OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

9:00am PST

3 Day Training: Hacking Android, iOS and IoT apps by Example - 2026 Edition TBAAbraham Aranguren 3-Day Training: Adam Shostack's Threat Modeling Intensive Using AI TBAAdam Shostack 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access TBADawid Czagan

9:00am PST

2-Day Training: AI SecureOps: Attacking & Defending AI Applications & Agents TBAAbhinav Singh 2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning TBAAvi Douglen 2-Day Training: Secure Coding That Sticks: From Bad Code to Secure Design TBATanya Janca 3 Day Training: Hacking Android, iOS and IoT apps by Example - 2026 Edition TBAAbraham Aranguren 3-Day Training: Adam Shostack's Threat Modeling Intensive Using AI TBAAdam Shostack 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access TBADawid Czagan

9:00am PST

1-Day Training: Building Continuous SaaS Integration Security: Signals, Least Privilege, and Evidence AutomationPranav Saji 1-Day Training: How to build a Successful Security Champions Program TBAMarisa Fagan • Juliane Reimann 1-Day Training: OWASP AI Testing Guide (AITG): Enabling Trustworthy AI Through Structured Validation TBAMatteo Meucci • Marco Morana 2-Day Training: AI SecureOps: Attacking & Defending AI Applications & Agents TBAAbhinav Singh 2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning TBAAvi Douglen 2-Day Training: Secure Coding That Sticks: From Bad Code to Secure Design TBATanya Janca 3 Day Training: Hacking Android, iOS and IoT apps by Example - 2026 Edition TBAAbraham Aranguren 3-Day Training: Adam Shostack's Threat Modeling Intensive Using AI TBAAdam Shostack 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access TBADawid Czagan

10:30am PST

Beyond Provenance: Integrating Weight-Integrity Attestation Into Your AIBOM Pipeline Room: Grand Ballroom A (Street Level)Bodhisattva Das The Human Approval Button Is Not a Security Boundary Room: Grand Ballroom B (Street Level)Anusha Vajha So your developers hate you... How to turn reluctant devs into AppSec champions Room: Bayview B (Bay Level)Dr. Katie Paxton-Fear

11:30am PST

Exploits of Agency: Mapping out insecure development patterns across the agentic landscape Room: Grand Ballroom A (Street Level)Dan Lisichkin Crypto Is Fine. The Code Is Not: OWASP A04 Cryptographic Failures Through Real-World CVEs Room: Grand Ballroom B (Street Level)Diptendu Kar How Security Champions can keep AI-driven software safe Room: Bayview B (Bay Level)Stanley Harris Beyond Detection: What We Learned Testing Every AI Approach to Vulnerability Classification Room: Seacliff AB (Bay Level)Arshan Dabirsiaghi • Ryan Dens

1:15pm PST

Intent Contracts: Giving AI Agents the Missing Context for Safe Infrastructure Changes Room: Grand Ballroom A (Street Level)Chris Wysopal Enterprise AppSec That Scales Itself Room: Bayview B (Bay Level)Dheven Kara • Kailey Stauble Reproducing the exploit, not the report Room: Seacliff AB (Bay Level)Hugo Guillaume • Hedi Sfaxi

2:15pm PST

When the Robot Writes the Bug: A Merge Gate for AI-Generated Code Room: Grand Ballroom B (Street Level)Maulik Bhatt Prompt Injection Through the Image Channel of Multimodal LLMs: An Ignored Attack Surface Room: Grand Ballroom C (Street Level)Pavan Reddy The attacker does not sort by CVSS Room: Bayview B (Bay Level)Hugo Guillaume Download, Merge, Compromised: A Live Backdoored Coding Model From a Public Hub Room: Seacliff AB (Bay Level)Vishal Khobare • Sandeep Kamble

3:30pm PST

No value until it’s fixed: turning security reviews into a remediation loop Room: Bayview B (Bay Level)Emil Kvarnhammar Same Bug, Bigger Blast Radius: Breaking AI Control Planes with Classic AppSec Room: Seacliff AB (Bay Level)Aditi Bhatnagar

10:30am PST

Losing Context: Breaking & Binding MCP Sessions Room: Grand Ballroom B (Street Level)Srikanth Ramu When Finding Bugs Is the Easy Part: Lessons from an Agentic Vulnerability Harness Room: Seacliff AB (Bay Level)Venkata Suresh Sanga • Milind Daftari • Yuliana Martirosyan • Daniel Fernandez Coviella

11:30am PST

Finding Pwn Requests in OSS: Auditing CI/CD Pipelines for Supply-Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Arpit Jain Modelling for Agentic Failure; when attack trees meet safety engineering Room: Grand Ballroom C (Street Level)Petra Vukmirovic Shadow AI is the new Shadow IT Room: Bayview B (Bay Level)Sebastian Avarvarei Context Confusion Is the New Broken Access Control Room: Seacliff AB (Bay Level)Anusha Vajha

1:15pm PST

LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails Room: Grand Ballroom A (Street Level)Aviv Donenfeld So you think AI writes secure code? Room: Grand Ballroom B (Street Level)Shruti Datta Gupta • Joseph Seasly Why Developers Can and We Can't: Making Security Findings That Agents (and Humans) Can Act On Room: Bayview B (Bay Level)Hai Maler

2:15pm PST

When Nobody Wrote the Code: Engineering Lessons from Building AI-Native Application Security Room: Grand Ballroom B (Street Level)Manoj Kumar Yuvanesh • Uday Bhaskar Seelamantula Post Quantum Crypto (PQC) - Field-Tested Strategies to Defeat Harvest Now, Decrypt Later Room: Grand Ballroom C (Street Level)Anshu Gupta The Hidden Risks of Service-to-Service Trust in Microservice Architectures Room: Seacliff AB (Bay Level)Bhaumik Shah

3:30pm PST

Pre-Flight Security Review for MCP Servers Using the OWASP MCP Top 10 Room: Grand Ballroom B (Street Level)Vinothini Raju From Design Docs to Mitigations: Scaling Pre-Launch Security Review with Historical Decisions Room: Grand Ballroom C (Street Level)Liat Ben Porat • Guy Shtar Breaking the Headcount Scaling Model: How GitLab's Product Security Teams Achieved Non-Linear Securi Room: Bayview B (Bay Level)Vitor Meireles Finding the Infrastructure Trust Layer: AI-Assisted Discovery of Cross-Product SSRF Classes Room: Seacliff AB (Bay Level)Ofri Ouzan • Stav David