Blog

Insights, tutorials, and best practices for secure development

We Audited 6 Popular MCP Servers. Here's What We Found.

Security audit of the most popular MCP servers reveals 50 vulnerabilities including 11 critical — from SSRF and command injection to authentication bypass and AWS credential exposure. These servers run with elevated privileges in developer environments worldwide.

Mar 25, 202613 min read

web-securitysecurity-scanningvulnerability-scanning+2 more

Web Security Scanners: Types, Tools, and How They Protect Your Applications

Web security scanners detect vulnerabilities before attackers exploit them. Learn scanner types, how they work, and where code-level scanning fits in.

Mar 25, 202611 min read

dastsecurity-testingapplication-security+3 more

What Is DAST? Dynamic Application Security Testing Explained

Learn what DAST is, how dynamic application security testing works, what vulnerabilities it catches, and how it compares to SAST and IAST.

Mar 25, 202613 min read

application-securitysecurity-toolssast+2 more

Application Security Testing Tools: Build a Complete AppSec Stack

Compare application security testing tools across SAST, DAST, SCA, and IAST. Build a testing stack that catches vulnerabilities without slowing CI/CD.

Mar 24, 202611 min read

devsecopsshift-leftsecurity+3 more

DevSecOps Guide: How to Build Security Into Every Phase of Development

Learn what DevSecOps is, how it differs from traditional AppSec, and how to build a shift-left security toolchain across your entire SDLC.

Mar 24, 202615 min read

lovableai-securitysupabase+3 more

How to Secure Lovable Apps: Fix the Vulnerabilities AI Builders Miss

10.3% of Lovable apps have critical RLS flaws. Learn how to find and fix the most common Supabase misconfigurations, harden your AI-generated code, and scan with Rafter before you deploy.

Mar 24, 20269 min read

scadependency-scanningsupply-chain-security+1 more

Dependency Scanning and SCA: The Complete Guide to Securing Your Supply Chain

Dependency scanning and SCA tools find vulnerable libraries before production. Learn how software composition analysis secures your supply chain.

Mar 23, 202616 min read

vulnerability-assessmentsecurity-toolscode-security+1 more

Vulnerability Assessment Tools: How to Choose the Right Stack

Vulnerability assessment tools find security weaknesses in code, dependencies, and infrastructure. Compare SAST, DAST, SCA, IaC, and container scanning to build the right coverage stack.

Mar 23, 202619 min read

code-scanningweb-securitydevelopers+1 more

What Is a Vulnerability Scanner? How It Works and Why You Need One

What is a vulnerability scanner? Learn how these tools detect security flaws in your code, dependencies, and infrastructure before attackers exploit them.

Mar 22, 20263 min read

security-scanningweb-securitysecurity-audits+1 more

Website Security Check — How to Audit Your Site

A website security check finds vulnerabilities before attackers do. Learn how to audit your site for common flaws and fix them before they become breaches.

Mar 21, 20263 min read

vulnerability-scanningweb-securitysecurity-automation+2 more

Website Vulnerability Scanner: What It Does and Top Options Compared

A website vulnerability scanner detects security flaws in web apps automatically. Learn how scanners work, what they find, and top tools for 2026.

Mar 21, 20267 min read

vulnerability-scanningweb-securityowasp+1 more

Web Application Vulnerability Scanner: Code-Level Protection

Web application vulnerability scanner tools find security flaws before attackers do. Learn how code-level scanning catches OWASP Top 10 issues.

Mar 20, 20263 min read

Showing 61–72 of 199 posts