#webappsec
Live, measured metrics for the hashtag #webappsec from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #webappsec
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mas.to (Mastodon public tags API) · fetched 2026-10-19 07:51 UTC0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mas.to (Mastodon public search API) · fetched 2026-10-19 07:51 UTCLive pulse
measured · mas.to (Mastodon tag timeline) · fetched 2026-10-19 07:51 UTCEverything below is measured over the latest 40 public posts (spanning ~18798 hours).
Posting hours (UTC) — busiest: 13:00
Languages: English (33) · Ukrainian (4) · French (1) · Indonesian (1) · Spanish (1)
Avg boosts / post: 1.3
Top of the latest posts
Big set of add-on releases this morning #zaproxy #dast #AppSec #WebAppSec
CVE-2026-72829 (CRITICAL): getgrav grav API plugin <1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use & monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-
What's this? @zaproxy fuzzer update released this morning, with work from yours truly. #PenTest #WebAppSec #BugBountyTips
#webappsec across platforms
every network with a public tag surfaceFollow #webappsec straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/webappsec