DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The gate for an agent belongs in the environment, not in the agent

The gate for an agent belongs in the environment, not in the agent

1
Comments 5
2 min read
Where the guardrail lives

Where the guardrail lives

1
Comments
2 min read
When Backward Compat Defends the Bug

When Backward Compat Defends the Bug

1
Comments
2 min read
What Building a Shopify Integration Taught Me About Trusting External APIs

What Building a Shopify Integration Taught Me About Trusting External APIs

1
Comments
4 min read
Read your own GitHub Actions secret back (when base64 gets masked too)

Read your own GitHub Actions secret back (when base64 gets masked too)

Comments
2 min read
Why We Open-Sourced the Encryption Architecture Behind RozVibe

Why We Open-Sourced the Encryption Architecture Behind RozVibe

2
Comments 2
3 min read
Your AI agent's leak risk depends more on the model than the prompt

Your AI agent's leak risk depends more on the model than the prompt

Comments
5 min read
Firebase PWA Security Audit: XSS via innerHTML, Hardcoded Credentials and a Custom Token Migration

Firebase PWA Security Audit: XSS via innerHTML, Hardcoded Credentials and a Custom Token Migration

2
Comments 3
7 min read
Reading a Verified Contract You Didn't Write: A Systematic Approach

Reading a Verified Contract You Didn't Write: A Systematic Approach

1
Comments
3 min read
Data, Context & RAG Lineage Governance for Enterprise AI Agents

Data, Context & RAG Lineage Governance for Enterprise AI Agents

11
Comments
5 min read
Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Comments
17 min read
Nobody Writes Bad Crypto. They Write Correct Crypto at Four Layers.

Nobody Writes Bad Crypto. They Write Correct Crypto at Four Layers.

Comments
4 min read
Your AI Agent in Production Is Not Auditable. August 2026 Changes Everything.

Your AI Agent in Production Is Not Auditable. August 2026 Changes Everything.

4
Comments 21
3 min read
How to Remove EXIF and GPS Metadata Before Sharing a Photo

How to Remove EXIF and GPS Metadata Before Sharing a Photo

5
Comments 11
2 min read
HighLevel webhooks flip X-WH-Signature X-GHL-Signature on July 1, 2026 — three silent failure modes

HighLevel webhooks flip X-WH-Signature X-GHL-Signature on July 1, 2026 — three silent failure modes

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.