DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default

kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default

Comments
7 min read
I built a secret scanner that tries to answer “is this secret actually live?"

I built a secret scanner that tries to answer “is this secret actually live?"

Comments
2 min read
OAuth Signup Needs More Than Email Proof

OAuth Signup Needs More Than Email Proof

5
Comments 1
4 min read
I Told a PR Nothing Would Break. Qodo Checked.

I Told a PR Nothing Would Break. Qodo Checked.

13
Comments
4 min read
JWT Tokens: The Modern Authentication/Authorization

JWT Tokens: The Modern Authentication/Authorization

2
Comments 1
2 min read
Your AI Coding Agent Says “Tests Pass.” But Did It Actually Run Them?

Your AI Coding Agent Says “Tests Pass.” But Did It Actually Run Them?

17
Comments 24
5 min read
husk: I extracted the sandbox from my last project, and made the tests do the talking

husk: I extracted the sandbox from my last project, and made the tests do the talking

1
Comments
4 min read
I automated my injection tests, and my first automated result was wrong 👾

I automated my injection tests, and my first automated result was wrong 👾

Comments
6 min read
The Agent Doesn't Have to Be Malicious for the Action to Be Dangerous

The Agent Doesn't Have to Be Malicious for the Action to Be Dangerous

1
Comments
6 min read
Ten Things to Wire Up Before an Agent Touches Production

Ten Things to Wire Up Before an Agent Touches Production

Comments
5 min read
Anything a model can be talked out of is not a security boundary

Anything a model can be talked out of is not a security boundary

Comments 5
4 min read
How an AI agent works in your logged-in browser: extension vs CDP relay vs cloud browser

How an AI agent works in your logged-in browser: extension vs CDP relay vs cloud browser

Comments 1
5 min read
One Floor Up

One Floor Up

1
Comments
6 min read
GPT-6 Astra Crossed the Cyber-Critical Threshold. Your Agent Architecture Must Change.

GPT-6 Astra Crossed the Cyber-Critical Threshold. Your Agent Architecture Must Change.

Comments
6 min read
N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day

N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day

1
Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.