DEV Community

#owasp

Discussions related to the OWASP Foundation, its projects, and Top 10 lists.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Broken Access Control Tops the OWASP List. Your Scanner Still Can't See It.

Broken Access Control Tops the OWASP List. Your Scanner Still Can't See It.

Comments
6 min read
A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

Comments
6 min read
OWASP Top 10 for Agentic Applications: a field guide for coding-agent teams

OWASP Top 10 for Agentic Applications: a field guide for coding-agent teams

Comments
9 min read
OWASP Top 10 for LLM Applications: the three risks that become yours to enforce

OWASP Top 10 for LLM Applications: the three risks that become yours to enforce

Comments
8 min read
PHP2Shell e o resto: o que quebrou no runtime e o que fazer agora

PHP2Shell e o resto: o que quebrou no runtime e o que fazer agora

Comments
3 min read
My AI Agent Never Touches the Database

My AI Agent Never Touches the Database

Comments
3 min read
The Guardian denied both commands. It never read either one.

The Guardian denied both commands. It never read either one.

3
Comments
5 min read
API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

Comments
2 min read
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

4
Comments 5
12 min read
OWASP Hunting: An Open-Source Security Payload Collection

OWASP Hunting: An Open-Source Security Payload Collection

1
Comments
1 min read
agent-ledger: a security and audit plugin for Hermes Agent, scored against the OWASP Agentic Top 10

agent-ledger: a security and audit plugin for Hermes Agent, scored against the OWASP Agentic Top 10

Comments
4 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Comments
8 min read
The Guardian blocked the command. The agent told me how to go around it.

The Guardian blocked the command. The agent told me how to go around it.

3
Comments
4 min read
OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it

OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it

Comments
7 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.