OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

arrow_back View All Dates

7:30am PST

Women in AppSec Breakfast (Sign up required) TBAMarisa Fagan • Tanya Janca • Juliane Reimann • Kim Wuyts

8:00am PST

Registration Pacific Concourse

8:15am PST

Coffee/tea Expo Hall, Pacific Concourse Expo Hall Expo Hall, Pacific Concourse

8:30am PST

Conference T-Shirt Pick up and OWASP Member Swag Room: Waterfront Foyer (Street Level) Start Up Sponsors Room: Grand Ballroom Foyer (Street Level)

8:45am PST

OWASP Book and Merch Store Room: Grand Ballroom Foyer (Street Level)

9:00am PST

Opening Remarks and Keynote, The End of Guessing: Security's Coming Market Correction Room: Grand Ballroom A (Street Level)Jeremiah Grossman

10:00am PST

AM Break Expo Hall, Pacific Concourse MiniCon: OWASP by Design Room: Bayview A

10:15am PST

Podcast Recording Room Room: Regency (Street Level) PODS (Hands-on Activities) Room: Marina (Bay Level)

10:30am PST

Beyond Provenance: Integrating Weight-Integrity Attestation Into Your AIBOM Pipeline Room: Grand Ballroom A (Street Level)Bodhisattva Das The Human Approval Button Is Not a Security Boundary Room: Grand Ballroom B (Street Level)Anusha Vajha When the Fraud Analyst Becomes an Agent: Threat Modeling Autonomy in High-Stakes AppSec Workflows Room: Grand Ballroom C (Street Level)Hamza Abubakar Kheruwala So your developers hate you... How to turn reluctant devs into AppSec champions Room: Bayview B (Bay Level)Dr. Katie Paxton-Fear Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by Design Room: Seacliff AB (Bay Level)Peyton Kennedy

11:15am PST

Puppy Lounge (Sponsored by Depthfirst) Expo Hall, Pacific Concourse

11:30am PST

Exploits of Agency: Mapping out insecure development patterns across the agentic landscape Room: Grand Ballroom A (Street Level)Dan Lisichkin Crypto Is Fine. The Code Is Not: OWASP A04 Cryptographic Failures Through Real-World CVEs Room: Grand Ballroom B (Street Level)Diptendu Kar Cage the Confused Deputy: Infrastructure-Layer Defense for Voice AI Agents Room: Grand Ballroom C (Street Level)Brian Cardinale How Security Champions can keep AI-driven software safe Room: Bayview B (Bay Level)Stanley Harris Beyond Detection: What We Learned Testing Every AI Approach to Vulnerability Classification Room: Seacliff AB (Bay Level)Arshan Dabirsiaghi • Ryan Dens

12:15pm PST

Lunch Expo Hall, Pacific Concourse

1:15pm PST

Panel Discussion Room: Grand Ballroom B (Street Level) Intent Contracts: Giving AI Agents the Missing Context for Safe Infrastructure Changes Room: Grand Ballroom A (Street Level)Chris Wysopal Controlling Decryption in Zero Trust Cloud Workloads Room: Grand Ballroom C (Street Level)Anjali Mangal • Vamshi Krishna Thotempudi • Mahima Agarwal • Raghav Batta Enterprise AppSec That Scales Itself Room: Bayview B (Bay Level)Dheven Kara • Kailey Stauble Reproducing the exploit, not the report Room: Seacliff AB (Bay Level)Hugo Guillaume • Hedi Sfaxi

2:15pm PST

The Compromised Maintainer Problem: Detecting Malicious Code in Legitimate Dependencies Room: Grand Ballroom A (Street Level)Polina Moshenets • Amro Haddadah When the Robot Writes the Bug: A Merge Gate for AI-Generated Code Room: Grand Ballroom B (Street Level)Maulik Bhatt Prompt Injection Through the Image Channel of Multimodal LLMs: An Ignored Attack Surface Room: Grand Ballroom C (Street Level)Pavan Reddy The attacker does not sort by CVSS Room: Bayview B (Bay Level)Hugo Guillaume Download, Merge, Compromised: A Live Backdoored Coding Model From a Public Hub Room: Seacliff AB (Bay Level)Vishal Khobare • Sandeep Kamble Puppy Lounge (Sponsored by Depthfirst) Expo Hall, Pacific Concourse

3:00pm PST

PM Break Expo Hall, Pacific Concourse

3:15pm PST

OWASP Leaders Meeting Room: Regency (Street Level)

3:30pm PST

Model Context Points of Failure: MCP Security Meets Scale Room: Grand Ballroom A (Street Level)Moshe Siman Tov Bustan Pattern, Graph, Prompt: What Happens When You Layer Three Analysis Paradigms on the Same Codebase Room: Grand Ballroom B (Street Level)Mudita Khurana Assume Code Execution: Securing Multi-Tenant Code-Ingestion Platforms Room: Grand Ballroom C (Street Level)Raphael Karger No value until it’s fixed: turning security reviews into a remediation loop Room: Bayview B (Bay Level)Emil Kvarnhammar Same Bug, Bigger Blast Radius: Breaking AI Control Planes with Classic AppSec Room: Seacliff AB (Bay Level)Aditi Bhatnagar

4:30pm PST

OWASP Jeopardy & Networking Reception in Expo Hall Expo Hall, Pacific Concourse