DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
PCI-DSS, ISO 27001, ISO 27701 e ISO 27018: o que cada um cobre e como se relacionam

PCI-DSS, ISO 27001, ISO 27701 e ISO 27018: o que cada um cobre e como se relacionam

Comments
11 min read
Why I Built an Adversarial Co-Generation Engine

Why I Built an Adversarial Co-Generation Engine

4
Comments
3 min read
We built a free API for software end-of-life dates and risk scores (460+ products)

We built a free API for software end-of-life dates and risk scores (460+ products)

Comments
2 min read
Next.js Server Actions Are Public Endpoints: How I Lock Them Down

Next.js Server Actions Are Public Endpoints: How I Lock Them Down

1
Comments
3 min read
ModHeader was flagged as malware and pulled from Edge — here's how to audit any header-editing extension before you trust it

ModHeader was flagged as malware and pulled from Edge — here's how to audit any header-editing extension before you trust it

3
Comments 1
3 min read
The Invisible Breach: Why Modern Web Frameworks Aren't Immune to LFI

The Invisible Breach: Why Modern Web Frameworks Aren't Immune to LFI

Comments
8 min read
I scanned 15 public Lovable apps. 40% load their database in the browser.

I scanned 15 public Lovable apps. 40% load their database in the browser.

Comments 4
1 min read
A Day in the Life of a Vulnerability Assessor in Japan

A Day in the Life of a Vulnerability Assessor in Japan

Comments
4 min read
Anonymization Strategies

Anonymization Strategies

1
Comments 2
5 min read
Browser Privacy 2026: What Changed Since Lockdown Mode (4-year retrospective)

Browser Privacy 2026: What Changed Since Lockdown Mode (4-year retrospective)

1
Comments
2 min read
Encrypting PostgreSQL Columns in Scala with skunk-crypt

Encrypting PostgreSQL Columns in Scala with skunk-crypt

Comments
11 min read
Building Custom Recognizers

Building Custom Recognizers

Comments
5 min read
# How we built a tamper-evident WORM audit log for AI agents using SHA-256 hash chains and PostgreSQL

# How we built a tamper-evident WORM audit log for AI agents using SHA-256 hash chains and PostgreSQL

Comments
4 min read
Block the merge when a PR ships a vulnerability: a CI security gate with Synapse

Audit-ready chain of custody for findings

Block the merge when a PR ships a vulnerability: a CI security gate with Synapse

20
Comments 18
8 min read
Embracing Zero Trust Security Architecture: A DevOps and AI Engineer's Perspective

Embracing Zero Trust Security Architecture: A DevOps and AI Engineer's Perspective

Comments
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.