DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
حارس ويب: أول أداة أمن سيبراني عربية سويتها كطالب ثانوي

حارس ويب: أول أداة أمن سيبراني عربية سويتها كطالب ثانوي

Comments
1 min read
Deal-scoped PASETO: three things I got wrong about audience-bound tokens

Deal-scoped PASETO: three things I got wrong about audience-bound tokens

Comments 3
9 min read
How to read a DMARC aggregate report without losing your mind

How to read a DMARC aggregate report without losing your mind

Comments
4 min read
Let the Agent Propose, Let the Pipeline Commit: A Staged Gate for AI-Assisted Changes

Let the Agent Propose, Let the Pipeline Commit: A Staged Gate for AI-Assisted Changes

Comments 1
5 min read
Where the guardrail lives

Where the guardrail lives

Comments
2 min read
When Backward Compat Defends the Bug

When Backward Compat Defends the Bug

Comments
2 min read
What it took to ship a production remote MCP server with OAuth 2.1

What it took to ship a production remote MCP server with OAuth 2.1

Comments 2
2 min read
The Agent Safety Gap Nobody Budgets For

The Agent Safety Gap Nobody Budgets For

Comments
3 min read
How to Scrape and Parse CVE Data from NVD API v2

How to Scrape and Parse CVE Data from NVD API v2

Comments
5 min read
How a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked Correct

How a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked Correct

Comments
1 min read
Stop letting your AI guess: The case for deterministic Regex in MCP

Stop letting your AI guess: The case for deterministic Regex in MCP

1
Comments
4 min read
Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

Comments
6 min read
Sole developer on a national SSO platform for six months, with Claude writing most of the code

Sole developer on a national SSO platform for six months, with Claude writing most of the code

Comments
5 min read
A Practical MCP Server Health Check: 6 Signals Before You Install

A Practical MCP Server Health Check: 6 Signals Before You Install

Comments
3 min read
Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

1
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.