DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I audited my own AI-built SaaS expecting a disaster. The payment logic was fine — but two things almost drained my API bill and leaked my keys.

I audited my own AI-built SaaS expecting a disaster. The payment logic was fine — but two things almost drained my API bill and leaked my keys.

Comments
5 min read
Why does your local database data leave your network for a query?

Why does your local database data leave your network for a query?

Comments
1 min read
We Replaced a Custom SSO with Keycloak Across 8 Applications

We Replaced a Custom SSO with Keycloak Across 8 Applications

Comments
2 min read
An identity provider told us who you were, and we believed it

An identity provider told us who you were, and we believed it

1
Comments
4 min read
How I Pushed My .env and Database to GitHub (And How to Fix It)

How I Pushed My .env and Database to GitHub (And How to Fix It)

Comments 1
3 min read
Stop Auth Flickers: Edge Middleware in Next.js ⚡

Stop Auth Flickers: Edge Middleware in Next.js ⚡

2
Comments
2 min read
Why Cosine Similarity Fails to Catch Confusable MCP Tools

Why Cosine Similarity Fails to Catch Confusable MCP Tools

2
Comments 2
3 min read
Card-Testing Bots Will Find Your Checkout the Day You Launch. Here's the Pre-Charge Filter That Stops Them.

Card-Testing Bots Will Find Your Checkout the Day You Launch. Here's the Pre-Charge Filter That Stops Them.

1
Comments
4 min read
Human-in-the-Loop AI: Why 'Ask the LLM to Confirm' Isn't Enough

Human-in-the-Loop AI: Why 'Ask the LLM to Confirm' Isn't Enough

Comments
5 min read
Four short papers on making AI-assisted work re-checkable

Four short papers on making AI-assisted work re-checkable

2
Comments 1
1 min read
I Put a Canary Token in My Resume and Caught a Company Stalking Me

I Put a Canary Token in My Resume and Caught a Company Stalking Me

7
Comments 1
8 min read
Beyond the Grid: Building Secure, Zero-Cost B2B Client Portals on Google Sheets

Beyond the Grid: Building Secure, Zero-Cost B2B Client Portals on Google Sheets

1
Comments
3 min read
88% of Teams Had an Agent Security Incident Last Year. Red-Teaming Is a Data Problem, Not a Tooling One.

88% of Teams Had an Agent Security Incident Last Year. Red-Teaming Is a Data Problem, Not a Tooling One.

1
Comments
6 min read
Understanding Shannon entropy: A brief into quantifying Information

Understanding Shannon entropy: A brief into quantifying Information

1
Comments
4 min read
I Built an Open-Source Exposure Scanner That Finds What Attackers See Before They Do

I Built an Open-Source Exposure Scanner That Finds What Attackers See Before They Do

1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.