Top all-time · #6097
Pomerium
Company blog · pomerium.com/blogsecurityweb
Pomerium is the company blog at pomerium.com, writing about security and web. Since 2022, 13 different Hacker News readers have linked it 59 times. It is still writing: the last post was on 2026-09-16, and you can follow it by feed.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
HN commenters link Pomerium's site and guides for its identity-aware proxy, covering Kubernetes access, mTLS upstreams and zero trust access control. The comments mostly describe the product and its docs.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Protect private applications and services with identity-aware access that evaluates every request from users, services, and AI agents.
Most-linked posts?
- /2 people · 2 mentions · first linked 2022-05-05
What Hacker News says?
Constructing a new OAuth2/OIDC Identity Provider from the ground up is an undertaking fraught with complexity – and not of the elegant variety. The reasons are numerous, entrenched, and maddeningly persistent. 1. OAuth2 and OIDC are inherently intricate and alarmingly brittle – the specifications, whilst theoretically robust, leave sufficient ambiguity to spawn implementation chaos. 2. The proliferation of standards…
Comment linking /blog/5-lessons-learned-connecting-every-idp-to-oidc
on “Okta's NextJS-0auth troubles”Submitted The new White House memo on zero trust is a strong signal as a story · 205 points
HN discussionPomerium | Senior Software Engineer (Go, C++) | Remote (US/CA) | https://www.pomerium.com Pomerium builds identity and access management infrastructure for the internet. We’re helping small startups and the world’s biggest companies improve their security posture, facilitate distributed remote work, and scale their efforts globally. And we’d like your help. Pomerium recently raised a $13.75 million Series A funding…
Comment linking /careers/senior-software-engineer
on “Ask HN: Who is hiring? (June 2025)”Submitted Employees Are Already Dumping Company Data to LLMs and What to Do About It as a story · 10 points
HN discussionQuick note since it was mentioned. Pomerium does support Kubernetes at pretty much every level you mentioned (although I'm not entirely sure what a "a complete Kubernetes-tier platform" means) including: - "remote access" : https://www.pomerium.com/docs/capabilities/kubernetes-access - "access control" https://www.pomerium.com/docs/capabilities/authorization - "visibility and auditing" : https://www.pomerium.com/doc…
Comment linking /docs/deploy/k8s/gateway-api
on “Show HN: Octelium – FOSS Alternative to Teleport, Cloudflare, Tailscale, Ngrok”Submitted When AI Has Root: Lessons from the Supabase MCP Data Leak as a story · 8 points
HN discussionAh, I thought the name was familiar. They have a good zero trust reverse proxy that I deployed on k8s a few years back. https://www.pomerium.com/guides/kubernetes.html
Comment linking /guides/kubernetes.html
on “The new White House memo on zero trust is a strong signal”Submitted Designing Smarter Health Checks for Pomerium as a story · 6 points
HN discussionYou might just want to integrate a policy rules engine like open policy agent: https://www.openpolicyagent.org/ It can act as a server which you bounce a subrequest against to get an authorization answer from a policy you defined ahead of time with a simple language. And if you don't have time or want to do that, check out Pomerium it's basically a forward auth proxy with OPA policy engine integrated into it already…
Comment linking /
on “Tailscale Authentication for Nginx”Submitted Q&A with NIST's Zero Trust Architecture Writers as a story · 6 points
HN discussionI used https://pomerium.com in the past for homelab. It builds around https://envoyproxy.io .
Comment linking /
on “HashiCorp archives the Boundary open source repo”Submitted It's always DNS part ∞: tracking down a use-after-free bug in Envoy's DNS as a story · 5 points
HN discussionIf your organization can support provisioning and managing certs for end users, you can do that too ( https://www.pomerium.com/guides/mtls.html ). This is talking about the connection between the identity-aware proxy (Pomerium) running in your local network, and the upstream service. It prevents someone with unauthorized access into your local network from talking directly to the service. Does this explain the conte…
Comment linking /guides/mtls.html
on “Upstream mTLS with Pomerium”Submitted Sometimes Postgres Isn't the Answer as a story · 5 points
HN discussionhttps://www.pomerium.com/comparisons/tailscale-with-pomerium... The tools do different things. Pomerium plays well with Tailscale.
Comment linking /comparisons/tailscale-with-pomerium/
on “Unpacking the Benefits of Zero Trust Architecture as Defined by NIST”Submitted A case against Layer 4 security tools as a story · 5 points
HN discussionA curated list of awesome Model Context Protocol solutions for for building, finding, hosting, learning, securing, and using MCP offerings. Sharing the current list here : --- Private Registries Ready-to-use pluggable MCP server implementations where MCP servers and tools are managed by the organization. They usually come with auth, guardrails, observability and more. Composio ( https://composio.dev ) - Skills that…
Comment linking /
on a deleted threadSubmitted Pomerium v0.16 Is Live as a story · 5 points
HN discussionSubmitted Pomerium v0.27 as a story · 4 points
HN discussionSubmitted VPNs Are Killing Productivity as a story · 4 points
HN discussionSubmitted Security Is Usability – Examining Cybersecurity Erosion as a story · 3 points
HN discussionSubmitted CrowdStrike Is a Harsh Reminder of the Danger of Third-Party Clients as a story · 3 points
HN discussionSubmitted Trends Shaping the Future of Access Control as a story · 3 points
HN discussionSubmitted Teleport vs. Pomerium as a story · 3 points
HN discussionSubmitted Implement SASE for results, not components as a story · 3 points
HN discussionSubmitted Minimizing CORS Misconfigurations as a story · 3 points
HN discussionSubmitted Upstream mTLS with Pomerium as a story · 3 points
HN discussionSubmitted Identity-aware SSH proxy using your OS native SSH client as a story · 2 points
HN discussionSubmitted Best Model Context Protocol (MCP) Servers as a story · 2 points
HN discussionSubmitted September Data Breach News Compilation as a story · 2 points
HN discussion