DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The delegate your agent trusts by shape

The delegate your agent trusts by shape

Comments
3 min read
I Stopped Trusting AI Agents With Tools. So I Built a Gatekeeper.

83 real agents tested zero mocks

I Stopped Trusting AI Agents With Tools. So I Built a Gatekeeper.

54
Comments 61
14 min read
Solon Config Vault: ENC() Secrets, @VaultInject, and a Runtime Key — No Jasypt, No Config Server

Solon Config Vault: ENC() Secrets, @VaultInject, and a Runtime Key — No Jasypt, No Config Server

Comments
4 min read
C2 Communication Protocols: A Comprehensive Technical Analysis

C2 Communication Protocols: A Comprehensive Technical Analysis

2
Comments 2
37 min read
Tailscale VPN Exit Node with Split-Tunneling using WireGuard and Namespaces

Tailscale VPN Exit Node with Split-Tunneling using WireGuard and Namespaces

Comments 1
10 min read
Aeglix Mind

Aeglix Mind

Comments
3 min read
Tool Gating for AI Agents

Tool Gating for AI Agents

Comments 2
2 min read
Validate Telegram Mini App initData in PHP: HMAC-SHA-256, timing-safe compare, and auth_date expiry

Validate Telegram Mini App initData in PHP: HMAC-SHA-256, timing-safe compare, and auth_date expiry

Comments 1
4 min read
Safer Email Change Flows Start With Proof

Safer Email Change Flows Start With Proof

1
Comments 1
4 min read
Agent Security Attack Surface Analysis: A Risk Map and Defense Playbook

Agent Security Attack Surface Analysis: A Risk Map and Defense Playbook

2
Comments 2
8 min read
What Is a JWT? JSON Web Tokens Explained Simply

What Is a JWT? JSON Web Tokens Explained Simply

Comments 1
3 min read
Your CI Pipeline Has a Security Gap That Isn't a Vulnerability

Your CI Pipeline Has a Security Gap That Isn't a Vulnerability

1
Comments
8 min read
I tried to prove AI writes insecure WordPress code. 32 runs later, I could not.

I tried to prove AI writes insecure WordPress code. 32 runs later, I could not.

Comments
6 min read
حارس ويب: أول أداة أمن سيبراني عربية سويتها كطالب ثانوي

حارس ويب: أول أداة أمن سيبراني عربية سويتها كطالب ثانوي

Comments
1 min read
Deal-scoped PASETO: three things I got wrong about audience-bound tokens

Deal-scoped PASETO: three things I got wrong about audience-bound tokens

Comments 3
9 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.