DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Stateless auth without a database round-trip: how Bondify's proof model works

Stateless auth without a database round-trip: how Bondify's proof model works

Comments
4 min read
Cloudflare AI Gateway User Insights: Spend Checklist

Cloudflare AI Gateway User Insights: Spend Checklist

Comments
6 min read
Docker Security Dispatch — Issue 5: AI Security, Hugging Face Incident, and Agent Baseline 📡

Docker Security Dispatch — Issue 5: AI Security, Hugging Face Incident, and Agent Baseline 📡

6
Comments 1
9 min read
We Pulled a Rule From Our AI Linter — Here's Why It Made the Tool Better

We Pulled a Rule From Our AI Linter — Here's Why It Made the Tool Better

5
Comments 1
4 min read
SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

Comments
5 min read
Four things get called "someone is spoofing my domain". DMARC fixes one.

Four things get called "someone is spoofing my domain". DMARC fixes one.

Comments 2
4 min read
An SBOM Proves What You Installed. It Can't Prove You Should Have.

An SBOM Proves What You Installed. It Can't Prove You Should Have.

1
Comments
20 min read
Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.

Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.

Comments 6
6 min read
How to Monitor Certificate Transparency Logs for Lookalike Domains

How to Monitor Certificate Transparency Logs for Lookalike Domains

Comments
3 min read
PREDICTION-20260701-0009

PREDICTION-20260701-0009

Comments
7 min read
Cleaning Up Personal References: How Hermes Skills Maintains Security Best Practices

Cleaning Up Personal References: How Hermes Skills Maintains Security Best Practices

Comments
2 min read
The Program Said the Cage Was Locked. I Asked the Kernel.

The Program Said the Cage Was Locked. I Asked the Kernel.

1
Comments 3
7 min read
12 things to check before you ship your vibe-coded app

12 things to check before you ship your vibe-coded app

Comments 2
5 min read
Your Supabase notifications table has RLS on. Anyone signed in can still write into someone else's inbox.

Your Supabase notifications table has RLS on. Anyone signed in can still write into someone else's inbox.

Comments 7
4 min read
We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.