DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
6 ways MCP servers get pwned — and the code that stops each one

6 ways MCP servers get pwned — and the code that stops each one

Comments
3 min read
Before You Give a Coding Agent Shell Access: A Boundary Test Harness You Can Run in an Afternoon

Before You Give a Coding Agent Shell Access: A Boundary Test Harness You Can Run in an Afternoon

Comments
6 min read
Green Tests Lie: How I Gate AI-Generated Patches Before They Touch Main

Green Tests Lie: How I Gate AI-Generated Patches Before They Touch Main

Comments
5 min read
Your AI Coding Agent Has Tools. Here's a Test Suite for the Sandbox You Hope It Respects

Your AI Coding Agent Has Tools. Here's a Test Suite for the Sandbox You Hope It Respects

Comments
5 min read
Fuzz Your Agent's Tool Calls Before You Ship: A Reproducible Boundary Test Harness

Fuzz Your Agent's Tool Calls Before You Ship: A Reproducible Boundary Test Harness

Comments
6 min read
Gate the Tools, Not the Hype: A Practical Pre-Flight Check for Coding Agents

Gate the Tools, Not the Hype: A Practical Pre-Flight Check for Coding Agents

Comments
7 min read
Red-Teaming AI Coding Agents Without a Budget: A Boundary Test Suite on Free Models

Red-Teaming AI Coding Agents Without a Budget: A Boundary Test Suite on Free Models

Comments
6 min read
Inside DDoS Mitigation: The Methods and Tools That Keep Modern Websites Online

Inside DDoS Mitigation: The Methods and Tools That Keep Modern Websites Online

Comments
8 min read
CRLite: Fitting Every Revoked Certificate in Your Browser

CRLite: Fitting Every Revoked Certificate in Your Browser

Comments
5 min read
Your AI Agent Has Access to Your Database. What Could Go Wrong?

Your AI Agent Has Access to Your Database. What Could Go Wrong?

Comments
5 min read
How to Secure Your WordPress Dashboard and Prevent Clients from Breaking Their Sites

How to Secure Your WordPress Dashboard and Prevent Clients from Breaking Their Sites

Comments
2 min read
How I vet MCP servers before trusting them in my agent

How I vet MCP servers before trusting them in my agent

3
Comments
3 min read
The Receipt Was Cryptographically Valid. The Action Didn't Match the Judgment.

The Receipt Was Cryptographically Valid. The Action Didn't Match the Judgment.

1
Comments 1
11 min read
Your Agent Reads Untrusted Text All Day. Here's How I Grade What It Does With It.

Your Agent Reads Untrusted Text All Day. Here's How I Grade What It Does With It.

Comments
6 min read
How to Build an Attack-Surface Inventory from Certificate Transparency

How to Build an Attack-Surface Inventory from Certificate Transparency

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.