Original Post: r2c meetup on writing Semgrep rules We appreciate everyone who attended our meetup on writing Semgrep rules for security, correctness, and performance on August 26th. If you couldn’t make it, the video recording… Read More »Highlights from the r2c Meetup: Mastering the Craft of Writing Semgrep Rules
Original Post: Not all attacks are equal: understanding and preventing DoS in web applications The article, cross-posted on jacobian.org, discusses Denial-of-Service (DoS) attacks, focusing on their various types, risks, and mitigation strategies. The author, with… Read More »Mastering Web Security: Insights and Strategies to Prevent DoS Attacks
Original Post: Writing Semgrep rules This post outlines a methodology for writing effective Semgrep rules. While there’s no one-size-fits-all approach, the process shared includes common steps many find effective: Brainstorm Goals: Identify what you want… Read More »Mastering Semgrep: A Guide to Writing Effective Rules
Original Post: Sense and (path) sensitivity: My experience adding a new feature as a Semgrep intern The author, Katrina Liu, shares her experience interning at Semgrep for 10 weeks. It was her first time living… Read More »Navigating Path Sensitivity: My Journey Implementing a New Feature as a Semgrep Intern
Original Post: Effortless certificate management with automated CNAME validation The article highlights the benefits of using Imperva’s managed certificate feature, emphasizing its robust, automated process for SSL certificate management, eliminating manual domain validation and renewal… Read More »Streamlining SSL Certification: Simplified CNAME Validation Automation
Original Post: How to Find the Best Application Support Maintenance Provider? | by Aress Software | Jul, 2024 The article discusses the importance of selecting the right vendor for application support and maintenance services, crucial… Read More »The Ultimate Guide to Choosing the Ideal Application Support Maintenance Provider
Original Post: Fixing leaky logs: how to find a bug and ensure it never returns The article discusses the benefits of transferring security enforcement duties to developers to quickly resolve issues without depending entirely on… Read More »Mastering Bug Fixes: A Guide to Identifying and Permanently Resolving Leaky Logs
Original Post: Enhancing application security with this technology | by Aaikansh Agrawal | Jul, 2024 The article discusses the critical importance of application security in software development, emphasizing that it remains a top priority for… Read More »Boost Your App’s Security: Insights from Aaikansh Agrawal | July 2024
Original Post: The future of AppSec and why I joined r2c The author reflects on their career transition to Head of Security Research at r2c, the creators of the open-source static analysis tool Semgrep. They… Read More »Joining r2c: Shaping the Future of Application Security
Original Post: Introducing Semgrep and r2c This content introduces Semgrep, an open-source code scanning tool designed to enhance security for developers. Semgrep is characterized as free, fast, offline, and customizable, aiming to overcome traditional issues… Read More »Discover Semgrep and r2c: Streamlining Code Security and Quality