DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your Agent's Permission Slip Belongs in Version Control, Not in a Prompt

Your Agent's Permission Slip Belongs in Version Control, Not in a Prompt

Comments
7 min read
Architecting Secure Webhooks in Laravel đź”’

Architecting Secure Webhooks in Laravel đź”’

Comments
4 min read
Testing the Walls, Not the Demo: A Reproducible Harness for AI Coding Agent Boundaries

Testing the Walls, Not the Demo: A Reproducible Harness for AI Coding Agent Boundaries

Comments
4 min read
I Stopped Trusting My Agent's Boundaries Until I Could Break Them in a Throwaway Sandbox

I Stopped Trusting My Agent's Boundaries Until I Could Break Them in a Throwaway Sandbox

Comments
5 min read
A Boundary-Failure Test Plan for Coding Agents You Can Run on Free Model Tiers

A Boundary-Failure Test Plan for Coding Agents You Can Run on Free Model Tiers

Comments
5 min read
A Reproducible Sandbox Loop for AI-Generated Code: Generate, Isolate, Assert

A Reproducible Sandbox Loop for AI-Generated Code: Generate, Isolate, Assert

Comments
4 min read
Gate the Toolbelt: A Filesystem-First Smoke Test for Agentic Coding Models

Gate the Toolbelt: A Filesystem-First Smoke Test for Agentic Coding Models

Comments
5 min read
NETO: Chat P2P local para equipos dev sin depender de la nube

NETO: Chat P2P local para equipos dev sin depender de la nube

Comments
1 min read
Multi-tenant DKIM in Haraka: two signatures on one message

Multi-tenant DKIM in Haraka: two signatures on one message

Comments
5 min read
Model Swaps Are Boundary Events: Gate Agent Tool Changes With a Deterministic Replay Lane

Model Swaps Are Boundary Events: Gate Agent Tool Changes With a Deterministic Replay Lane

Comments
6 min read
Securing the Software Supply Chain (SLSA, SBOM, Signing)

Securing the Software Supply Chain (SLSA, SBOM, Signing)

1
Comments
7 min read
Letting a Stranger's URL Into Your Server Without Building an SSRF Vector

Letting a Stranger's URL Into Your Server Without Building an SSRF Vector

Comments
8 min read
'PleaseFix': When Your AI Browser Trusts a Web Page More Than It Trusts You

'PleaseFix': When Your AI Browser Trusts a Web Page More Than It Trusts You

1
Comments
5 min read
Can you run a GNN without anyone seeing the data? Journal of our experiments on privacy-preserving GNN inference on microcontrollers

Can you run a GNN without anyone seeing the data? Journal of our experiments on privacy-preserving GNN inference on microcontrollers

Comments
7 min read
Docker Sandboxes in 2026: The Evolution of Secure Code Isolation

Docker Sandboxes in 2026: The Evolution of Secure Code Isolation

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.