OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

arrow_back View All Dates

10:30am PST

Losing Context: Breaking & Binding MCP Sessions Room: Grand Ballroom B (Street Level)Srikanth Ramu When Finding Bugs Is the Easy Part: Lessons from an Agentic Vulnerability Harness Room: Seacliff AB (Bay Level)Venkata Suresh Sanga • Milind Daftari • Yuliana Martirosyan • Daniel Fernandez Coviella

11:30am PST

Finding Pwn Requests in OSS: Auditing CI/CD Pipelines for Supply-Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Arpit Jain Modelling for Agentic Failure; when attack trees meet safety engineering Room: Grand Ballroom C (Street Level)Petra Vukmirovic Shadow AI is the new Shadow IT Room: Bayview B (Bay Level)Sebastian Avarvarei Context Confusion Is the New Broken Access Control Room: Seacliff AB (Bay Level)Anusha Vajha

1:15pm PST

LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails Room: Grand Ballroom A (Street Level)Aviv Donenfeld So you think AI writes secure code? Room: Grand Ballroom B (Street Level)Shruti Datta Gupta • Joseph Seasly Why Developers Can and We Can't: Making Security Findings That Agents (and Humans) Can Act On Room: Bayview B (Bay Level)Hai Maler

2:15pm PST

When Nobody Wrote the Code: Engineering Lessons from Building AI-Native Application Security Room: Grand Ballroom B (Street Level)Manoj Kumar Yuvanesh • Uday Bhaskar Seelamantula Post Quantum Crypto (PQC) - Field-Tested Strategies to Defeat Harvest Now, Decrypt Later Room: Grand Ballroom C (Street Level)Anshu Gupta The Hidden Risks of Service-to-Service Trust in Microservice Architectures Room: Seacliff AB (Bay Level)Bhaumik Shah

3:30pm PST

Pre-Flight Security Review for MCP Servers Using the OWASP MCP Top 10 Room: Grand Ballroom B (Street Level)Vinothini Raju From Design Docs to Mitigations: Scaling Pre-Launch Security Review with Historical Decisions Room: Grand Ballroom C (Street Level)Liat Ben Porat • Guy Shtar Breaking the Headcount Scaling Model: How GitLab's Product Security Teams Achieved Non-Linear Securi Room: Bayview B (Bay Level)Vitor Meireles Finding the Infrastructure Trust Layer: AI-Assisted Discovery of Cross-Product SSRF Classes Room: Seacliff AB (Bay Level)Ofri Ouzan • Stav David