#Appsec

AI is rapidly transforming software development, from copilots and AI-generated code to autonomous...

From Dev.to - security: AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

From Dev.to - ai: Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

From Dev.to - security: What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

From Dev.to - security: False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

Every SAST tool ships with a default ruleset. And every default ruleset has gaps. Sometimes the gap...

When I set out to write detection rules for my SAST tool, I didn't start with a list of regex...

From Dev.to - appsec: Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

Denver likes a good origin story. The city still keeps a marker for Louis Ballast and the Humpty...

Most systems assume: “Requests coming from our app are safe.” That assumption breaks...

Hi all, I am currently working as senior software engineer with 10 YOE. I have partnered with Security team in many of my projects review. I do find the role very interesting.…

From Dev.to - security: Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

A direct message for security professionals and decision-makers at SaaS startups, fintech companies,...

Imagine a team building a simple feature: an endpoint to let users download their invoices. The...