owaspweb-securitydevelopers+2 more
Software Integrity Failures: OWASP Top 10 (2026)
Supply chain attacks are on the rise. Learn how to prevent software and data integrity failures in your apps.
4 min read
Blog
Insights, tutorials, and best practices for secure development
ai-securitybase44github+2 more
How to Run a 5-Minute Security Audit on Your Base44 App (2026)
Learn how to run a free five-minute security audit on your Base44 project using Rafter. Secure your AI-generated code, fix vulnerabilities fast, and ship safely.
7 min read
api-keysweb-securitydevelopers+2 more
State of AI for Coding: Power, Speed, and Security Risk (January 2026)
A security-focused debrief of OpenRouter's State of AI report—what modern AI coding tools enable, and the security risks teams must manage.
9 min read
ai-securitydata-exfiltrationllm-security+2 more
Silent Exfiltration: How Secrets Leak Through Model Output
LLM data exfiltration attacks can expose API keys, embeddings, and secrets through model output. Learn how silent leaks happen and how to stop them.
8 min read
api-keysweb-securitydevelopers+2 more
Exposed API Keys: The Silent Killer of Projects
Exposed API keys have caused costly leaks at startups and tech giants alike. Learn real-world cases, consequences, and how to prevent them.
6 min read
owaspweb-securitydevelopers+2 more
Security Misconfiguration — OWASP Top 10 A02 (2026)
Security Misconfiguration jumped to A02 on the latest OWASP Top 10 (2025). From public S3 buckets to default passwords, learn why it is a leading cause of breaches in 2026 and how to avoid it.
4 min read
api-keysweb-securitydevelopers+2 more
OWASP Top 10 2026: Latest Version & Full List
The OWASP Top 10 for 2026, explained. The latest official version is the 2025 list — see the full ranking, what changed since 2021, and how to fix each one.
10 min read
aisecuritybest-practices+1 more
Securing AI-Generated Code: Best Practices
Learn how to secure code generated by AI tools and ensure your applications remain safe.
3 min read
securitytoolscomparison+2 more
Security Tool Comparisons: 2026 Crash Course
Learn how different security scanning tools compare and which one is right for your project. A comprehensive crash course on security tooling.
4 min read
ai-securityllm-securitycode-generation+2 more
When LLMs Write Code: Trusting Untrusted Outputs
LLM code generation can introduce serious security flaws—from SQL injection to remote code execution. Learn why model outputs must be treated as untrusted input.
6 min read
api-keysweb-securitydevelopers+2 more
Top 11 Tools for Detecting API Key Leaks (2026)
Find leaked API keys fast. Compare the top 11 git secret scanning tools for 2026 — Betterleaks (the new Gitleaks successor), TruffleHog, GitHub secret scanning, and Gitleaks — with detection methods, pricing, and migration notes.
14 min read
raftersecuritylaunch+1 more
Launching Rafter: The Future of Code Security
What we built and why Rafter represents the next generation of code security scanning.
4 min read
Showing 157–168 of 199 posts