CybeDefend
Blog

Research, write-ups, tutorials.

How AppSec changes when agents write the code. Logic flaws, MCP, agent-time security. New every week.

Talk to us
Latest postProduct

VibeDefend Just Shipped. Your AI Agent Has New Rules, Installed in 5 Seconds.

One npm command turns Claude Code, Cursor, OpenAI Codex, Windsurf and VS Code Copilot into governance citizens. Business rules mined from your repo. OWASP, SOC 2, GDPR baked in. Dangerous actions blocked before they fire. The control point moved from the pull request to the prompt, and the tooling finally caught up.

10 min readRead article

All posts

4 articles
Research

Why your scanner reports 1,200 vulnerabilities and only 12 are real

Open any SAST report on a working codebase and you will see hundreds of red flags. A field guide to what reachability, exploitability and business logic actually mean, and why pattern scanners cannot tell them apart on their own.

CYBEDEFEND9 min read
Read more
Research

The $0 Shopping Cart: Why Your "All-Green" SAST Report Is Lying To You

Their CI/CD was perfect. Snyk was running. Dependabot was watching. Every indicator showed green. Ten minutes into the audit, I bought their entire inventory for €0.

CYBEDEFEND5 min read
Read more
Research

The Evolution of Secure by Design in the AI Era

AI is redefining Secure by Design, turning static security into a proactive, intelligent defense. Discover how AI agents predict and prevent threats before they happen.

CYBEDEFEND7 min read
Read more
Live · just shipped

Install VibeDefend in 5 seconds.

One command. Every coding agent on your laptop wired to CybeDefend: business rules mined from your code, security rules from the frameworks your auditors expect, action guards that block dangerous calls before they fire.

Install in 5 secondsNode 18.17+
npx -y @cybedefend/vibedefend@latest install
Auto-detects
  • Claude CodeClaude Code
  • CursorCursor
  • OpenAI Codex
  • WindsurfWindsurf
  • GitHub CopilotVS Code Copilot
Read the README on npm