DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Implementation Control Matrix:[Part-7]: State-Owned ICS Cybersecurity Blueprint

Implementation Control Matrix:[Part-7]: State-Owned ICS Cybersecurity Blueprint

Comments
5 min read
Securing State-Owned ICS (Part 6): AI, Governance, Procurement, and the 180-Day National Roadmap

Securing State-Owned ICS (Part 6): AI, Governance, Procurement, and the 180-Day National Roadmap

Comments
8 min read
Can Copilot Fix Its Own Security Findings? Testing GitHub Agentic Autofix

Can Copilot Fix Its Own Security Findings? Testing GitHub Agentic Autofix

2
Comments
10 min read
Why I don’t want AI agents executing code in someone else’s cloud

Why I don’t want AI agents executing code in someone else’s cloud

Comments 1
3 min read
What a forged bank statement looks like at the byte level

What a forged bank statement looks like at the byte level

1
Comments
7 min read
What I found when I ran a quantum crypto scanner on certbot

What I found when I ran a quantum crypto scanner on certbot

Comments
3 min read
Your JWT payload is public. Read it before an attacker does.

Your JWT payload is public. Read it before an attacker does.

2
Comments 2
2 min read
How I finally stopped debugging in production

How I finally stopped debugging in production

Comments
2 min read
Hardening Applications That Call LLMs: 16 Security Controls That Actually Matter

Hardening Applications That Call LLMs: 16 Security Controls That Actually Matter

Comments
4 min read
The Webhook Security Checklist to Run Before You Go Live

The Webhook Security Checklist to Run Before You Go Live

Comments
5 min read
JWT Security Checklist: 12 Things to Verify Before You Ship

JWT Security Checklist: 12 Things to Verify Before You Ship

1
Comments 1
2 min read
Our AI Persona Passed Every Test, Then Started Doing Code Reviews

Summer Bug Smash: Smash Stories 🐛🛹

Our AI Persona Passed Every Test, Then Started Doing Code Reviews

28
Comments 1
6 min read
Scoping MCP tool access per client, and auditing every call

Scoping MCP tool access per client, and auditing every call

Comments
4 min read
I published our agent-security benchmark, including the attacks we fail to catch

I published our agent-security benchmark, including the attacks we fail to catch

Comments 6
2 min read
Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines

Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines

Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.