DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Governing MCP tool calls in Claude Code -- before/after in 3 minutes

Governing MCP tool calls in Claude Code -- before/after in 3 minutes

2
Comments
3 min read
Why I Chose Not to Add Password Reset to an Offline Vault App

Why I Chose Not to Add Password Reset to an Offline Vault App

Comments
4 min read
[Application Security in My Home Lab] Series 1 ~Building a Comprehensive SAST/DAST Pipeline with AI-Enhanced Vulnerability Detection~

[Application Security in My Home Lab] Series 1 ~Building a Comprehensive SAST/DAST Pipeline with AI-Enhanced Vulnerability Detection~

Comments
8 min read
Secure Your Frontend Application (SPA) Login with OAuth 2.1 PKCE

Secure Your Frontend Application (SPA) Login with OAuth 2.1 PKCE

Comments
4 min read
Cryptographic Identity: The Missing Layer in Autonomous AI Agent Accountability

Cryptographic Identity: The Missing Layer in Autonomous AI Agent Accountability

Comments
6 min read
Authentication vs Authorization: What's the Difference?

Authentication vs Authorization: What's the Difference?

Comments
7 min read
Is your REST API actually Quantum-Safe? How to test it in 2026.

Is your REST API actually Quantum-Safe? How to test it in 2026.

Comments
3 min read
[Cloud Security in My Home Lab] Series 1 ~Building a Comprehensive CNAPP Platform with AI-Enhanced Threat Detection~

[Cloud Security in My Home Lab] Series 1 ~Building a Comprehensive CNAPP Platform with AI-Enhanced Threat Detection~

Comments
18 min read
Hunting Vulnerable axios Versions Across Your Node.js Monorepo

Hunting Vulnerable axios Versions Across Your Node.js Monorepo

Comments
3 min read
What actually happens during a TLS handshake and why does it sometimes fail even with a valid certificate?

What actually happens during a TLS handshake and why does it sometimes fail even with a valid certificate?

Comments
3 min read
A Better Way to Handle Docker Secrets — No Cloud, No .env, No Leaks

A Better Way to Handle Docker Secrets — No Cloud, No .env, No Leaks

3
Comments
3 min read
Building an Agent that respects User Permissions — With AWS Bedrock AgentCore and Entra ID

Building an Agent that respects User Permissions — With AWS Bedrock AgentCore and Entra ID

Comments
10 min read
The EU Just Caught 4 Major Porn Sites Breaking the Law — I Checked What They Track

The EU Just Caught 4 Major Porn Sites Breaking the Law — I Checked What They Track

Comments
3 min read
Cryptographic Identity & RBAC for Sovereign AI Agent Accountability

Cryptographic Identity & RBAC for Sovereign AI Agent Accountability

Comments
5 min read
My DDoS Protection Looked Solid Until I Actually Tested It" published

My DDoS Protection Looked Solid Until I Actually Tested It" published

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.