DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Common Cryptographic Anti-Patterns to Avoid in Modern APIs

Common Cryptographic Anti-Patterns to Avoid in Modern APIs

Comments
3 min read
Your Agent Wrote the Audit Log You Are Judging It By

Your Agent Wrote the Audit Log You Are Judging It By

Comments 3
10 min read
Product Leadership in the AI Era: Intent Governance and Token Economics

Product Leadership in the AI Era: Intent Governance and Token Economics

Comments 1
1 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

1
Comments
3 min read
I built flutter_auditor — a zero-config CLI tool to audit Flutter apps for permissions, dead assets, security risks, and package hygiene

I built flutter_auditor — a zero-config CLI tool to audit Flutter apps for permissions, dead assets, security risks, and package hygiene

Comments 1
1 min read
How to Block SQL Injection Attacks with a Free WAF

How to Block SQL Injection Attacks with a Free WAF

5
Comments
3 min read
Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

Comments 1
4 min read
Bring Your Own Keys, Safely: The BYOK Security Model Behind ModelPlane

Bring Your Own Keys, Safely: The BYOK Security Model Behind ModelPlane

Comments
8 min read
How to Detect Cross-Tenant Data Leakage in MCP Servers and Multi-Tenant SaaS

How to Detect Cross-Tenant Data Leakage in MCP Servers and Multi-Tenant SaaS

Comments 1
4 min read
Claude Code Permission Rules and Hooks: The Precedence Order Nobody Documents Clearly

Claude Code Permission Rules and Hooks: The Precedence Order Nobody Documents Clearly

1
Comments 5
4 min read
Your B2B SaaS Isn't Production-Ready Until You Test These 10 Failure Cases

Your B2B SaaS Isn't Production-Ready Until You Test These 10 Failure Cases

Comments 2
3 min read
Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite

Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite

Comments 1
4 min read
SSO Without Giving the Server Your Keys

SSO Without Giving the Server Your Keys

Comments 1
6 min read
Build a Secrets Manager with Python and Encryption

Build a Secrets Manager with Python and Encryption

Comments
5 min read
Threat modeling for a team of six: the version that actually gets done

Threat modeling for a team of six: the version that actually gets done

Comments 2
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.