#security

Move your team off shared and per-user virtual API keys and onto identity-based access for your AI gateway - no keys to generate, distribute, or rotate for human users.

• ai
• security
• zero-trust
• getting-started

Virtual API keys solve model routing and budgeting well, but they were never built to be an identity system. Here's where that gap shows up in self-hosted LiteLLM and Bifrost deployments, and what to do instead.

• ai
• security
• zero-trust
• self-hosted

Learn what MCP tunnels are, how they connect AI agents to private Model Context Protocol servers over outbound-only connections, and why they matter for enterprise security.

• mcp
• zero-trust
• networking
• security
• ai

Use these remote access policy examples to scope access for admins, contractors, OT systems, internal web apps, and emergency workflows.

• remote-access
• security
• access-control
• zero-trust

Learn how to modernize secure remote access with identity-driven ZTNA, resource-level policy, and reduced public exposure.

• ztna
• zero-trust
• enterprise
• security

Learn what an identity-aware proxy is, how it compares to VPNs and ZTNA, and how Pangolin protects private web apps.

• authentication
• zero-trust
• security
• architecture

Modernize enterprise SSH with identity-driven access, short-lived credentials, and private connectivity instead of static keys.

• ssh
• enterprise
• security

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

• ztna
• zero-trust
• security

Learn how to use Pangolin rules to geo-block resources and limit access by country or region.

• security
• networking
• access-control