Top all-time · #1073
Oso Blog
Company blog · osohq.com/postsecurityai
Oso Blog is the company blog at osohq.com, writing about security and ai. Since 2019, 64 different Hacker News readers have linked it 231 times, most often “Show HN: oso – Open-Source Policy Engine for Authorization”. It is still writing: the last post was on 2026-10-06, and you can follow it by feed.
Rarely recommended · 3 of 40 sampled comments recommend it?
Why HN links it
HN readers link Oso's blog for writing on application authorization, such as why authorization is hard and access control for LLM tools. Commenters call its posts informative and the blog great.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Oso helps companies run agents in production with confidence using monitoring, access controls, and automated least privilege.
Most-linked posts?
- Show HN: oso – Open-Source Policy Engine for Authorization8 people · 22 mentions · first linked 2019-09-03
- /company/jobs6 people · 24 mentions · first linked 2020-09-01
- Oso – Authorization Academy5 people · 5 mentions · first linked 2022-02-20
- /4 people · 6 mentions · first linked 2020-08-28
- Show HN: Authorization Academy – guides for building application authorization3 people · 4 mentions · first linked 2021-04-15
- Anatomy of a Rule3 people · 3 mentions · first linked 2020-09-10
- We Built a Cross-Platform Library with Rust3 people · 3 mentions · first linked 2021-10-25
- How we built a VS Code Extension with Rust, WebAssembly, and TypeScript3 people · 3 mentions · first linked 2022-01-10
- Registry of Agents Gone Rogue2 people · 3 mentions · first linked 2025-12-09
- Building a runtime reflection system for Rust2 people · 3 mentions · first linked 2020-09-24
What Hacker News says?
Oso posted a blog post [1] about this yesterday that's quite informative. I separated posted it on HN [2], but linking here. [1] https://www.osohq.com/post/why-llm-authorization-is-hard [2] https://news.ycombinator.com/item?id=44509936
Comment linking /post/why-llm-authorization-is-hard
on “Supabase MCP can leak your entire SQL database”Submitted Why Authorization Is Hard as a story · 303 points
HN discussionAgreed. We do this at Oso (batteries-included library for application authorization). https://www.osohq.com/ https://calendly.com/osohq/1-on-1
Comment linking /
on “Open source projects should run office hours”Submitted How we built a VS Code Extension with Rust, WebAssembly, and TypeScript as a story · 167 points
HN discussionOso | Software Engineer, Developer Advocate, & Eng Manager | New York City (NYC) | Onsite or Remote Oso (backed by Sequoia) puts security in the hands of the makers. We're doing this by delivering security as code, or as Charity Majors (cofounder & CTO of Honeycomb) put it, "Consumer-quality developer tools" for security ( https://twitter.com/mipsytipsy/status/1288326027001782273 ) – beginning with an open source po…
Comment linking /jobs/eng-mgr
on “Ask HN: Who is hiring? (February 2021)”Submitted Distributed Authorization as a story · 150 points
HN discussionOso | Engineering Leader, Software Engineer, Developer Experience Engineer | New York City (NYC) | Onsite or Remote Old problem, new $25B+ market Companies like AWS, Stripe, and Twilio have demonstrated that if a technology is not core to your value proposition, you should offload it. Still, every engineering team builds and rebuilds one piece: *authorization*, how you control who has access to what in your app. You…
Comment linking /company/jobs
on “Ask HN: Who is hiring? (August 2022)”Submitted How We Turn Authorization Logic into SQL as a story · 147 points
HN discussionoso | Developer Advocate | New York City (NYC) | Remote or Onsite oso (backed by Sequoia) puts security in the hands of the makers. We're doing this by delivering security as code, or as Charity Majors (cofounder & CTO of Honeycomb) put it, "Consumer-quality developer tools" for security ( https://twitter.com/mipsytipsy/status/1288326027001782273 ) – beginning with an open source policy engine for authorization. We…
Comment linking /jobs/dev-advocate
on “Ask HN: Who is hiring? (October 2020)”Submitted A Logic Language for Distributed SQL Queries as a story · 104 points
HN discussionOso | Software Engineer, Developer Advocate, & Eng Manager | New York City (NYC) | Onsite or Remote Over the last 15 years, companies like AWS, Stripe, and Twilio have helped developers offload anything not core to their apps so they can focus on what matters to their users. Despite a lot of progress in developer tooling, most developers still roll their own authorization. You might start with something quick 'n dir…
Comment linking /jobs/eng-mgr
on “Ask HN: Who is hiring? (April 2021)”Submitted Building a runtime reflection system for Rust (Part 3) as a story · 60 points
HN discussionoso | Software Engineer, Developer Advocate, & Eng Manager | New York City (NYC) | Onsite or Remote oso (backed by Sequoia) puts security in the hands of the makers. We're doing this by delivering security as code, or as Charity Majors (cofounder & CTO of Honeycomb) put it, "Consumer-quality developer tools" for security ( https://twitter.com/mipsytipsy/status/1288326027001782273 ) – beginning with an open source po…
Comment linking /jobs/eng-mgr
on “Ask HN: Who is hiring? (January 2021)”Submitted We Built a Cross-Platform Library with Rust as a story · 59 points
HN discussionOso | Product Engineer | New York City (NYC) | Onsite or Hybrid *Old problem, new $25B+ market* Companies like AWS, Stripe, and Twilio have shown that if a technology isn't core to your value proposition, you should offload it. Still, every engineering team builds and rebuilds one piece: authorization, how you control who has access to what in your app. We intend to change that. We see a world where developers never…
Comment linking /company/jobs
on “Ask HN: Who is hiring? (January 2024)”Submitted Show HN: oso – Open-Source Policy Engine for Authorization as a story · 44 points
HN discussionoso | Software Engineer | New York City (NYC) - Onsite | https://www.osohq.com/ oso (backed by Sequoia) makes backend infrastructure security not terrible for developers and ops. We provide a normalized and consistent interface to core security controls, like who can access what, and we do so in a way that’s invisible to developers and simple for ops. We are hiring small number of sharp engineers who want to get inv…
Comment linking /
on “Ask HN: Who is hiring? (January 2020)”Submitted Patterns for authorization in microservices as a story · 23 points
HN discussionoso | Software Engineer | New York City (NYC) - Onsite | https://www.osohq.com/ oso (backed by Sequoia) makes backend infrastructure security not terrible for developers and ops. We provide a normalized and consistent interface to core security controls, like authentication and encryption, and we do so in a way that’s invisible to developers and simple for ops. We are hiring small number of sharp engineers who want…
Comment linking /
on “Ask HN: Who is hiring? (November 2019)”Submitted How We Use Rust, SQLx and Rocket for Oso Cloud as a story · 22 points
HN discussionOso | Software Engineer, Developer Advocate, & Eng Manager | New York City (NYC) | Onsite or Remote Over the last 15 years, companies like AWS, Stripe, and Twilio have helped developers offload anything not core to their apps so they can focus on what matters to their users. Despite a lot of progress in developer tooling, most developers still roll their own authorization. You might start with something quick 'n dir…
Comment linking /company/jobs
on “Ask HN: Who is hiring? (July 2021)”Submitted Authorization Patterns in GraphQL as a story · 21 points
HN discussionOso | Engineering Leader, Software Engineer, Developer Experience Engineer, Product Leader | New York City (NYC) | Onsite or Remote # **Old problem, new $10B+ market** Companies like AWS, Stripe, and Twilio have demonstrated that if a technology is not core to your value proposition, you should offload it. Still, every engineering team builds and rebuilds one piece: **authorization**, how you control who has access…
Comment linking /company/jobs
on “Ask HN: Who is hiring? (June 2022)”Submitted Show HN: Oso Authorization for SQLAlchemy as a story · 19 points
HN discussionOso | Engineering Leader, Software Engineer, Developer Experience Engineer, Product Leader | New York City (NYC) | Onsite or Remote Over the last 15 years, companies like AWS, Stripe, and Twilio have helped developers offload anything not core to their apps so they can focus on what matters to their users. Despite a lot of progress in developer tooling, most developers still roll their own authorization. You might s…
Comment linking /company/jobs
on “Ask HN: Who is hiring? (May 2022)”Submitted We Built an LSP-Powered VS Code Extension with Rust, WASM, and TypeScript as a story · 19 points
HN discussionOso | Software Engineer, Developer Advocate, Eng Manager, Product Leader, Docs Product Owner & Technical Writer | New York City (NYC) | Onsite or Remote Over the last 15 years, companies like AWS, Stripe, and Twilio have helped developers offload anything not core to their apps so they can focus on what matters to their users. Despite a lot of progress in developer tooling, most developers still roll their own autho…
Comment linking /company/jobs](https://www.osohq.com/company/jobs)
on “Ask HN: Who is hiring? (November 2021)”Submitted We Built a Cross-Platform Library with Rust as a story · 19 points
HN discussionoso | Software Engineer | New York City (NYC) - Onsite | https://www.osohq.com/ oso (backed by Sequoia) makes backend infrastructure security not terrible for developers and ops. We provide a normalized and consistent interface to core security controls, like authentication and encryption, and we do so in a way that’s invisible to developers and simple for ops. To get from alpha to a production-ready v1, we are hiri…
Comment linking /
on “Ask HN: Who is hiring? (October 2019)”Submitted Why LLM Authorization is Hard as a story · 15 points
HN discussion
