 – Room 306 A Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads. 📅 Tuesday, Oct 14 @ 1:45 PM 🏛️ Security – Room 303

Headed to All Things Open? Want to meet other attendees before the official conference? Pomerium is co-hosting a networking event on Sunday, October 12 that you do not want to miss. Spots are limited! Sign up today. guild.host/events/torc-...

The Pomerium team is heading to Raleigh for @allthingsopen.bsky.social! Swing by Booth 84 to chat about #opensource and #security with us—and catch some demos and new swag while you’re here. PS: @nickyt.online will be doing some cool talks on #kubernetes and #oauth that you do not want to miss!

OpenAI’s new ChatGPT Developer Mode adds native support for Model Context Protocol (MCP) servers, meaning developers can now plug in custom MCP servers directly into ChatGPT! Make bridging local MCP servers with a cloud hosted LLM secure, simple, and scalable. bit.ly/3W94uXw

It's already been about a month since the Pomerium team was at Black Hat USA! Missed us in Vegas? No worries. You can still watch Developer Advocate @nickyt.online's talk at Black Hat: "Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe" www.youtube.com/watch?v=V33G...

And we're live! Come hang as we dig into almma.ai!