Dev.to Security

Trusted AI Agent Transactions, Part 4: PingAuthorize Policy Decisions

Making policy decisions with PingAuthorize Part 3 established the transaction context and immediat…

Trusted AI Agent Transactions, Part 3: SPIRE Workload Identity

Binding a logical agent to a real workload with SPIRE Part 2 used a SPIRE JWT-SVID as the actor to…

Trusted AI Agent Transactions, Part 2: PingFederate Token Exchange

Using PingFederate as a Transaction Token Service Part 1 separated the user, logical agent, runtim…

Trusted AI Agent Transactions, Part 1: The Identity Problem

The identity problem behind AI agents An application that calls an API for a user normally answers…

X86_64 From Source Code to Binary: What Does GCC Actually Do ? DEP / NX

Having explained how GCC options like -fstack-protector works in my preceding article , it's time to…

I Rate-Limited My Own API. Then I Found a Way to Bypass It Myself.

Rate limiting feels like a solved problem. You pick a partition key, set a window, wire up the middl…

Firewall: How It Works & How It Protects You

Firewall: How It Works & How It Protects You When you connect your device to the internet, you're n…

Complete Guide: Privacy Screen Protector Review in 2026

Complete Guide: Privacy Screen Protector Review in 2026 🔒 Recommended Tools VPN: ➡️ …

Transactional Email APIs: Password Reset Templates and Domain Verification for SaaS

Short answer: choose a transactional email API that lets your SaaS own the password-reset contract, …

Healthcare Access Notices: SMS OTP Verification, Rate Limits, and Regional Evidence

A healthtech SaaS login code is also a compliance notice: an SMS OTP API must let the system show wh…

Enterprise MCP Gateways: Top Solutions for MCP Authentication

Evaluating the top enterprise MCP gateways for Model Context Protocol (MCP) authentication and tool …

MCP Governance Explained: What Is It and How It Works

Establishing centralized MCP governance with Bifrost is critical as AI agents connect to sensitive e…