Backslash introduced a new, free resource for vibe coders, developers and security teams - the Backslash MCP Server Security Hub.
Secure Code Warrior announced the availability of AI Security Rules on GitHub – a free resource to help developers generate more secure code when working with AI coding tools like GitHub Copilot, Cline, Roo, Cursor, Aider and Windsurf.
These security-focused AI coding rulesets provide developers with structured, security-minded guidance that is purpose-built for real-world agent-assisted development.
Secure Code Warrior is equipping developers to leverage AI tools toward safer defaults, creating accurate and safe code from the start. The enduring vision is that security-proficient developers can produce 10 times better code when safely leveraging AI coding tools, whereas a developer lacking ongoing security proficiency will inevitably produce an equal, but opposite, effect. The coding rules seek to assist development teams in achieving the former.
“These guardrails add a meaningful layer of defense, especially when developers are moving fast, multitasking, or find themselves trusting AI tools a little too much,” said Pieter Danhieux, Secure Code Warrior Co-Founder & CEO. “We’ve kept our rules clear, concise and strictly focused on security practices that work across a wide range of environments, intentionally avoiding language or framework-specific guidance. Our vision is a future where security is seamlessly integrated into the developer workflow, regardless of how code is written. This is just the beginning."
The new security rulesets offer a pragmatic, lightweight baseline that anyone can adopt within their projects, regardless of whether they are an existing Secure Code Warrior customer.
Key features and benefits include:
- Secure default promotion: Users can establish guardrails that steer AI away from risky patterns and common security missteps, such as unsafe eval usage, insecure authentication flows or failure to use parameterized queries.
- Ready to adapt and extend: Organized by development domain (web frontend, backend, and mobile), these rulesets are easy to extend and work with popular AI coding tools that support rule files, including GitHub Copilot, Cline, Roo, Cursor, Aider and Windsurf.
- Enhanced consistency and collaboration: Publicly available and easily adjustable, these rules can be tailored to fit any team, tech stack or workflow, helping to align AI-generated output across projects and contributors.
This release of AI Security Rules follows several new AI and LLM content releases on the Secure Code Warrior platform. This includes the launch of four new courses, covering topics such as, "Coding With AI" and the "OWASP Top 10 for LLMs," alongside six interactive walkthrough missions, over 40 new AI Challenges, and an extensive library of guidelines and videos – all focused on AI/LLM security and available on-demand. This marks only the initial phase of Secure Code Warrior’s ongoing commitment to equipping developers with the knowledge and skills required for secure, AI-assisted software creation. Substantial additional content is currently in development, with further releases planned in the near future.
Industry News
Google's Gemma 3n is the latest member of Google's family of open models. Google is announcing that Gemma 3n is now fully available for developers with the full feature set including supporting image, audio, video and text.
Google announced that Imagen 4, its latest text-to-image model, is now available in paid preview in Google AI Studio and the Gemini API.
Payara announced the launch of Payara Qube, a fully automated, zero-maintenance platform designed to revolutionize enterprise Java deployment.
Google released its new AI-first Colab to all users, following a successful early access period that had a very positive response from the developer community.
Salesforce announced new MuleSoft AI capabilities that enable organizations to build a foundation for secure, scalable AI agent orchestration.
Harness announced the General Availability (GA) of Harness AI Test Automation – an AI-native, end-to-end test automation solution, that's fully integrated across the entire CI/CD pipeline, built to meet the speed, scale, and resilience demanded by modern DevOps.
With AI Test Automation, Harness is transforming the software delivery landscape by eliminating the bottlenecks of manual and brittle testing and empowering teams to deliver quality software faster than ever before.
Wunderkind announced the release of Build with Wunderkind — an API-first integration suite designed to meet brands and developers where they are.
Jitterbit announced the global expansion of its partner program and new Jitterbit University partner curricula.
Tricentis unveiled two innovations that aim to redefine the future of software testing for the enterprise.
Snyk announced the acquisition of Invariant Labs, an AI security research firm and early pioneer in developing safeguards against emerging AI threats.
ActiveState expanded support of secure open source to include free and customized low-to-no vulnerability containers that facilitate modern software development.
Pythagora launched an all-in-one AI development platform that enables users to build and deploy full-stack applications from a single prompt.
Cloudflare announced that Containers is in public beta.
The Linux Foundation, the nonprofit organization enabling mass innovation through open source, announced the launch of the Agent2Agent (A2A) project, an open protocol created by Google for secure agent-to-agent communication and collaboration.