DEV Community

#owasp

Discussions related to the OWASP Foundation, its projects, and Top 10 lists.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

Comments
6 min read
OWASP Top 10 for Agentic Applications: a field guide for coding-agent teams

OWASP Top 10 for Agentic Applications: a field guide for coding-agent teams

Comments
9 min read
OWASP Top 10 for LLM Applications: the three risks that become yours to enforce

OWASP Top 10 for LLM Applications: the three risks that become yours to enforce

Comments
8 min read
PHP2Shell e o resto: o que quebrou no runtime e o que fazer agora

PHP2Shell e o resto: o que quebrou no runtime e o que fazer agora

Comments
3 min read
My AI Agent Never Touches the Database

My AI Agent Never Touches the Database

Comments
3 min read
The Guardian denied both commands. It never read either one.

The Guardian denied both commands. It never read either one.

3
Comments
5 min read
API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

Comments
2 min read
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

4
Comments 5
12 min read
OWASP Hunting: An Open-Source Security Payload Collection

OWASP Hunting: An Open-Source Security Payload Collection

1
Comments
1 min read
agent-ledger: a security and audit plugin for Hermes Agent, scored against the OWASP Agentic Top 10

agent-ledger: a security and audit plugin for Hermes Agent, scored against the OWASP Agentic Top 10

Comments
4 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Comments
8 min read
The Guardian redacted my secret. The Read tool walked around it.

The Guardian redacted my secret. The Read tool walked around it.

3
Comments 2
5 min read
The Guardian blocked the command. The agent told me how to go around it.

The Guardian blocked the command. The agent told me how to go around it.

3
Comments
4 min read
OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it

OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it

Comments
7 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.