#security

Learn what an AI gateway is, how it sits between applications, agents, and models, and how it differs from API, LLM, and MCP gateways.

Why an identity-aware proxy is harder to make highly available than a normal load balancer, and how to self-host one that stays up without sending traffic through someone else's cloud.

Move your team off shared and per-user virtual API keys and onto identity-based access for your AI gateway - no keys to generate, distribute, or rotate for human users.

Virtual API keys solve model routing and budgeting well, but they were never built to be an identity system. Here's where that gap shows up in self-hosted LiteLLM and Bifrost deployments, and what to do instead.

Learn what MCP tunnels are, how they connect AI agents to private Model Context Protocol servers over outbound-only connections, and why they matter for enterprise security.

Use these remote access policy examples to scope access for admins, contractors, OT systems, internal web apps, and emergency workflows.

Learn how to modernize secure remote access with identity-driven ZTNA, resource-level policy, and reduced public exposure.

Learn what an identity-aware proxy is, how it compares to VPNs and ZTNA, and how Pangolin protects private web apps.

Modernize enterprise SSH with identity-driven access, short-lived credentials, and private connectivity instead of static keys.

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

Learn how to use Pangolin rules to geo-block resources and limit access by country or region.