--- title: "#security-testing articles | Hashnode" description: "Explore 134 articles tagged #security-testing on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/security-testing" --- Tag # #security-testing 134 posts · 202 followers [404 Founders](https://hashnode.com/@404-founders) · [Nov 2](https://hashnode.com/posts/penetration-testing-frequency-eu-rules-nis2-dora/6ae8a2ff095907b3696718e8) ### [Penetration Testing Frequency: What EU Rules Require](https://404-founders.com/blog/penetration-testing-frequency-eu-rules-nis2-dora?utm_source=hashnode&utm_medium=feed) Penetration testing frequency under NIS2 and DORA: which EU rule sets a number, what CIR 2024/2690 asks for, and what an auditor will want to see. 13 min read · [404-founders.com](https://404-founders.com/blog/penetration-testing-frequency-eu-rules-nis2-dora?utm_source=hashnode&utm_medium=feed) [tarunaadhikari](https://hashnode.com/@tarunasdet) · [Sep 14](https://hashnode.com/posts/ai-security-testing-how-to-test-ai-applications-for-modern-cyber-threats/6aa7d5cd482c764aec77c283) ### [AI Security Testing: How to Test AI Applications for Modern Cyber Threats](https://software-testing-qa.hashnode.dev/ai-security-testing-how-to-test-ai-applications-for-modern-cyber-threats?utm_source=hashnode&utm_medium=feed) AI Security Testing: Lean How to Test AI Applications for Modern Cyber Threats 3 min read · [software-testing-qa.hashnode.dev](https://software-testing-qa.hashnode.dev/ai-security-testing-how-to-test-ai-applications-for-modern-cyber-threats?utm_source=hashnode&utm_medium=feed) [James Miller](https://hashnode.com/@jamesmiller45900) · [Sep 10](https://hashnode.com/posts/why-authenticated-security-testing-is-becoming-essential-for-modern-web-applications/6aa2a3739148f7c85f651d84) ### [Why Authenticated Security Testing is Becoming Essential for Modern Web Applications](https://jamesmiller459.hashnode.dev/why-authenticated-security-testing-is-becoming-essential-for-modern-web-applications?utm_source=hashnode&utm_medium=feed) Learn why authenticated security testing is essential for modern web apps and how it uncovers hidden vulnerabilities behind login. 7 min read · [jamesmiller459.hashnode.dev](https://jamesmiller459.hashnode.dev/why-authenticated-security-testing-is-becoming-essential-for-modern-web-applications?utm_source=hashnode&utm_medium=feed) [Arshad](https://hashnode.com/@arshadakl) · [Sep 3](https://hashnode.com/posts/otp-bypass-when-client-side-validation-becomes-a-joke/6a99046d4bbb1708cfd3e2bf) ### [OTP Bypass : When Client-Side Validation Becomes a Joke](https://blog.arshadakl.in/otp-bypass-when-client-side-validation-becomes-a-joke?utm_source=hashnode&utm_medium=feed) See how trusting client-side validation can cause OTP bypasses, authorization flaws, and other security issues that should be stopped by the backend. 8 min read · [blog.arshadakl.in](https://blog.arshadakl.in/otp-bypass-when-client-side-validation-becomes-a-joke?utm_source=hashnode&utm_medium=feed) [Biz tech pulse hub](https://hashnode.com/@biztechpulsehub) · [Aug 29](https://hashnode.com/posts/ai-agent-security-testing-a-practical-guide-for-businesses/6a928e838649636047d3bcd4) ### [AI Agent Security Testing: A Practical Guide for Businesses](https://biztechpulsehub.hashnode.dev/ai-agent-security-testing-a-practical-guide-for-businesses?utm_source=hashnode&utm_medium=feed) How organizations can test AI agents for security risks reliability and access control weaknesses 3 min read · [biztechpulsehub.hashnode.dev](https://biztechpulsehub.hashnode.dev/ai-agent-security-testing-a-practical-guide-for-businesses?utm_source=hashnode&utm_medium=feed) [Eve](https://hashnode.com/@chenyuan20509) · [Jul 13](https://hashnode.com/posts/i-locked-down-my-mcp-server-after-the-internet-found-it/6a54f34725688e357ed1453a) ### [I Locked Down My MCP Server After the Internet Found It](https://dispatch-blog.hashnode.dev/i-locked-down-my-mcp-server-after-the-internet-found-it?utm_source=hashnode&utm_medium=feed) A few weeks ago, I wrote about how I exposed my MCP server to the internet without thinking about security. The feedback was brutal — and deserved. People pointed out everything from missing authentic 7 min read · [dispatch-blog.hashnode.dev](https://dispatch-blog.hashnode.dev/i-locked-down-my-mcp-server-after-the-internet-found-it?utm_source=hashnode&utm_medium=feed) [Hardik Arora](https://hashnode.com/@Hardik999) · [Jun 1](https://hashnode.com/posts/building-a-zero-egress-ai-driven-devsecops-pipeline-my-journey-with-supplychain-guardian-ai/6a1d923a080b80f11f56e721) ### [Building a Zero-Egress, AI-Driven DevSecOps Pipeline: My Journey with SupplyChain-Guardian-AI](https://hardik0811arora.hashnode.dev/building-a-zero-egress-ai-driven-devsecops-pipeline-my-journey-with-supplychain-guardian-ai?utm_source=hashnode&utm_medium=feed) I wanted to explore a different paradigm: What if the pipeline didn't just report the vulnerability, but actually reasoned about it, patched the code, proved the fix worked in a live Kubernetes cluster, and opened a Pull Request? 7 min read · [hardik0811arora.hashnode.dev](https://hardik0811arora.hashnode.dev/building-a-zero-egress-ai-driven-devsecops-pipeline-my-journey-with-supplychain-guardian-ai?utm_source=hashnode&utm_medium=feed) [Mouhamed Ben Abdallah](https://hashnode.com/@erinmin) · [May 12](https://hashnode.com/posts/unprotected-admin-functionality/6a02f950937b84f77957c444) ### [Unprotected Admin Functionality](https://erinmin-writeups.hashnode.dev/unprotected-admin-functionality?utm_source=hashnode&utm_medium=feed) vertical privilege escalation broken access control vulnerability robots.txt security misconfiguration admin panel exposed without authentication 8 min read · [erinmin-writeups.hashnode.dev](https://erinmin-writeups.hashnode.dev/unprotected-admin-functionality?utm_source=hashnode&utm_medium=feed) [James Miller](https://hashnode.com/@jamesmiller45900) · [May 5](https://hashnode.com/posts/why-your-security-strategy-needs-agentic-ai-pentesting-in-2026/69f9d431a386d7f12178114a) ### [Why Your Security Strategy Needs Agentic AI Pentesting in 2026](https://jamesmiller459.hashnode.dev/why-your-security-strategy-needs-agentic-ai-pentesting-in-2026?utm_source=hashnode&utm_medium=feed) Learn why agentic AI pentesting is essential for modern security. Discover how it improves speed, coverage, and proactive risk detection. 7 min read · [jamesmiller459.hashnode.dev](https://jamesmiller459.hashnode.dev/why-your-security-strategy-needs-agentic-ai-pentesting-in-2026?utm_source=hashnode&utm_medium=feed) [Oluwaseyi Idowu](https://hashnode.com/@idowuseyi) · [Apr 16](https://hashnode.com/posts/why-i-don-t-just-test-user-registration/69e034faf95c47e87f75a444) ### [Why I Don't Just "Test" User Registration](https://idowuseyi.hashnode.dev/why-i-don-t-just-test-user-registration?utm_source=hashnode&utm_medium=feed) A Lead Engineer’s Perspective on Protecting the Product 2 min read · [idowuseyi.hashnode.dev](https://idowuseyi.hashnode.dev/why-i-don-t-just-test-user-registration?utm_source=hashnode&utm_medium=feed)