DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What is CORS and Why Does It Exist?

What is CORS and Why Does It Exist?

1
Comments
3 min read
A Practical Vibe Coding Security Checklist: What Passive Scanners Can and Cannot Prove

A Practical Vibe Coding Security Checklist: What Passive Scanners Can and Cannot Prove

Comments
5 min read
How to Gate Your CI Pipeline on Quantum Vulnerability — with quantum-audit

How to Gate Your CI Pipeline on Quantum Vulnerability — with quantum-audit

2
Comments 2
3 min read
Why I Built Pluto: The Internal Email Validation Engine Behind Keplars

Why I Built Pluto: The Internal Email Validation Engine Behind Keplars

1
Comments 1
5 min read
A Differential Test Harness for Native vs. Generic XDP: Methodology and Baseline

A Differential Test Harness for Native vs. Generic XDP: Methodology and Baseline

Comments
9 min read
Your agent's audit log is a story, not evidence

Your agent's audit log is a story, not evidence

1
Comments 8
7 min read
Security Monday #3: Two Security Issues Found in ClickMigrate

Security Monday #3: Two Security Issues Found in ClickMigrate

Comments
3 min read
Next.js Server Actions Are Public Endpoints: How I Lock Them Down

Next.js Server Actions Are Public Endpoints: How I Lock Them Down

1
Comments
3 min read
Your JWT expiry check is off by 1000x — the NumericDate gotcha

Your JWT expiry check is off by 1000x — the NumericDate gotcha

1
Comments 1
3 min read
Preparing Enterprise Systems for the Post-Quantum Encryption Shift

Preparing Enterprise Systems for the Post-Quantum Encryption Shift

Comments
2 min read
I Built a Free Shadow API Scanner and Found 269 Forgotten Routes in Ghost CMS

I Built a Free Shadow API Scanner and Found 269 Forgotten Routes in Ghost CMS

Comments 1
5 min read
Stop Logging OTP Secrets in Auth Events

Stop Logging OTP Secrets in Auth Events

1
Comments
4 min read
JWT Authentication in Express That You Can Actually Revoke

JWT Authentication in Express That You Can Actually Revoke

1
Comments 2
21 min read
The handshake is the easy part. Agent payments still haven't named the custody split.

The handshake is the easy part. Agent payments still haven't named the custody split.

Comments
2 min read
MCP Observatory: Scan, Test, and Secure MCP Servers Before Agents Depend on Them

MCP Observatory: Scan, Test, and Secure MCP Servers Before Agents Depend on Them

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.