DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Secure PLC Lifecycle Management

Secure PLC Lifecycle Management

Comments
7 min read
Grading a Website's Security Headers Automatically (HSTS, CSP, X-Frame-Options) in One API Call

Grading a Website's Security Headers Automatically (HSTS, CSP, X-Frame-Options) in One API Call

Comments 4
4 min read
Audit BYOK Model Endpoints Before Your AI Agent Gets the Key

Audit BYOK Model Endpoints Before Your AI Agent Gets the Key

Comments
3 min read
AI Access Control for Enterprise AI: Turning Policy Into Runtime Enforcement

AI Access Control for Enterprise AI: Turning Policy Into Runtime Enforcement

11
Comments 11
7 min read
Shadow AI Discovery and Inventory Management: Building Automated Detection Systems for Enterprise Security

Shadow AI Discovery and Inventory Management: Building Automated Detection Systems for Enterprise Security

Comments
4 min read
What Replacing Calendly Taught Me About Trusting Open Source

Sparked by SaaS limits and privacy shifts

What Replacing Calendly Taught Me About Trusting Open Source

38
Comments 66
11 min read
How Shopify Auth Actually Works (4 Flows, One App)

How Shopify Auth Actually Works (4 Flows, One App)

Comments
6 min read
Catch Risky IAM in Your CDK App Before cdk deploy

Catch Risky IAM in Your CDK App Before cdk deploy

Comments
2 min read
The five-minute SBOM sniff test earns its keep

The five-minute SBOM sniff test earns its keep

Comments
3 min read
agent-authz: Least-Privilege Authorization for AI Agent Tool Calls

agent-authz: Least-Privilege Authorization for AI Agent Tool Calls

Comments
4 min read
Turn the Linux GhostLock Report Into a Fleet Patch Plan

Turn the Linux GhostLock Report Into a Fleet Patch Plan

Comments
1 min read
How Logically Inconsistent Prompts Can Turn Reasoning Models Into a DoS Problem

How Logically Inconsistent Prompts Can Turn Reasoning Models Into a DoS Problem

Comments
4 min read
How to Test AI-Powered Web Apps Without Treating the Model Like a Normal API

How to Test AI-Powered Web Apps Without Treating the Model Like a Normal API

6
Comments
6 min read
How I Built an Automated Web Vulnerability Scanner with Python and OWASP ZAP

How I Built an Automated Web Vulnerability Scanner with Python and OWASP ZAP

Comments
2 min read
Origin Part 19: The Number Was Wrong

Origin Part 19: The Number Was Wrong

Comments 1
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.