Lightnews — Scholar-powered news

Reposted by Pomerium

Nick Taylor @nickyt.online · 2d

MCP uses OAuth scopes for authorization, but they’re often coarse. You can add finer scopes or step-up auth, but there’s still no built-in way to dynamically enforce policy at the tool-operation level. That’s where @pomerium.io comes in. 👀 #mcp #agenticai

2 2 9

Pomerium @pomerium.io · 2d

Don’t miss @nickyt.online talks at ATO!

Agentic Access: OAuth Gets You In. Zero Trust Keeps You Safe
📅 Monday, Oct 13 @ 11:30 AM
🏛️Case Study/Demo 1 – Room 306 A

Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads.
📅 Tuesday, Oct 14 @ 1:45 PM
🏛️ Security – Room 303

1 3

Pomerium @pomerium.io · 8d

Headed to All Things Open? Want to meet other attendees before the official conference?
Pomerium is co-hosting a networking event on Sunday, October 12 that you do not want to miss.

Spots are limited! Sign up today.
guild.host/events/torc-...

Torc, DigitalOcean and Pomerium and CodeRabbit pre ATO meetup speed networking event | Guild

Oct 12th 7:00PM: Ready to hit the ground running at All Things Open? Skip the awkward first-day introductions and join us for a fun, fast-pa

guild.host

2

Pomerium @pomerium.io · 11d

The Pomerium team is heading to Raleigh for
@allthingsopen.bsky.social!

Swing by Booth 84 to chat about #opensource and #security with us—and catch some demos and new swag while you’re here.

PS: @nickyt.online will be doing some cool talks on #kubernetes and #oauth that you do not want to miss!

2 4

Pomerium @pomerium.io · 15d

OpenAI’s new ChatGPT Developer Mode adds native support for Model Context Protocol (MCP) servers, meaning developers can now plug in custom MCP servers directly into ChatGPT!

Make bridging local MCP servers with a cloud hosted LLM secure, simple, and scalable.
bit.ly/3W94uXw

Secure SQL AI Analyst: Enabled by Pomerium & ChatGPT Developer Mode

www.pomerium.com

2

Pomerium @pomerium.io · 22d

It's already been about a month since the Pomerium team was at Black Hat USA!

Missed us in Vegas? No worries. You can still watch Developer Advocate @nickyt.online's talk at Black Hat:
"Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe"
www.youtube.com/watch?v=V33G...

Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe [Black Hat USA 2025 — Pomerium]

YouTube video by Pomerium

www.youtube.com

1 5

Reposted by Pomerium

Nick Taylor @nickyt.online · 22d

And we're live! Come hang as we dig into almma.ai!

Pomerium @pomerium.io · 24d

AI Profits for All

Lucas Wall joins @nickyt.online to discuss the status of open source generative AI, marketplaces, and AlmmaGPT as a multi-LLM platform.

Join us on September 18th at 12:15PM ET:
www.youtube.com/watch?v=Ok-d...

1 2

Pomerium @pomerium.io · 24d

AI Profits for All

Lucas Wall joins @nickyt.online to discuss the status of open source generative AI, marketplaces, and AlmmaGPT as a multi-LLM platform.

Join us on September 18th at 12:15PM ET:
www.youtube.com/watch?v=Ok-d...

3

Pomerium @pomerium.io · 29d

CEO Bobby DeSimone, Senior SWE Caleb Doxsey, and Developer Advocate @nickyt.online are going live to discuss Pomerium’s move away from Postgres in the databroker.

Catch the stream tomorrow at 12:30PM ET:
www.youtube.com/watch?v=jKah...

2

Pomerium @pomerium.io · Sep 10

The new SANS Critical AI Security Guidelines provide a clear framework for reducing AI risks.

Key takeaway? Securing AI is not only about building smarter models, but about ensuring every interaction is authorized, auditable, and governed responsibly.

Read more:
bit.ly/4m6GAq7

Applying SANS Critical AI Security Guidelines with Pomerium

Learn how to turn SANS Critical AI Security Guidelines into enforceable controls for access, monitoring, and governance with Pomerium.

www.pomerium.com

1

Pomerium @pomerium.io · Sep 8

Pomerium was highlighted as a solution for today’s evolving threat landscape by Vation Ventures as a network security innovator shaping how enterprises reduce risk in today’s hyper-connected environment.

Read the article here:
www.vationventures.com/research-art...

1

Pomerium @pomerium.io · Sep 3

OWASP's Top 10 for LLMs indicates that prompt injection, insecure output handling, and sensitive data leaks are now among the most critical risks for GenAI applications.

Zero Trust access controls can help defend against these threats.

Read the full breakdown:
bit.ly/45KIW9q

The OWASP Top 10 for LLMs and How to Defend Against Them

bit.ly

1

Pomerium @pomerium.io · Sep 2

Join @nickyt.online at the MCP Developers Summit on Thursday, October 2 in London!

Nick will be walking through how to use Pomerium to take an MCP server from prototype to production-ready with OAuth 2.1 and identity-aware security.

MCP Developers Summit @mcpdevsummit.ai · Sep 1

Prototype servers leave security behind.

At the MCP Dev Summit, Nick Taylor shows how to build MCP servers secure from day one — with OAuth 2.1 + Pomerium in action. 🔐

#MCPDevSummit #LondonTech

1 1 4

Pomerium @pomerium.io · Aug 28

The Pomerium team will be going live tomorrow together for the very first time at 12:30PM ET!

Join CEO Bobby DeSimone, Senior Software Engineer Alexandre Lamarre, and Developer Advocate
@nickyt.online's candid conversation on Kubernetes health checks.
www.youtube.com/watch?v=cMBU...

2

Pomerium @pomerium.io · Aug 28

Catch the live now!

Nick Taylor @nickyt.online · Aug 28

And we're live! Come hang with @rishab.cloud and me!

Pomerium @pomerium.io · Aug 27

Twilio Voice Al & LangChain

@rishab.cloud, Staff Developer Evangelist at Twilio, joins
@nickyt.online to discuss Twilio Voice Al & LangChain.

Join us tomorrow, August 27th at 12:15PM ET:
www.youtube.com/watch?v=8xy0...

1

Pomerium @pomerium.io · Aug 27

Twilio Voice Al & LangChain

@rishab.cloud, Staff Developer Evangelist at Twilio, joins
@nickyt.online to discuss Twilio Voice Al & LangChain.

Join us tomorrow, August 27th at 12:15PM ET:
www.youtube.com/watch?v=8xy0...

1 3

Pomerium @pomerium.io · Aug 20

Static API keys and IAM roles don’t cut it for LLMs.

Prompt-driven apps need continuous, identity-aware policy at every request.

Explore why traditional access controls fail in LLM deployments and how identity-aware policy at the edge keeps access safe:
www.pomerium.com/blog/why-tra...

Why Traditional Access Controls Fail in LLM Deployments

www.pomerium.com

1 2

Reposted by Pomerium

Nick Taylor @nickyt.online · Aug 18

Code and Chill: Messing around with LibreChat and @pomerium.io

Pick your poison:
- www.twitch.tv/nickytonline
- www.youtube.com/watch?v=czyH...

nickytonline - Twitch

Slinging code, having fun, and maybe even learning something along the way.

www.twitch.tv

1 2

Pomerium @pomerium.io · Aug 18

@nickyt.online recently spoke to @quincy.bsky.social about dev life, open source, AI’s impact on tech, and more for the freeCodeCamp podcast!

Learn how developers can stay productive and adaptable in today’s fast-changing tech landscape.

Catch the podcast here:
www.youtube.com/watch?v=m7nk...

How to turn Open Source into a Job with Nick Taylor [Podcast #181]

YouTube video by freeCodeCamp.org

www.youtube.com

4

Pomerium @pomerium.io · Aug 12

Last chance to join this webinar on autonomous AI agents!

Sign up for the webinar and the recording using the link below.
ntl.fyi/4mMLR7l

Pomerium @pomerium.io · Aug 11

Bobby will be speaking on securing autonomous AI agents along with other industry experts at @netlify.com's virtual event!

Make sure to sign up to join the live TOMORROW at 12PM ET.
ntl.fyi/4mMLR7l

Pomerium @pomerium.io · Aug 5

On August 12, our CEO Bobby DeSimone will join other security experts to speak about AI agents at Netlify's virtual event.

Working in security, AI/AX, or trying to stay ahead of the curve? This session is for you.

Join the live or sign up to receive the recording afterwards:
ntl.fyi/4mMLR7l

Secure your stack before autonomous AI agents ship code for you | Netlify

Realize the speed, agility and performance of a scalable, composable web architecture with Netlify. Explore the composable web platform now!

ntl.fyi

1

Pomerium @pomerium.io · Aug 6

Congratulations to @nickyt.online for giving a successful talk on Agentic Access at Black Hat USA!

Missed the talk? You can come talk to Nick at Booth #6216, right next to Startup City Theater.

#BlackHat #BlackHatUSA #cybersecurity #agenticai #mcp

5

Pomerium @pomerium.io · Aug 6

Attending Black Hat USA?

Pick up free swag, enter our raffle, watch a demo, and talk to the Pomerium team at Booth #6216. We're located right next to Startup City Theater.

#cybersecurity #blackhatusa

1

Pomerium @pomerium.io · Aug 5

On August 12, our CEO Bobby DeSimone will join other security experts to speak about AI agents at Netlify's virtual event.

Working in security, AI/AX, or trying to stay ahead of the curve? This session is for you.

Join the live or sign up to receive the recording afterwards:
ntl.fyi/4mMLR7l

Secure your stack before autonomous AI agents ship code for you | Netlify

Realize the speed, agility and performance of a scalable, composable web architecture with Netlify. Explore the composable web platform now!

ntl.fyi

1

Pomerium @pomerium.io · Jul 31

No AuthZ. No identity checks. No context-aware policy.

The MCP spec is missing core security features, meaning teams deploying MCP-compatible tools are exposing internal APIs without realizing it.

It's time to lock down agent access before it becomes a breach vector.

Read more:
bit.ly/4of50QJ

Why the Managed Context Protocol (MCP) Spec Still Leaves Gaping Security Holes

bit.ly

3