Articles
Engineering writing on static analysis, ESLint, security, and AI-native developer tooling.
Filtered by tag #security · clear filter
Dec 31, 2025Hardening AI Agents: The Vercel AI Static Analysis StandardThe first static analysis standard for AI-native applications. Automate protection against prompt injection and unvalidated agent inputs.#eslint#ai#security+1002 min0
Dec 31, 2025Automated Compliance: The Secure Coding Static Analysis StandardThe core engineering standard for secure software development. Map your entire fleet to OWASP Top 10 with 89 engineering-led static analysis rules.#eslint#security#javascript+1003 min0
Dec 31, 2025The OWASP Compliance Protocol: Mapping 247 Static Analysis RulesA comprehensive engineering standard for OWASP Top 10 compliance. Map your entire Node.js fleet to security standards using automated static analysis.#eslint#security#owasp+1108 min0
Dec 31, 2025The 30-Minute Security Audit: A Static Analysis Protocol for OnboardingA data-driven protocol for assessing a new codebase in under 30 minutes. Use automated static analysis to generate immediate risk heatmaps for CTOs and VPs.#eslint#security#node+11163 min0
Dec 31, 2025The Security Engineering Blueprint: A JavaScript Master DocumentThe definitive engineering blueprint for high-stakes JavaScript security. 15 core architectural concepts required for senior security engineering roles.#eslint#career#security+1004 min0
Dec 31, 2025Exploit Analysis: The JWT Algorithm 'none' Attack (And the Guard)A technical analysis of the most dangerous auth misconfiguration. How to engineering static analysis guards to eliminate 'none' exploits.#eslint#security#jwt+1104 min0
Dec 31, 2025Vulnerability Case Study: Prompt Injection in Vercel AI AgentsA strategic analysis of prompt injection in modern AI applications. How we built the static analysis standard to fix it with one line of code.#eslint#ai#security+1003 min0
Dec 31, 2025Hardening the Data Layer: The node-postgres Engineering StandardEliminate the #1 database vulnerability. An automated static analysis protocol for preventing SQL injection in high-scale Node.js environments.#eslint#postgres#node+1002 min0
Dec 31, 2025The Secret Management Standard: Automating AI Agent ProtectionHardcoded credentials are a governance failure. Learn the static analysis standard for detecting and auto-fixing secrets in AI-native codebases.#eslint#javascript#security+1002 min0
Dec 20, 2025Benchmark Report: Why Most Security Linters Miss 80% of VulnerabilitiesA head-to-head performance and detection benchmark. Measurable proof of how deep static analysis identifies vulnerabilities that incumbent tools miss.#eslint#security#javascript+1005 min0
Dec 20, 2025The AI Security Protocol: Hardening Vercel AI SDK AgentsThe definitive engineering standard for AI-native security. Use automated static analysis to protect agents from LLM-specific vulnerabilities.#eslint#ai#security+1003 min0
Dec 19, 2025The OWASP LLM Protocol: 100% Automated Coverage for Vercel AIA complete mapping of OWASP LLM Top 10 to static analysis rules. The engineering standard for governance in the Vercel AI ecosystem.#eslint#ai#security+1004 min0