Menu

#DevtoAppsec

39 posts

Feed·
20 of 39 posts
Chitos: An AI Security Audit Engine That Understands the Attack
📰
0Read More

Chitos: An AI Security Audit Engine That Understands the Attack

DEV Community: appsec·AI OpenFree·3 days ago
#RHuIajdW
#devtoappsec#devto#dev#chitos#engine

Chitos scores 77.8 Youden on the OWASP Benchmark (self-measured), with on-prem performance matching the cloud engine and no data leaving the network.

15s
What a Youden index of 77 actually means on the OWASP Benchmark
📰
0Read More

What a Youden index of 77 actually means on the OWASP Benchmark

DEV Community: appsec·Ward Ed·3 days ago
#vPenVr4F
#devtoappsec#devto#dev#youden#index

A neutral guide to reading OWASP Benchmark scores: why the Youden index resists precision tricks, and how to compare security tools honestly.

15s
AI-automated attacks are forcing application security to automate defense
📰
0Read More

AI-automated attacks are forcing application security to automate defense

DEV Community: appsec·AI Tech News·3 days ago
#z9Lm3sq1
#devtoappsec#devto#dev#human#loop

A neutral look at how autonomous, AI-driven offensive tooling is changing the economics of appsec, and what defenders are doing in response.

15s
Chitos on the OWASP Benchmark: 77.8 Youden, on-prem
📰
0Read More

Chitos on the OWASP Benchmark: 77.8 Youden, on-prem

DEV Community: appsec·GINIGEN AI·3 days ago
#3pmXliID
#devtoappsec#devto#dev#chitos#engine

A benchmark walkthrough of Chitos, a sovereignty-first security audit engine, with the self-measured OWASP Benchmark results and what they mean.

15s
The Agents Didn't Go Rogue. Somebody Forgot to Build the Fence.
🖼️
0Read More

The Agents Didn't Go Rogue. Somebody Forgot to Build the Fence.

DEV Community: appsec·Cor E·3 days ago
#xITqzjab
#devtoappsec#devto#dev#agent#something

Four of the biggest AI labs on the planet have now admitted their agents reached external systems...

15s
A $75,000 Invoice, a Fake CFO Approval, and Why Prompt-Level Defenses Aren't Enough
📰
0Read More

A $75,000 Invoice, a Fake CFO Approval, and Why Prompt-Level Defenses Aren't Enough

DEV Community: appsec·Cor E·3 days ago
#NnyFm4c6
#devtoappsec#devto#dev#invoice#agent

The OWASP FinBot CTF sets up a small multi-agent finance system. One agent handles invoices. A...

15s
Top 5 Snyk Alternatives in 2026
📰
0Read More

Top 5 Snyk Alternatives in 2026

DEV Community: appsec·Codacy·3 days ago
#WxpaxIvc
#devtoappsec#devto#dev#snyk#security

We took a look at five top alternatives to Snyk for software development companies who are interested in using security scanning and AppSec solutions.

15s
The NSA Said MCP Is a National Security Problem. Here's How to Actually Fix It.
🖼️
0Read More

The NSA Said MCP Is a National Security Problem. Here's How to Actually Fix It.

DEV Community: appsec·Cor E·5 months ago
#PPd9MSY2
#dev#tool#sentinel#agent#result

The NSA doesn't publish cybersecurity guidance on emerging tech unless the threat model is real and...

15s
Malicious npm Package Targeted Claude's /mnt/user-data Directory — Here's What Agentic Pipelines Are Missing
🖼️
0Read More

Malicious npm Package Targeted Claude's /mnt/user-data Directory — Here's What Agentic Pipelines Are Missing

DEV Community: appsec·Cor E·5 months ago
#giq4EvXU
#dev#tool#claude#sentinel#directory

A malicious npm package named mouse5212-super-formatter showed up on the npm registry last month with...

15s
Bare-Minimum Observability for a $100M Game - My Lamentable Experience with Veltrix Configuration
🖼️
0Read More

Bare-Minimum Observability for a $100M Game - My Lamentable Experience with Veltrix Configuration

DEV Community: appsec·Faith Sithole·5 months ago
#0NGD9DCQ
#dev#game#observability#problem#time

The Problem We Were Actually Solving At the time, my team was focused on tweaking the...

15s
Treasure Hunt Engine Meltdown: When the Veltrix Operator Fell Prey to Event Overload
🖼️
0Read More

Treasure Hunt Engine Meltdown: When the Veltrix Operator Fell Prey to Event Overload

DEV Community: appsec·Faith Sithole·5 months ago
#BOPRr12o
#dev#event#system#user#events

The Problem We Were Actually Solving Our primary concern was to create a system that could...

15s
The Curse of High Search Volume - Why Veltrix Configuration Fails When Operators Least Expect It
🖼️
0Read More

The Curse of High Search Volume - Why Veltrix Configuration Fails When Operators Least Expect It

DEV Community: appsec·Faith Sithole·5 months ago
#xAc5n36Q
#dev#veltrix#approach#settings#system

The Problem We Were Actually Solving When designing Veltrix, our primary goal was to...

15s
The False Promise of Treasure Hunt Engine in Hytale: Why Veltrix Doesn't Make It Easy
🖼️
0Read More

The False Promise of Treasure Hunt Engine in Hytale: Why Veltrix Doesn't Make It Easy

DEV Community: appsec·Faith Sithole·5 months ago
#LUzMhtV8
#dev#hunt#players#engine#veltrix

The Problem We Were Actually Solving The issue boiled down to this: how could we strike a...

15s
We Built a Treasure Hunt Engine That Crushed Under Load: A Harsh Reality Check on the Cost of Configuration Decisions
🖼️
0Read More

We Built a Treasure Hunt Engine That Crushed Under Load: A Harsh Reality Check on the Cost of Configuration Decisions

DEV Community: appsec·Faith Sithole·5 months ago
#EQQgx5P9
#dev#system#config#problem#scale

The Problem We Were Actually Solving We were trying to solve the classic "scale and...

15s