Is the AI–API interaction the biggest security blind spot? with Gowtham Sundar

What best drives the adoption of secure software practices? with Enrique Larios Vargas

Why AppSec Needs More Than Just a Checkbox ⎢ Marcos Vinicius Cassel

The Supply Chain Crisis: How AI, Extensions & Dependencies Became the Attack Surface⎢Aamiruddin Syed

Why AppSec Is breaking: Vibe Coding, DevSecOps backlogs & the new OWASP Top 10 (with Tanya Janca)

Secure by Design: Who’s Really Responsible? with Abhijeth Dugginapeddi

The Pressure of Security Leadership: What SLAs Actually Work? with Terry O'Daniel

Can We Make AI Agents Smarter Than Security Teams? with Anshuman Bhartiya

Why DevSecOps isn't enough without deep cloud context with Anjali Singh Shukla

Decoding a Healthy Security Program: What Does "Healthy" Even Mean? with Maxwell Zhou

Why SAP Security Can be a Hidden Weakness for Enterprises with Oumaima Baira

Latin America’s AppSec Culture: What’s Lost (and Found) in Translation?

OWASP SAMM vs BSIMM: Which Maturity Model Reigns Supreme?

Security Culture: When Are We Really Creating Change? with Marisa Fagan

Security Wins Only When Institutionalized – Here’s Why!⎜Kevan Bard

Why Your Security Program Might Be Failing Before It Even Starts with Sean Finley

The Future of Pentesting: Can AI Replace Human Expertise? with Jyoti Raval

How to Fix the Lack of Clear Guidance in Building Effective Security Programs | Luís Fontes

AI Security: Do You Need a Dedicated Vendor? | Insights with James Berthoty

Why AppSec Isn’t Just For Tech — Surprising Insights ⎜ Olga Dzięgielewska

Are Traditional WAFs Dead? The Impact of OpenAPI Specs on Web Security with Nathan Byrd

How to Save Over $600K Annually by Streamlining AppSec Tools with Linda Fay

What Most Security Teams Miss: An Engineering Manager’s Take on AppSec with Desmond Lamptey

Compliance in Cyber: Can Regulation and Innovation coexist? ⎜ Chris Hughes

The Future of Product Security: Quality Engineering or something more? with Michael Novack

Should We Fix All Bad Code? with Eitan Worcel

AI, Speed, and Startup Chaos: Is ‘Minimum Viable Security’ the Fix? ⎜ Kalyani Pawar

Security IDE Plugins: Can They Really Boost Your Coding Security? ⎜Jamie Scott

DAST Tools: Can We Change the AppSec Community Perception? with Chris Lindsey

Secure Coding — Can we make it happen? with Tanya Janca

How Psychology Really Shapes AppSec Wins & Fails ⎢ Curtis Koenig

The Open Source Security Crisis: Is Trust the Weakest Link in Supply Chain? with François Proulx

Are we truly managing Third-Party risks, or just playing security theater? ⎢Rachel Curran

Hyped or Helpful? The Truth About Reachability & Developer Buy-In ⎢ Nir Valtman

DevSecOps vs. Reality: What You REALLY Need to Succeed! with Iman Ilbag

Unpacking Opengrep—A Deep Dive with Its Backing Teams

Is There a Secret to Mastering Threat Modeling at Scale? Ashwini Siddhi (GoDaddy)

Can You Really Quantify AppSec ROI? Here’s the Truth! ⎜Irfaan Santoe

How to Fix API Security Before It’s Too Late ⎜ Confidence Staveley

The Untold Benefits of Continuous Threat Modeling You Didn’t Know About ⎜Izar Tarandach

What does “collaborate with engineering” actually mean in AppSec? ⎜Koen Hendrix (Zendesk)

Is your organization mature enough for its first AppSec hire?⎢Akira Brand

Are we overlooking Kubernetes security in the race to deploy applications - Raunaq Arora

Is it actually realistic to see everyone as the greatest ally in security? - Alina Yakubenko

Can DevSecOps Maturity Models Fail? The Hidden Gaps in AppSec Programs ⎜Timo Pagel

Mycelium as the Path: How the Fungi Kingdom Guides us To Resilience in Cyber Programs | Akira Brand

AI in AppSec: Why we need to prioritize security | Anmol Agarwal

Most security tools are expensive paperweights: how to get your money's worth | Jeevan Singh

Accountability in application development | Cassie Crossley

A future of security free from CNAPP | James Berthoty

Is PAM dead?! Long live Just-in-time Access! | Ran Ne'man

Panel: Why scaling AppSec is harder than you think | Ariel Shin, Mel Reyes, Alina Yakubenko

Shift left sucks for SWEs: AppSec is a structured data problem | Jacob Salassi

Building a proactive development security culture - can we actually make it work? | Dustin Lehr

We have been doing API security wrong | Tristan Kalos

My mistakes in building an AppSec team | Aravind Sreenivasa

Panel: Can we actually measure the effectiveness of AI in cybersecurity?

Why the 'Secure by Design' pledge won't save us from AppSec failures | Chris Romeo

Our SAST tools have failed us | Munawar Hafiz

The dumpster fire of software supply chain security | Kyle Kelly