DEV Community

#owasp

Discussions related to the OWASP Foundation, its projects, and Top 10 lists.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

Comments
6 min read
OWASP Top 10 for Agentic Applications: a field guide for coding-agent teams

OWASP Top 10 for Agentic Applications: a field guide for coding-agent teams

Comments
9 min read
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

Comments
12 min read
The Guardian blocked the command. The agent told me how to go around it.

The Guardian blocked the command. The agent told me how to go around it.

2
Comments
4 min read
The Guardian redacted my secret. The Read tool walked around it.

The Guardian redacted my secret. The Read tool walked around it.

2
Comments 1
5 min read
OWASP Top 10 for LLM Applications: the three risks that become yours to enforce

OWASP Top 10 for LLM Applications: the three risks that become yours to enforce

Comments
8 min read
PHP2Shell e o resto: o que quebrou no runtime e o que fazer agora

PHP2Shell e o resto: o que quebrou no runtime e o que fazer agora

Comments
3 min read
My AI Agent Never Touches the Database

My AI Agent Never Touches the Database

Comments
3 min read
API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

Comments
2 min read
OWASP Hunting: An Open-Source Security Payload Collection

OWASP Hunting: An Open-Source Security Payload Collection

1
Comments
1 min read
agent-ledger: a security and audit plugin for Hermes Agent, scored against the OWASP Agentic Top 10

agent-ledger: a security and audit plugin for Hermes Agent, scored against the OWASP Agentic Top 10

Comments
4 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Comments
8 min read
OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it

OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it

Comments
7 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Comments
4 min read
OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

Comments
11 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.