#webappsec
Live, measured metrics for the hashtag #webappsec from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #webappsec
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mas.to (Mastodon public tags API) · fetched 2026-11-10 23:30 UTC0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mas.to (Mastodon public search API) · fetched 2026-11-10 23:30 UTCLive pulse
measured · mas.to (Mastodon tag timeline) · fetched 2026-11-10 23:30 UTCEverything below is measured over the latest 40 public posts (spanning ~19102 hours).
Posting hours (UTC) — busiest: 13:00
Languages: English (33) · Ukrainian (4) · French (1) · Indonesian (1) · Spanish (1)
Avg boosts / post: 1.3
Top of the latest posts
I've been saying this for ages: remove, reduce, or restrict things before buying 100 new security tools. I built a manifesto around it. Now I've collected real-world case studies showing two patterns: Less is good. More is bad. https://redu
Big set of add-on releases this morning #zaproxy #dast #AppSec #WebAppSec
CVE-2026-72829 (CRITICAL): getgrav grav API plugin <1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use & monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-
#webappsec across platforms
every network with a public tag surfaceFollow #webappsec straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/webappsec