OWASP Global AppSec USA 2026: Grid

Expand

Room: Bay Level Foyer	TBA

8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm

Registration 8:15am - 3:30pm

Breakfast 8:15am - 9:00am

AM Break 10:30am - 11:00am

Lunch 12:30pm - 1:30pm

PM Break 3:00pm - 3:30pm

3-Day Training: Building AI-based security tools & SDLC 9:00am - 5:00pm

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 9:00am - 5:00pm

3 Day Training: Hacking Android, iOS and IoT apps by Example - 2026 Edition 9:00am - 5:00pm

3-Day Training: Adam Shostack's Threat Modeling Intensive Using AI 9:00am - 5:00pm

Expand

Room: Bay Level Foyer	Room: Boardroom A (Lobby Level)	TBA

8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm

Registration 8:15am - 3:30pm

AM Break 10:30am - 11:00am

Lunch 12:30pm - 1:30pm

PM Break 3:00pm - 3:30pm

Private OWASP Board Meeting 9:00am - 5:00pm

Breakfast 8:15am - 9:00am

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 9:00am - 5:00pm

2-Day Training: Beyond Whiteboard Hacking: Embracing AI-Assisted Threat Modeling 9:00am - 5:00pm

3-Day Training: Building AI-based security tools & SDLC 9:00am - 5:00pm

2-Day Training: AI SecureOps: Attacking & Defending AI Applications & Agents 9:00am - 5:00pm

2-Day Training: Secure Coding That Sticks: From Bad Code to Secure Design 9:00am - 5:00pm

2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning 9:00am - 5:00pm

3 Day Training: Hacking Android, iOS and IoT apps by Example - 2026 Edition 9:00am - 5:00pm

3-Day Training: Adam Shostack's Threat Modeling Intensive Using AI 9:00am - 5:00pm

Expand

Room: Bay Level Foyer	Room: Waterfront E (Lobby Level)	TBA

8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm
5:15pm
5:30pm
5:45pm
6:00pm
6:15pm
6:30pm
6:45pm
7:00pm

Breakfast 8:15am - 9:00am

Registration 8:15am - 5:00pm

AM Break 10:30am - 11:00am

Lunch 12:30pm - 1:30pm

PM Break 3:00pm - 3:30pm

Global Board of Directors Public Board Meeting 5:00pm - 7:00pm

2-Day Training: Secure Coding That Sticks: From Bad Code to Secure Design 9:00am - 5:00pm

1-Day Training: Secure Code with AI: Building a Trustworthy Spec-Driven AI Code Workflow 9:00am - 5:00pm

2-Day Training: 2-Day Training: Beyond Whiteboard Hacking: Embracing AI-Assisted Threat Modeling 9:00am - 5:00pm

1-Day Training: How to build a Successful Security Champions Program 9:00am - 5:00pm

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 9:00am - 5:00pm

3-Day Training: Adam Shostack's Threat Modeling Intensive Using AI 9:00am - 5:00pm

3-Day Training: Building AI-based security tools & SDLC 9:00am - 5:00pm

3 Day Training: Hacking Android, iOS and IoT apps by Example - 2026 Edition 9:00am - 5:00pm

2-Day Training: AI SecureOps: Attacking & Defending AI Applications & Agents 9:00am - 5:00pm

OWASP SAMM and DSOMM User Day 9:00am - 5:00pm

2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning 9:00am - 5:00pm

1-Day Training: OWASP AI Testing Guide (AITG): Enabling Trustworthy AI Through Structured Validation 9:00am - 5:00pm

Expand

Expo Hall, Pacific Concourse	Pacific Concourse	Room: Bayview A	Room: Bayview B (Bay Level)	Room: Grand Ballroom A (Street Level)	Room: Grand Ballroom B (Street Level)	Room: Grand Ballroom C (Street Level)	Room: Grand Ballroom Foyer (Street Level)	Room: Marina (Bay Level)	Room: Regency (Street Level)	Room: Seacliff AB (Bay Level)	Room: Waterfront Foyer (Street Level)	TBA

7:15am
7:30am
7:45am
8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm
5:15pm
5:30pm
5:45pm
6:00pm
6:15pm
6:30pm
6:45pm

Coffee/tea 8:15am - 9:00am

Expo Hall 8:15am - 6:45pm

AM Break 10:00am - 10:30am

Puppy Lounge (Sponsored by Depthfirst) 11:15am - 1:15pm

Lunch 12:15pm - 1:15pm

Puppy Lounge (Sponsored by Depthfirst) 2:15pm - 4:15pm

PM Break 3:00pm - 3:30pm

OWASP Jeopardy & Networking Reception in Expo Hall 4:30pm - 6:30pm

Registration 8:00am - 5:00pm

MiniCon: OWASP by Design 10:00am - 4:30pm

So your developers hate you... How to turn reluc... 10:30am - 11:15am

How Security Champions can keep AI-driven softwa... 11:30am - 12:15pm

Enterprise AppSec That Scales Itself 1:15pm - 2:00pm

The attacker does not sort by CVSS 2:15pm - 3:00pm

No value until it’s fixed: turning security revi... 3:30pm - 4:15pm

Opening Remarks and Keynote, The End of Guessing: Security's Com... 9:00am - 10:00am

Beyond Provenance: Integrating Weight-Integrity... 10:30am - 11:15am

Exploits of Agency: Mapping out insecure develop... 11:30am - 12:15pm

Intent Contracts: Giving AI Agents the Missing C... 1:15pm - 2:00pm

The Compromised Maintainer Problem: Detecting Ma... 2:15pm - 3:00pm

Model Context Points of Failure: MCP Security Me... 3:30pm - 4:15pm

The Human Approval Button Is Not a Security Boun... 10:30am - 11:15am

Crypto Is Fine. The Code Is Not: OWASP A04 Crypt... 11:30am - 12:15pm

Panel Discussion 1:15pm - 2:00pm

When the Robot Writes the Bug: A Merge Gate for... 2:15pm - 3:00pm

Pattern, Graph, Prompt: What Happens When You La... 3:30pm - 4:15pm

When the Fraud Analyst Becomes an Agent: Threat... 10:30am - 11:15am

Cage the Confused Deputy: Infrastructure-Layer D... 11:30am - 12:15pm

Controlling Decryption in Zero Trust Cloud Workl... 1:15pm - 2:00pm

Prompt Injection Through the Image Channel of Mu... 2:15pm - 3:00pm

Assume Code Execution: Securing Multi-Tenant Cod... 3:30pm - 4:15pm

Start Up Sponsors 8:30am - 4:30pm

OWASP Book and Merch Store 8:45am - 4:45pm

PODS (Hands-on Activities) 10:15am - 4:30pm

Podcast Recording Room 10:15am - 2:00pm

OWASP Leaders Meeting 3:15pm - 4:15pm

Hacking Your Life with AI Can Get You Hacked: Ho... 10:30am - 11:15am

Beyond Detection: What We Learned Testing Every... 11:30am - 12:15pm

Reproducing the exploit, not the report 1:15pm - 2:00pm

Download, Merge, Compromised: A Live Backdoored... 2:15pm - 3:00pm

Same Bug, Bigger Blast Radius: Breaking AI Contr... 3:30pm - 4:15pm

Conference T-Shirt Pick up and OWASP Member Swag 8:30am - 4:00pm

Women in AppSec Breakfast (Sign up required) 7:30am - 8:30am

Expand

Expo Hall, Pacific Concourse	Foyer	Hyatt Regency, Lower Atrium	Pacific Concourse	Room: Bayview A (Bay Level)	Room: Bayview B (Bay Level)	Room: Grand Ballroom A (Street Level)	Room: Grand Ballroom B (Street Level)	Room: Grand Ballroom C (Street Level)	Room: Grand Ballroom Foyer (Street Level)	Room: Marina (Bay Level)	Room: Regency (Street Level)	Room: Seacliff AB (Bay Level)	Room: Waterfront Foyer (Street Level)

8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm
5:15pm
5:30pm
5:45pm
6:00pm
6:15pm
6:30pm
6:45pm
7:00pm
7:15pm
7:30pm
7:45pm
8:00pm

Coffee/Tea 8:15am - 9:00am

Expo Hall 8:15am - 3:30pm

AM Break 10:00am - 10:30am

Lunch 12:15pm - 1:15pm

PM Break 3:00pm - 3:30pm

Start Up Sponsors 8:15am - 4:30pm

ThreatModCon Night Networking Reception 6:00pm - 8:00pm

Registration 8:15am - 1:15pm

Meet the Mentor 10:15am - 12:15pm

CfP/CfTs for the Newcomer: How To Write A Good Submission 1:15pm - 2:30pm

From IC to Leader: A Field Guide to Building Hig... 10:30am - 11:15am

Shadow AI is the new Shadow IT 11:30am - 12:15pm

Why Developers Can and We Can't: Making Security... 1:15pm - 2:00pm

From Consuming to Contributing: How We Built the... 2:15pm - 3:00pm

Breaking the Headcount Scaling Model: How GitLab... 3:30pm - 4:15pm

Opening Remarks and Debate: Vulnerability auto-remediation break... 9:00am - 10:00am

Poisoning the Pipeline: Runner Cache Manipulatio... 10:30am - 11:15am

Finding Pwn Requests in OSS: Auditing CI/CD Pipe... 11:30am - 12:15pm

LGTM: Bypassing an LLM Build Gate When Prompt In... 1:15pm - 2:00pm

Open Source Sleeper Agents: Compromising Agents... 2:15pm - 3:00pm

RepoHunter: AI-Driven Discovery of CI/CD Supply... 3:30pm - 4:15pm

Closing Ceremony and Raffle 4:30pm - 5:30pm

Losing Context: Breaking & Binding MCP Sessions 10:30am - 11:15am

The Hidden Effort Curve of Remediation: 15,000 F... 11:30am - 12:15pm

So you think AI writes secure code? 1:15pm - 2:00pm

When Nobody Wrote the Code: Engineering Lessons... 2:15pm - 3:00pm

Pre-Flight Security Review for MCP Servers Using... 3:30pm - 4:15pm

CRA will be Cloud-Scale Engineering Change 10:30am - 11:15am

Modelling for Agentic Failure; when attack trees... 11:30am - 12:15pm

Panel Discussion 1:15pm - 2:00pm

Post Quantum Crypto (PQC) - Field-Tested Strateg... 2:15pm - 3:00pm

From Design Docs to Mitigations: Scaling Pre-Lau... 3:30pm - 4:15pm

OWASP Book and Merch Store 8:45am - 4:30pm

PODS (Hands-on Activities) 10:15am - 4:30pm

Capture The Flag with ArmorCode 10:00am - 3:00pm

When Finding Bugs Is the Easy Part: Lessons from... 10:30am - 11:15am

Context Confusion Is the New Broken Access Contr... 11:30am - 12:15pm

XSS is the new RCE: How we broke Tauri's securit... 1:15pm - 2:00pm

The Hidden Risks of Service-to-Service Trust in... 2:15pm - 3:00pm

Finding the Infrastructure Trust Layer: AI-Assis... 3:30pm - 4:15pm

Conference T-Shirt Pick up and OWASP Member Swag 8:30am - 3:00pm

OWASP Global AppSec USA 2026

Get help with the event