DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Hiding the Button Isn't Authorization: Why You Must Gate the Request

Hiding the Button Isn't Authorization: Why You Must Gate the Request

Comments
3 min read
How to spot a honeypot token before you buy (and automate the whole checklist)

How to spot a honeypot token before you buy (and automate the whole checklist)

Comments
3 min read
HTLC Expiry and Force Close: The Most Dangerous Moments in Lightning

HTLC Expiry and Force Close: The Most Dangerous Moments in Lightning

1
Comments
8 min read
Learn AI SDK 7 Scoped Tool Context With a Two-Tool Secret Boundary

Learn AI SDK 7 Scoped Tool Context With a Two-Tool Secret Boundary

1
Comments
3 min read
30+ Anti-Fraud Rules Engine: Real-Time Risk Control with Zero API Cost

30+ Anti-Fraud Rules Engine: Real-Time Risk Control with Zero API Cost

Comments
2 min read
OAUTH2.0 In Action — A Guide To Implementing OAUTH In Apps and Websites.

OAUTH2.0 In Action — A Guide To Implementing OAUTH In Apps and Websites.

Comments
5 min read
Making LLM security verdicts verifiable: the evidence gate pattern

Making LLM security verdicts verifiable: the evidence gate pattern

Comments
2 min read
The Expensive Part of Persona Agents Is Identity

The Expensive Part of Persona Agents Is Identity

3
Comments
4 min read
Cloudflare's Flexible SSL looks secure. It isn't.

Cloudflare's Flexible SSL looks secure. It isn't.

1
Comments
3 min read
Intercepting Your First Request with Burp Suite Community Edition on Windows

Intercepting Your First Request with Burp Suite Community Edition on Windows

Comments
2 min read
The AI Agent Permission Model You Need Before Production

The AI Agent Permission Model You Need Before Production

Comments
5 min read
Red-Teaming Your Own AI Agent: A TypeScript Test Suite

Red-Teaming Your Own AI Agent: A TypeScript Test Suite

Comments
5 min read
Multi-Tenant RAG in TypeScript: Keeping One Customer's AI Out of Another's Data

Multi-Tenant RAG in TypeScript: Keeping One Customer's AI Out of Another's Data

1
Comments 1
5 min read
Testing Kubernetes NetworkPolicies Before They Hit Production

Testing Kubernetes NetworkPolicies Before They Hit Production

Comments
6 min read
Meta's AI Hacked a Company. The Safety Test Was the Weak Link

Meta's AI Hacked a Company. The Safety Test Was the Weak Link

Comments 1
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.