Patience Mpofu

Application Security Engineer with 13+ years of security focused backend engineering experience

Joined on Mar 4, 2026

Patience Mpofu

May 10

Why I Built an ML-Powered Secrets Detector Instead of Just Using Regex

#security #machinelearning #appsec #python

8 min read

Patience Mpofu

May 9

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

#career #security #webdev #appsec

8 min read

Patience Mpofu

May 9

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

#appsec #devops #testing #security

9 min read

Patience Mpofu

May 7

The Adoption Trap to Avoid

#security #devops #cicd #github

1 min read

Patience Mpofu

May 7

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

#security #appsec #python #tutorial

8 min read

Patience Mpofu

May 7

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

#appsec #security #tutorial #python

8 min read

Patience Mpofu

May 4

Why I Chose Regex Over AST Parsing in My SAST Tool (And When That Would Be Wrong)

#security #regex #python #programming

6 min read

Patience Mpofu

May 3

I Built a SAST Scanner From Scratch — Here's Every Design Decision I Made

#security #design #python #owasp

7 min read

Patience Mpofu

Mar 4

I Built a SAST Scanner from Scratch and Ran It Against 4 Famous Vulnerable Apps — Here's What It Found

#security #programming #javascript #beginners

11 min read

DEV Community

Patience Mpofu

Badges

Writing Debut

Why I Built an ML-Powered Secrets Detector Instead of Just Using Regex

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

The Adoption Trap to Avoid

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

Why I Chose Regex Over AST Parsing in My SAST Tool (And When That Would Be Wrong)

I Built a SAST Scanner From Scratch — Here's Every Design Decision I Made

I Built a SAST Scanner from Scratch and Ran It Against 4 Famous Vulnerable Apps — Here's What It Found