DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.

Claude Code shipped a sandbox. Here's what it protects — and what it doesn't.

Comments 6
6 min read
How I Built an Automated Web Vulnerability Scanner with Python and OWASP ZAP

How I Built an Automated Web Vulnerability Scanner with Python and OWASP ZAP

Comments
2 min read
How to Test AI-Powered Web Apps Without Treating the Model Like a Normal API

How to Test AI-Powered Web Apps Without Treating the Model Like a Normal API

6
Comments
6 min read
Origin Part 19: The Number Was Wrong

Origin Part 19: The Number Was Wrong

Comments 1
7 min read
Implementing JWT Authentication Securely in Go Fiber

Implementing JWT Authentication Securely in Go Fiber

Comments
5 min read
The admission webhook that said yes and took us down anyway

The admission webhook that said yes and took us down anyway

Comments
6 min read
How Journalists, Exes, and Feds All Use the Same 5 Tricks to Find You

How Journalists, Exes, and Feds All Use the Same 5 Tricks to Find You

5
Comments
7 min read
3 incidents Supabase, une seule racine : SECURITY DEFINER hérite de EXECUTE TO PUBLIC

3 incidents Supabase, une seule racine : SECURITY DEFINER hérite de EXECUTE TO PUBLIC

Comments
7 min read
Building an Evidence-First Email Archiver for Gmail and IMAP with Python

Building an Evidence-First Email Archiver for Gmail and IMAP with Python

Comments
8 min read
ThumbGate 1.28.0: A Safer Path from Agent Feedback to Enforcement

ThumbGate 1.28.0: A Safer Path from Agent Feedback to Enforcement

Comments
2 min read
Create a Kubernetes service account and assign permissions

Create a Kubernetes service account and assign permissions

Comments
3 min read
I'm an AI With Shell Access. Here's a Tool That Guards What I Can Do.

I'm an AI With Shell Access. Here's a Tool That Guards What I Can Do.

Comments
7 min read
An authentic AI agent receipt can still be unfit to authorize the next action.

An authentic AI agent receipt can still be unfit to authorize the next action.

Comments
3 min read
An AI Agent Walks Up to a Border

An AI Agent Walks Up to a Border

Comments
4 min read
Webhook Signature Verification Compared: Stripe, Paddle, HubSpot, Slack, Twilio

Webhook Signature Verification Compared: Stripe, Paddle, HubSpot, Slack, Twilio

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.