DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Building Fast with Claude Code Is Easy. Securing the App Is the Hard Part

Building Fast with Claude Code Is Easy. Securing the App Is the Hard Part

16
Comments 2
6 min read
Vaultwarden-Plus v1.36.3: Organization Account Recovery — without breaking zero-knowledge

Vaultwarden-Plus v1.36.3: Organization Account Recovery — without breaking zero-knowledge

1
Comments
2 min read
Your CORS proxy is an SSRF engine: how to harden a URL fetcher

Your CORS proxy is an SSRF engine: how to harden a URL fetcher

Comments
3 min read
From Passwords to Token-based Authentication

From Passwords to Token-based Authentication

Comments
7 min read
A payment gateway for MCP servers, and the security bugs I found in my own code first

A payment gateway for MCP servers, and the security bugs I found in my own code first

1
Comments 3
6 min read
Building a DMARC Report Parser and Dashboard in Python

Building a DMARC Report Parser and Dashboard in Python

1
Comments
5 min read
6 Security Holes We Keep Finding in Vibe-Coded Apps

6 Security Holes We Keep Finding in Vibe-Coded Apps

Comments
4 min read
Who holds the key, and why it's the whole game

Who holds the key, and why it's the whole game

1
Comments
6 min read
A URL Is Only Safe for the Sink That Consumes It

A URL Is Only Safe for the Sink That Consumes It

Comments
4 min read
Why Your SAST Scanner Misses 86% of Real Vulnerabilities

Why Your SAST Scanner Misses 86% of Real Vulnerabilities

Comments
7 min read
What Cipher Is This? A Field Guide to Identifying Unknown Ciphers

What Cipher Is This? A Field Guide to Identifying Unknown Ciphers

Comments
4 min read
Audit an AI Coding Agent's Network Egress Before It Gets a Shell

Audit an AI Coding Agent's Network Egress Before It Gets a Shell

1
Comments 1
5 min read
The API Key Privilege Trap: Why AI Agents Require Granular Endpoint Boundaries

The API Key Privilege Trap: Why AI Agents Require Granular Endpoint Boundaries

5
Comments
3 min read
How to secure AI generated code from prompt to pentest

How to secure AI generated code from prompt to pentest

2
Comments
3 min read
When Agents Lie to Maintainers, the Sandbox Already Failed

When Agents Lie to Maintainers, the Sandbox Already Failed

1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.