DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your Agent Wrote the Audit Log You Are Judging It By

Your Agent Wrote the Audit Log You Are Judging It By

Comments 3
10 min read
Product Leadership in the AI Era: Intent Governance and Token Economics

Product Leadership in the AI Era: Intent Governance and Token Economics

Comments 1
1 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

1
Comments
3 min read
How to Block SQL Injection Attacks with a Free WAF

How to Block SQL Injection Attacks with a Free WAF

5
Comments
3 min read
I built flutter_auditor — a zero-config CLI tool to audit Flutter apps for permissions, dead assets, security risks, and package hygiene

I built flutter_auditor — a zero-config CLI tool to audit Flutter apps for permissions, dead assets, security risks, and package hygiene

Comments 1
1 min read
Bring Your Own Keys, Safely: The BYOK Security Model Behind ModelPlane

Bring Your Own Keys, Safely: The BYOK Security Model Behind ModelPlane

Comments
8 min read
Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

Comments 1
4 min read
How to Detect Cross-Tenant Data Leakage in MCP Servers and Multi-Tenant SaaS

How to Detect Cross-Tenant Data Leakage in MCP Servers and Multi-Tenant SaaS

Comments 1
4 min read
Claude Code Permission Rules and Hooks: The Precedence Order Nobody Documents Clearly

Claude Code Permission Rules and Hooks: The Precedence Order Nobody Documents Clearly

1
Comments 5
4 min read
Your B2B SaaS Isn't Production-Ready Until You Test These 10 Failure Cases

Your B2B SaaS Isn't Production-Ready Until You Test These 10 Failure Cases

Comments 2
3 min read
Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite

Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite

Comments 1
4 min read
SSO Without Giving the Server Your Keys

SSO Without Giving the Server Your Keys

Comments 1
6 min read
Build a Secrets Manager with Python and Encryption

Build a Secrets Manager with Python and Encryption

Comments
5 min read
Threat modeling for a team of six: the version that actually gets done

Threat modeling for a team of six: the version that actually gets done

Comments 2
4 min read
Two Verifiers, One Verdict: Closing the 'Self-Reported Exit Code' Hole

Two Verifiers, One Verdict: Closing the 'Self-Reported Exit Code' Hole

3
Comments 2
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.