Harden Access to OpenClaw with Pomerium
Put OpenClaw, a self-hosted AI assistant with shell and file access, behind a web route and an SSH route, both gated by the same identity and Pomerium's context-aware policy.
iximiuz Labs •
Zero Trust Security
Practical talks, tutorials, videos, and writing about identity-aware access, OAuth, authorization, and policy enforcement for modern infrastructure, including AI agents and MCP servers.
Book me for a talk or guest appearanceLearn
Hands-on material for putting identity and policy at the access boundary.
Native SSH Reverse Tunneling with Pomerium
Use Pomerium's native SSH support to publish a local service through a standard reverse SSH tunnel, with OpenID Connect (OIDC) authentication and continuous authorization on every request.
iximiuz Labs •
Native SSH Access with Pomerium
Pomerium can be used as a native SSH reverse proxy, adding OAuth authentication and flexible Pomerium policy enforcement to standard SSH connections, without the need for tunnels, or custom clients or servers.
iximiuz Labs •
Writing elsewhere
MCP Needs a Security Reality Check
How proxy-enforced OAuth, token separation, auditing, and context-aware authorization close important gaps in production MCP deployments.
The New Stack
2.8 Million Reasons Why You Can't Trust Your VPN
A practical explanation of how Zero Trust replaces perimeter assumptions with identity-aware, context-based access decisions.
The New Stack
Talks
Claws Out: Securing and Building with OpenClaw
AI Engineer Europe •
Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads
All Things Open 2025 •
Secure from Day One: Building Production Ready MCP Servers
MCP Developers Summit EU 2025 •
Agentic Access: OAuth Gets You In, Zero Trust Keeps You Safe
BlackHat USA 2025 •
Zero Trust: From Airports to Identity-Aware Proxies
SREday Redmond 2025 Q2 •
