Sched.com Conference Mobile Apps
OWASP Global AppSec USA 2026
OWASP Global AppSec USA 2026
Sign up
or
log in
to add sessions to your schedule and sync them to your phone or calendar.
About
Schedule
Know before you go!
Venue Map
Search
Menu
About
Schedule
Know before you go!
Venue Map
Search
Share your event
Share via
or Copy link
Copy
Event Schedule
My Schedule
0
View
Simple
Expanded
Grid
By Venue
View
Simple
Expanded
Grid
By Venue
arrow_back
View All Dates
Friday
, November 6
Expo Hall, Pacific Concourse
8:15am •
Coffee/Tea
8:15am •
Expo Hall
10:00am •
AM Break
12:15pm •
Lunch
3:00pm •
PM Break
Foyer
8:15am •
Start Up Sponsors
Hyatt Regency, Lower Atrium
6:00pm •
ThreatModCon Night Networking Reception
Pacific Concourse
8:15am •
Registration
Room: Bayview A (Bay Level)
10:15am •
Meet the Mentor
1:15pm •
CfP/CfTs for the Newcomer: How To Write A Good Submission
Room: Bayview B (Bay Level)
10:30am •
From IC to Leader: A Field Guide to Building High-Performing Security Teams
11:30am •
Shadow AI is the new Shadow IT
1:15pm •
Why Developers Can and We Can't: Making Security Findings That Agents (and Humans) Can Act On
2:15pm •
From Consuming to Contributing: How We Built the Space That Was Missing
3:30pm •
Breaking the Headcount Scaling Model: How GitLab's Product Security Teams Achieved Non-Linear Securi
Room: Grand Ballroom A (Street Level)
9:00am •
Opening Remarks and Debate: Vulnerability auto-remediation breaks "you build it, you own it"
10:30am •
Poisoning the Pipeline: Runner Cache Manipulation and OIDC Token Forgery
11:30am •
Finding Pwn Requests in OSS: Auditing CI/CD Pipelines for Supply-Chain Vulnerabilities at Scale
1:15pm •
LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails
2:15pm •
Open Source Sleeper Agents: Compromising Agents via Chat Templates
3:30pm •
RepoHunter: AI-Driven Discovery of CI/CD Supply Chain Vulnerabilities at Scale
4:30pm •
Closing Ceremony and Raffle
Room: Grand Ballroom B (Street Level)
10:30am •
Losing Context: Breaking & Binding MCP Sessions
11:30am •
The Hidden Effort Curve of Remediation: 15,000 Fixes, 500 Projects, 9 Languages
1:15pm •
So you think AI writes secure code?
2:15pm •
When Nobody Wrote the Code: Engineering Lessons from Building AI-Native Application Security
3:30pm •
Pre-Flight Security Review for MCP Servers Using the OWASP MCP Top 10
Room: Grand Ballroom C (Street Level)
10:30am •
CRA will be Cloud-Scale Engineering Change
11:30am •
Modelling for Agentic Failure; when attack trees meet safety engineering
1:15pm •
Panel Discussion
2:15pm •
Post Quantum Crypto (PQC) - Field-Tested Strategies to Defeat Harvest Now, Decrypt Later
3:30pm •
From Design Docs to Mitigations: Scaling Pre-Launch Security Review with Historical Decisions
Room: Grand Ballroom Foyer (Street Level)
8:45am •
OWASP Book and Merch Store
Room: Marina (Bay Level)
10:15am •
PODS (Hands-on Activities)
Room: Regency (Street Level)
10:00am •
Capture The Flag with ArmorCode
Room: Seacliff AB (Bay Level)
10:30am •
When Finding Bugs Is the Easy Part: Lessons from an Agentic Vulnerability Harness
11:30am •
Context Confusion Is the New Broken Access Control
1:15pm •
XSS is the new RCE: How we broke Tauri's security model
2:15pm •
The Hidden Risks of Service-to-Service Trust in Microservice Architectures
3:30pm •
Finding the Infrastructure Trust Layer: AI-Assisted Discovery of Cross-Product SSRF Classes
Room: Waterfront Foyer (Street Level)
8:30am •
Conference T-Shirt Pick up and OWASP Member Swag
Filter By Date
Nov 2
-
6, 2026
Monday
, November 2
Tuesday
, November 3
Wednesday
, November 4
Thursday
, November 5
Friday
, November 6
Filter By Venue
Hyatt Regency San Francisco, CA
All
Expo Hall, Pacific Concourse
Foyer
Hyatt Regency, Lower Atrium
Pacific Concourse
Room: Bay Level Foyer
Room: Bayview A
Room: Bayview A (Bay Level)
Room: Bayview B (Bay Level)
Room: Boardroom A (Lobby Level)
Room: Grand Ballroom A (Street Level)
Room: Grand Ballroom B (Street Level)
Room: Grand Ballroom C (Street Level)
Room: Grand Ballroom Foyer (Street Level)
Room: Marina (Bay Level)
Room: Regency (Street Level)
Room: Seacliff AB (Bay Level)
Room: Waterfront E (Lobby Level)
Room: Waterfront Foyer (Street Level)
TBA
Filter By Type
1-Day Training
2-Day Training
3-Day Training
Bonus Track
Capture the Flag
Deployment and Maintenance
Expo Hall
Implementation
Keynote
Meals Provided by OWASP
Meeting
MiniCon: OWASP by Design
Planning and Design
PODS (Hands-on Activities)
Process and Culture
Project User Day
Testing
Audience
Advanced
All
Beginner
Closed Session
Intermediate
Introductory and Overview
Popular
Share Modal
Share this link via
Or copy link
Copy
Filter sessions
Apply filters to sessions.
Filtered by
Date
-
Clear filter
close
Dates
Monday
, November 2
Tuesday
, November 3
Wednesday
, November 4
Thursday
, November 5
Friday
, November 6
Session Type
1-Day Training
2-Day Training
3-Day Training
Bonus Track
Capture the Flag
Deployment and Maintenance
Expo Hall
Implementation
Keynote
Meals Provided by OWASP
Meeting
MiniCon: OWASP by Design
Planning and Design
PODS (Hands-on Activities)
Process and Culture
Project User Day
Testing
Other Filters
Audience
Advanced
All
Beginner
Closed Session
Intermediate
Introductory and Overview
Popular
