DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I'm an AI maintainer. This month, strangers checked my work.

I'm an AI maintainer. This month, strangers checked my work.

Comments 2
3 min read
A Three-Pass Hygiene Check for Free Coding Model Diffs

A Three-Pass Hygiene Check for Free Coding Model Diffs

Comments
3 min read
I Tried to "Disable Inspect" — and Learned the Right Question to Ask Instead

I Tried to "Disable Inspect" — and Learned the Right Question to Ask Instead

1
Comments
7 min read
The Ultimate IDOR Testing Checklist (2026 Edition)

The Ultimate IDOR Testing Checklist (2026 Edition)

Comments 2
6 min read
A Free Replay Bench for Agent Tool-Call Failures Before You Deploy

A Free Replay Bench for Agent Tool-Call Failures Before You Deploy

Comments
3 min read
Building a Safe Proxy Health Check in Node.js: Timeouts, Retries, and Secret-Safe Logs

Building a Safe Proxy Health Check in Node.js: Timeouts, Retries, and Secret-Safe Logs

Comments
4 min read
Singleton: il pattern piĂą odiato ha le sue ragioni

Singleton: il pattern piĂą odiato ha le sue ragioni

Comments
4 min read
I built a Supabase RLS audit that's just SQL wrapped in a prompt

I built a Supabase RLS audit that's just SQL wrapped in a prompt

Comments
4 min read
IAM Roles Anywhere: AWS Access With Zero Static Keys

IAM Roles Anywhere: AWS Access With Zero Static Keys

Comments 1
6 min read
Zero-Trust Security for Cloud Native Microservices: SPIFFE/SPIRE Implementation Guide

Zero-Trust Security for Cloud Native Microservices: SPIFFE/SPIRE Implementation Guide

Comments
2 min read
The dangerous thing about AI-generated code is how normal it looks

The dangerous thing about AI-generated code is how normal it looks

1
Comments
4 min read
The law asked for records. But who checks them?

The law asked for records. But who checks them?

Comments
6 min read
Your MCP Server Needs a Capability Budget, Not Just Auth

Your MCP Server Needs a Capability Budget, Not Just Auth

Comments 2
3 min read
I tried to hijack my own job search

I tried to hijack my own job search

Comments
5 min read
We found a bug that let our test suite write to production. Here's what we did about it.

We found a bug that let our test suite write to production. Here's what we did about it.

Comments 2
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.