The Curious Engineer

All blogs / Security

Pomerium Blog

pomerium.com/blog

Product updates, technical guides, and practical research on identity-aware access.

SecurityDevOps / SRE / infrastructureAI / ML

’20’21’22’23’24’25’26
Posts
213 from 16 Apr 2020 to 16 Sep 2026
Posting
weekly (37 in the last year)
Kind
company blog
Feed
https://www.pomerium.com/blog/feed

2026 31

  1. Data-Layer Proxy vs Context-Aware Proxy: Which Do You Need?
  2. MCP Governance: What the OWASP Framework Requires, and Where Enforcement Has to Live
  3. Identity Was Built for Humans Logging In. Agentic AI Ripped Up That Assumption.
  4. Your IAM Was Built for People. Your Biggest Identity Problem Isn't People Anymore.
  5. Agents Have Boundary Issues. Your Infrastructure Shouldn't.
  6. Google Built an Agent Runtime on Kubernetes. Here's How to Build a Cloud-Agnostic One with Identity Included
  7. IAM for Agentic AI: 6 Platforms Compared | Pomerium
  8. How We Designed a Tamper-Evident SSH Recording System for Zero-Trust infrastructure
  9. Understanding Anthropic's Zero Trust for AI Agents Guide
  10. Another GlobalProtect bypass, another reminder that the VPN is the wrong place to put your trust
  11. When the Web Becomes the Attacker: AI Agent Traps and the Case for Identity-Aware Access
  12. Top 5 Agentic Gateways for Securing MCP Tool Calls in 2026
  13. Why Identity-Aware Access is the Missing Layer in Agentic Security
  14. MCP Server Security Risks: What Development Teams Need to Know in 2026
  15. The AIUC-1 Compliance Checklist: 5 Layers Every Enterprise Needs Before Deploying AI Agents
  16. What Is an Agentic Gateway? Definition, Architecture, and Why It's Different from an API Gateway
  17. The AIUC-1 Compliance Stack: The Architecture Auditors Are Actually Looking For
  18. Midmarket Security Teams Deserve Better Than Enterprise Hand-Me-Downs
  19. What Made McKinsey's AI Platform Easy to Hack? And How to Fix it.
  20. Top Ingress NGINX Controller Migration Pain Points
  21. Complete Guide: Zero Trust for Air-Gapped Networks
  22. MCP Apps Are Here. Is Yours Secure on Day One?
  23. MCP Security: Why MCP Is an Authorization Crisis
  24. Secure Internal Access to Grafana, Argo, GitLab, and Prometheus Without a VPN
  25. From NGINX to Pomerium: A Practical Migration Guide for Internal Kubernetes Applications
  26. Privilege Access Is the Past. Per Request Authorization Is the Future.
  27. AI Is Your Biggest Security Risk
  28. 10 Kubernetes Security Tools DevOps Teams Should Be Using in 2026
  29. Announcing Pomerium v0.32
  30. Why Kubernetes Ingress Needs an Identity Layer
  31. Replacing Ingress-NGINX: A Modern Approach to Secure Kubernetes Access

2025 72

  1. Hosted Clusters in Pomerium Zero & MCP Hacking (endpoints from localhost via ssh)
  2. It’s always DNS part ∞: tracking down a use-after-free bug in Envoy’s DNS Resolver
  3. Introducing Pomerium Ingress Controller for Kubernetes
  4. Migrating from Ingress NGINX to Pomerium Ingress Controller
  5. Announcing Pomerium v0.31
  6. Sometimes Postgres isn’t the Answer
  7. Designing Smarter Health Checks for Pomerium
  8. Self-Healing File-Based Databroker Without The Postgres Headaches
  9. Smarter Health Checks for Zero-Downtime Deployments
  10. September 2025 MCP Round‑Up: Growing Adoption Meets Rising Security Fears
  11. Secure SQL AI Analyst: Enabled by Pomerium & ChatGPT Developer Mode
  12. 7 Things to Know About Kubernetes Health Checks
  13. Turning SANS Critical AI Security Guidelines Into Enforceable Agentic Controls with Pomerium
  14. August 2025 Agentic Access and MCP Content Round‑Up: Security, Innovations & Growth
  15. HIPAA & Context-Aware Access: How Pomerium Aligns with HIPAA
  16. The OWASP Top 10 for LLMs and How to Defend Against Them
  17. LiteLLM Alternatives: Best Open-Source and Secure LLM Gateways in 2025
  18. LiteLLM vs. Pomerium: What's the Difference and Which One Do You Need?
  19. Why Traditional Access Controls Fail in LLM Deployments
  20. July 2025 Agentic Access and MCP Content Round‑Up: Vulnerabilities, Governance & Growth
  21. Why the Managed Context Protocol (MCP) Spec Still Leaves Gaping Security Holes
  22. Best LLM Gateways in 2025: Top Tools for Managing and Securing AI Models
  23. How Shadow AI Impacts SOC 2 and HIPAA, and What to Do About It
  24. Shadow AI Is Already in Your Org. Here’s the 5-Minute Playbook to Secure It
  25. Top 10 Articles in Agentic Access - MCP, Models, and Clients (June 2025)
  26. Announcing Pomerium v0.30
  27. When AI Has Root: Lessons from the Supabase MCP Data Leak
  28. June 2025 MCP Content Round-Up: Incidents, Updates, Releases, and more!
  29. Your Employees Are Already Dumping Company Data to LLMs (Here’s What To Do About It)
  30. Asana's AI Connector Leak Exposed Sensitive Data Across Organizations: What It Means for MCP Security
  31. 5 Actionable Zero Trust Patterns from NIST SP 1800-35 (and How to Implement Them)
  32. 5 Key Takeaways about ZTA from NIST SP 1800-35
  33. Secure Access for Model Context Protocol (MCP)
  34. What We Heard From RedMonk Analysts—And Why Agentic Access Needs a New Security Model
  35. Best Model Context Protocol (MCP) Servers in 2025
  36. Agentic Access Management for Model Context Protocol (MCP) Workflows
  37. Zero Trust Without Lock-In: What We Heard at KubeCon EU 2025
  38. How To Achieve Zero Trust In Kubernetes With Pomerium
  39. May 2025 Data Breaches: 184M Passwords, 364K SSNs Leaked
  40. Why Per-Request Authorization Is the Foundation of Zero Trust
  41. How Pomerium Brings Zero Trust to Legacy, Hybrid, and Cloud-Native Environments
  42. Not All Zero Trust Is Created Equal: Why Enterprises Host Their Own
  43. How Pomerium Makes Access Audit Ready and Turns It Into a Source of Truth
  44. How Pomerium Secures Access for Human, Service, and Agent Identities
  45. How Pomerium Enforces Real-Time, Context-Based Access
  46. How Pomerium Secures SSH Access with Zero Trust
  47. 5 Reasons Chief Information and Technology Officers Are Rewriting Access Strategies for AI in 2025
  48. Pomerium Has SOC2, and So Could You!
  49. April 2025 Data Breaches: 4 Million SSNs Leaked, 23M+ in Settlements
  50. Pomerium’s OpenTelemetry Tracing Support: Deeper Observability, Made Easy
  51. March 2025 Data Breaches: 5M+ Impacted, $39.9M+ in Damages
  52. Announcing Pomerium v0.29.0
  53. VPNs Are Increasing Your Attack Surface—Here’s Why That’s a Problem
  54. Key Insights and Lessons from the KELA 2024 Report
  55. Executive Order 14144: Strengthening Cybersecurity — Key Mandates & Zero Trust
  56. February 2025 Data Breaches [LIST]
  57. Context-Based Access Control and Zero Trust: Key Insights from the CSA White Paper
  58. What You Need to Know From the 2024 ITRC Data Breach Report
  59. 12 Crucial Mobile Device Management (MDM) Features - 2025
  60. 40 Unique IAM Interview Questions and Answers | 2025 Edition
  61. 8 Docker Image Scanning Tools: 2025 and Beyond
  62. 20 Top Remote Workforce Solutions for Businesses- 2025
  63. 7 Best Ingress Controllers for Kubernetes for 2025
  64. 7 Best Kubernetes Security Solutions and Vendors - 2025
  65. 10 Best Free Reverse Proxy Providers - Quick Guide | 2025
  66. 20 Best Kubernetes Management Tools for 2025
  67. January 2025 Data Breaches [LIST]
  68. The New Frontier: AI Companies Require New Approaches to Security
  69. The Human Factor in Security: Lessons from the CyberArk Employee Risk Survey
  70. Common Pitfalls and 5 Must-Dos When Creating a Password
  71. What is a "Pomerium"?
  72. December 2024 Data Breaches [LIST]

2024 47

  1. How Pomerium Supports FedRAMP Compliance
  2. Taking Back Zero Trust: Bank Policy Institute (BPI) provides a fairly reasoned take on Zero Trust
  3. November 2024 Data Breaches [LIST]
  4. 12 Zero Trust Architecture Examples With Actionable Guide
  5. What is Zscaler and How Does it Work?
  6. Reference Architecture: Using AWS EKS with Pomerium
  7. Identity Aware Proxy (IAP): Meaning, Pricing, Solutions
  8. The Great VPN Myth: What PCI DSS 4.0 Actually Requires for Remote Access
  9. Zscaler vs. Tailscale vs. Pomerium: Detailed Comparison
  10. Announcing Pomerium v0.28
  11. 8 Best Open Source Zero Trust Software Solutions
  12. 5 Top Tailscale Alternatives: Open Source and Paid
  13. October 2024 Data Breaches [LIST]
  14. Announcing FleetDM integration for adding device context to access control
  15. Heimdall Reverse Proxy: Features, Alternatives, Pros-Cons
  16. The Best OAuth2 Proxy Alternative: Pomerium
  17. 10 Best Open Source Mobile Device Management (MDM) Solutions
  18. Docker Container Scanning Tools: Open Source and Paid
  19. Kubectl Cheat Sheet with Examples- 50 Quick Commands
  20. Cloudflare Access vs. Tailscale vs. Pomerium
  21. Cloudflare Alternatives & Competitors: CDN, Zero Trust & SASE
  22. Cyber Security Awareness Month 2024: What’s New?
  23. Security is Usability — Examining Cybersecurity Erosion
  24. Kubernetes Compliance: NIST, CIS & PCI- Actionable Guide
  25. Decisionmaker's Guide to Cloud Workstations
  26. Achieving zero trust with Pomerium JWTs
  27. September 2024 Data Breaches [LIST]
  28. Announcing Pomerium v0.27
  29. 10 Ugliest VPN Security Risks for Organizations and Users
  30. Zero Trust VPN: Meaning and Alternatives
  31. Twingate Vs. Tailscale Vs. Pomerium: 6 Key Differences
  32. Breach Notification Letter: Samples, Templates, Examples
  33. B2B VPN: Meaning, Examples, Alternatives
  34. Palo Alto Clientless VPN: Pros - Cons, Alternatives
  35. Clientless VPN: Meaning, Solutions, Cost, Alternatives, Drawbacks
  36. Context-Aware Authentication: Meaning, Tools, Examples
  37. IAP Definition in Cybersecurity | Meaning and Solutions
  38. Kubernetes Reverse Proxy: Meaning and Solutions
  39. 2.9 Billion Social Security Number Breach: What to Know
  40. August 2024 Newsletter
  41. The Real Lessons from the Snowflake Breach
  42. Network-centric vs Application-centric Approach
  43. CrowdStrike is a Harsh Reminder of the Danger of Third-Party Clients
  44. Introducing Pomerium Zero
  45. Announcing Pomerium v0.26
  46. 4 Trends Shaping the Future of Access Control
  47. Announcing Pomerium v0.25

2023 30

  1. Announcing Pomerium v0.24
  2. Elevating Remote Access: Understanding NextGen VPN Flaws
  3. Applying Zero Trust to Multi-Cloud Environments
  4. Logs Are Incomplete Without the “Why”
  5. Signed Headers: A Safety Net for Application Security
  6. Announcing Pomerium v0.23
  7. The Three Pillars of Observability
  8. What is Zero Trust Architecture and Security?
  9. Zero Trust Maturity Rubric and Tool Matrix
  10. IAM Trends and Future Outlook
  11. SSO: OAuth2 vs OIDC vs SAML
  12. Best VPN Alternatives
  13. 5 Lessons Learned Connecting Every IdP to OIDC
  14. Tailscale & Pomerium: Better Together
  15. Announcing Pomerium v0.22
  16. What Is SASE? — A Buyer’s Guide
  17. Device Management: Essential for Workplace Security and Efficiency
  18. Pomerium Best Practices
  19. The Perimeter Problem: Why Traditional Network Security Fails
  20. Pomerium and CHT Security Partner for Zero Trust Network Access Solution
  21. A Case Against Layer 4 Security Tools
  22. Announcing Pomerium v0.21
  23. VPNs Are Killing Productivity
  24. Benefits of Zero Trust Architecture as Defined by NIST
  25. A Close Read at NIST’s Definition of Zero Trust Architecture
  26. Minimizing CORS Misconfigurations
  27. Jsonnet is better than YAML for generating JSON
  28. Your Portal is Showing
  29. Announcing Pomerium v0.20
  30. Analyzing the US Government’s Adoption of Zero Trust

2022 17

  1. Stellenbosch University Secures Internal Assets with Pomerium
  2. Proxy vs Reverse Proxy
  3. Authn vs. Authz — Authentication vs. Authorization
  4. Prevent Insider Attacks With Context-Aware Access
  5. Highlights from IBM’s Cost of a Data Breach 2022
  6. Announcing Pomerium v0.18
  7. Remote Work Infrastructure
  8. How Context Drives Full Access Decision-making
  9. How Breaches Affect Companies
  10. Security Posture: When and How to Reevaluate
  11. Q&A with Zero Trust Architecture Writers from NIST
  12. Insulation from Third-Party Breaches
  13. Announcing Pomerium v0.17
  14. The Far Reach of the White House’s Zero Trust Memo
  15. Log4J and the Fragility of Modern Infrastructure
  16. Announcing Pomerium v0.16
  17. Social Engineering — An Enduring Vulnerability

2021 9

  1. The Move to Passwordless Authentication
  2. Elevate Productivity with Frictionless Security
  3. CyberSecurity Awareness Month: Cybersecurity First Aligned With Explore. Experience. Share.
  4. CyberSecurity Awareness Month: Be Cyber Smart to Phight the Phish
  5. Pomerium Completes Independent Security Audit by Cure53
  6. Announcing Pomerium Enterprise General Availability
  7. Pomerium 0.14
  8. Pomerium 0.13
  9. Pomerium 0.12

2020 7

  1. Pomerium 0.11
  2. August Newsletter
  3. Demystifying Zero Trust
  4. Pomerium 0.10
  5. Pomerium 0.9
  6. Pomerium 0.8
  7. Pomerium 0.7