February 24-26, 2027
Montreal, Canada
Claws Out: Identity-Aware Access for an Autonomous Agent
Running an autonomous agent like OpenClaw without hardening access to it is a bad idea. This talk covers securing OpenClaw ingress: OIDC login, short-lived SSH certificates, per-connection policy, and live session revocation, using Pomerium, an open core (Apache 2.0) identity-aware proxy built on Envoy, a CNCF project. Includes a PR I contributed upstream (trusted-proxy auth mode) and a live demo killing an active session mid-task.
Nick Taylor
Pomerium
Nick is a Microsoft MVP, GitHub Star, Software Developer, and Developer Advocate. With over two decades in technology and a decade of open source contributions, plus five years of professional open source work at companies like OpenSauced, dev.to, and Netlify, he brings deep community knowledge to his work. You'll often find him live streaming tech content, either solo or with friends from the community.
