Dev Advocate & Software Engineer @pomerium_io GitHub Star | AAIF Ambassador | MS MVP | AWS Community Builder
Montreal, Quebec 🇨🇦
Joined December 2011
- Tweets32K
- Following1.6K
- Followers5.8K
- Likes80.1K
Pinned Tweet
My talk from @githubuniverse is up! If you missed the session, you can catch the replay 👇 #GitHubUniverse
youtube.com/watch?v=mxd-ZdSD…
Nick Taylor retweeted
You guys! I didn't want to showcase live Solid Server Components until I was ready. But man is this cool!
Solid’s `broadcast` on the new Netlify Server. One server render streams this live table to every open tab.
dbmon-sc.netlify.app/
Nick Taylor retweeted
Now you can build pretty much anything on Netlify.
Edge, backend server and database in one place and with the same simplicity and delight that you've hopefully come to expect from us!
Nick Taylor retweeted
🆕 Designing for Agents
Agent Experience is one of the most hotly contested topics of 2026, and increasingly critical for devtools/infra companies to get right. @ZenoRocha has been writing and thinking about this since 2024 and came on the pod to spill @Resend secrets!
youtu.be/bdIoODXsu8k
Key themes include:
- Answer Engine Optimization (AEO): how AI models like Claude Code recommend email services and how product teams can design for these agents
- Deliverability and Trust: The discussion delves into the complexities of getting mail into the inbox, including handling bursts, managing Gmail throttling, and the importance of domain reputation and anti-abuse measures
- Developer Experience & MCP: A major focus is on building for both humans and machines. Resend utilizes the Model Context Protocol (MCP) to provide agents with over 80 named tools, allowing them to autonomously set up accounts, check pricing in Markdown, and send emails
- Technical Infrastructure: React Email as a wedge for adoption and but Resend's commitment to owning the mail stack, including managing complex DNS hurdles and providing enterprise-level visibility
Nick Taylor retweeted
💥Modern Web Guidance has reached 1.0!
Coding models get stuck in old training data, MWG is a set of skills that’s vetted by industry experts. It helps with perf, a11y, security, and state of the art web tech
Easy to get started:
🛠️ npx modern-web-guidance@latest install
Or you can do a per agent install.
youtube.com/watch?si=fV5ARZi…
Working on level 2 of Pomerium Quest! You get an owl to help you along the way.
ALT Pomerium Quest level 2 wip
1
2
163
Follow the progress here github.com/nickytonline/pome…
42
Nick Taylor retweeted
Getting tokens out of an open-source model is only the beginning.
The real work is evaluating it, governing it, fine-tuning it, securing it, and building agents that can perform specialized tasks.
That’s how you turn an interesting model into something useful to a business.
Nick Taylor retweeted
Holy shit. There's no patch for this, and every shell has been vulnerable since 1971. 💀
terminal2shell.com
Looking forward to speaking on the XtremeJS 2026 panel tomorrow to discuss the future of software development!
Come hang with us!
xtremejs.dev
ALT Nick Taylor Participating in the upcoming panel: The Future of Software Development XtremeJS 2026 Online Conference
Nick Taylor retweeted
I'm going to be spreading the word of @EmDashCMS at @CMSconf_ 🇵🇱 this week, with a talk and a workshop with @itsNoahPham. If you're there come and say hi, or just tell me to get the name WordPress out of my filthy mouth
ALT WordPress gives every plugin unrestricted access to your database and filesystem. That security model is from 2003. At #cmsconf I'm talking about what a CMS built today would look like: serverless, type-safe, sandboxed plugins, and AI-native from day one. You'll understand how EmDash approaches the fundamental security problem of plugin architectures, and why serverless and AI-native design aren't just buzzwords here. Grab a ticket with 40% off: CTRL-ALT-DISCOUNT.
Nick Taylor retweeted
JPMorgan's CISO says teams should evaluate pulling services off the open internet.
Not to lock customers out. So anonymous agents can't poke at your apps.
Agents make probing cheap. The fix is old: an identity-aware proxy in front of each app, scoped authz, blast radius of one.
Put my @github shop gift card to good use and finally got the shorts to go with the top. Full Cabana wear achieved internally. Also scored another coffee mug.
Thanks GitHub!
ALT GitHub package
ALT Individually wrapped items like GitHub box
ALT GitHub cabana shorts
ALT GitHub coffee mug
4
10
358
Nick Taylor retweeted
If you're only working on vulnerability management, then you're only focusing on 1/3 of the problem.
If you prioritize breaking the attack paths around lateral movement and abuse of authorized access, then you're addressing all of the major attack vectors at once (vulnerabilities, phishing, stolen credentials, social engineering, software supply-chain, etc).
People love to focus on finding and fixing vulnerabilities because it feels good in the same way that running laps around a circular track feels good. You're moving fast and having predictable, repeatable tasks, but not actually getting anywhere.
Some of the biggest openings in security have nothing to do with patching
How breaches began, per a 2026 report:
- 31% exploited a vulnerability
- 35% used phishing, stolen logins or impersonation scams
And nearly half now involve a vendor or partner, up 3x since 2024
Full piece from a16z's Asaf Ezra and Steph Zhang on six cybersecurity companies worth building: a16z.news/p/defense-in-depth…
Nick Taylor retweeted
security architecture fundamentals are more important than ever before
if you’re working for a company in cybersecurity, you should be evaluating your options to abstract your companies services from the internet
what i mean is: why allow an unauthenticated anonymous agent of an attacker to interact with your systems?
consider your architectural levers now, you’re going to need them