OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

arrow_back View All Dates

8:15am PST

Coffee/Tea Expo Hall, Pacific Concourse Registration Pacific Concourse Expo Hall Expo Hall, Pacific Concourse Start Up Sponsors Foyer

8:30am PST

Conference T-Shirt Pick up and OWASP Member Swag Room: Waterfront Foyer (Street Level)

8:45am PST

OWASP Book and Merch Store Room: Grand Ballroom Foyer (Street Level)

9:00am PST

Opening Remarks and Debate: Vulnerability auto-remediation breaks "you build it, you own it" Room: Grand Ballroom A (Street Level)Jeff Williams • Dr. Katie Paxton-Fear • Petra Vukmirovic

10:00am PST

AM Break Expo Hall, Pacific Concourse Capture The Flag with ArmorCode Room: Regency (Street Level)

10:15am PST

Meet the Mentor Room: Bayview A (Bay Level)Izar Tarandach PODS (Hands-on Activities) Room: Marina (Bay Level)

10:30am PST

Poisoning the Pipeline: Runner Cache Manipulation and OIDC Token Forgery Room: Grand Ballroom A (Street Level)Sneha Rangari Losing Context: Breaking & Binding MCP Sessions Room: Grand Ballroom B (Street Level)Srikanth Ramu CRA will be Cloud-Scale Engineering Change Room: Grand Ballroom C (Street Level)Adam Shostack From IC to Leader: A Field Guide to Building High-Performing Security Teams Room: Bayview B (Bay Level)Anshu Gupta When Finding Bugs Is the Easy Part: Lessons from an Agentic Vulnerability Harness Room: Seacliff AB (Bay Level)Venkata Suresh Sanga • Milind Daftari • Yuliana Martirosyan • Daniel Fernandez Coviella

11:30am PST

Finding Pwn Requests in OSS: Auditing CI/CD Pipelines for Supply-Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Arpit Jain The Hidden Effort Curve of Remediation: 15,000 Fixes, 500 Projects, 9 Languages Room: Grand Ballroom B (Street Level)Michael Cartsonis • Bruce Fram Modelling for Agentic Failure; when attack trees meet safety engineering Room: Grand Ballroom C (Street Level)Petra Vukmirovic Shadow AI is the new Shadow IT Room: Bayview B (Bay Level)Sebastian Avarvarei Context Confusion Is the New Broken Access Control Room: Seacliff AB (Bay Level)Anusha Vajha

12:15pm PST

Lunch Expo Hall, Pacific Concourse

1:15pm PST

Panel Discussion Room: Grand Ballroom C (Street Level) LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails Room: Grand Ballroom A (Street Level)Aviv Donenfeld So you think AI writes secure code? Room: Grand Ballroom B (Street Level)Shruti Datta Gupta • Joseph Seasly Why Developers Can and We Can't: Making Security Findings That Agents (and Humans) Can Act On Room: Bayview B (Bay Level)Hai Maler XSS is the new RCE: How we broke Tauri's security model Room: Seacliff AB (Bay Level)Yuval Moravchick CfP/CfTs for the Newcomer: How To Write A Good Submission Room: Bayview A (Bay Level)Avi Douglen • Izar Tarandach

2:15pm PST

Open Source Sleeper Agents: Compromising Agents via Chat Templates Room: Grand Ballroom A (Street Level)Ariel Fogel • Omer Hofman When Nobody Wrote the Code: Engineering Lessons from Building AI-Native Application Security Room: Grand Ballroom B (Street Level)Manoj Kumar Yuvanesh • Uday Bhaskar Seelamantula Post Quantum Crypto (PQC) - Field-Tested Strategies to Defeat Harvest Now, Decrypt Later Room: Grand Ballroom C (Street Level)Anshu Gupta From Consuming to Contributing: How We Built the Space That Was Missing Room: Bayview B (Bay Level)Saquib Saifee • Caroline Lee • Gaurang Deshpande The Hidden Risks of Service-to-Service Trust in Microservice Architectures Room: Seacliff AB (Bay Level)Bhaumik Shah

3:00pm PST

PM Break Expo Hall, Pacific Concourse

3:30pm PST

RepoHunter: AI-Driven Discovery of CI/CD Supply Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Barak Haryati Pre-Flight Security Review for MCP Servers Using the OWASP MCP Top 10 Room: Grand Ballroom B (Street Level)Vinothini Raju From Design Docs to Mitigations: Scaling Pre-Launch Security Review with Historical Decisions Room: Grand Ballroom C (Street Level)Liat Ben Porat • Guy Shtar Breaking the Headcount Scaling Model: How GitLab's Product Security Teams Achieved Non-Linear Securi Room: Bayview B (Bay Level)Vitor Meireles Finding the Infrastructure Trust Layer: AI-Assisted Discovery of Cross-Product SSRF Classes Room: Seacliff AB (Bay Level)Ofri Ouzan • Stav David

4:30pm PST

Closing Ceremony and Raffle Room: Grand Ballroom A (Street Level)

6:00pm PST

ThreatModCon Night Networking Reception Hyatt Regency, Lower Atrium