Guardrails
How Dropbox uses MCP and Dash to close the design-to-code security gap
Our short summary of Dropbox’s engineering write-up. The full story, with all the detail, is on their blog.
Read the full write-up on dropbox.tech (opens in a new tab)Problem
Security requirements often get lost between design review and code review, making it hard to verify compliance.
Solution
They built a system that uses a model‑context protocol, large language models, and Dropbox's Dash search to automatically pull relevant threat models into code reviews and check code against those requirements.
Want the architecture, code and numbers? They’re in the original post.
Read the full write-up on dropbox.tech (opens in a new tab)