AI
How to Defend Your PKI Estate: Lessons Learned from Eight Years of CAA and Certificate Transparency
cryptographynetwork and infrastructure
Cybersecurity
OWASP Global AppSec USA 2025 2025
OWASP Global AppSec USA 2025 is a premier application security conference. It brings together 800+ developers, security experts, and leaders for sessions on AI security, threat modeling, and DevSecOps.
24
Talks
Day 1
24 talks
Lost in Translation: Exploiting Unicode Normalization
application securityoffensive security
Benchmarking Scanner Blind Spots: How Runtime Context Uncovers Hidden Vulns
application securitydefensive security
How Latest Browser Security Features Eliminate Bug Classes
application securitydefensive security
Stop Trying to "Manage Risk" (Keynote)
governance and risksecurity leadership
How to Embed Privacy Threat Modeling in Agile Sprint Rituals Without Slowing Teams Down
application securitygovernance and risk
The Future of AppSec is Continuous Context (Keynote)
ai securityapplication securitysecurity leadership
OWASP VXDF: Is that really vulnerable? Show me the VXDF!
application securitydefensive security
Privacy by Design: What Are Engineers Supposed to Do With That?
application securitygovernance and risk
OWASP Top 10 Annoucement
application securitygovernance and risk
OWASP Nettacker Project
offensive securitynetwork and infrastructure
Ultimate Build Power, Itty Bitty Security Controls - OWASP's New Top 10 for Citizen Developer Risk
application securitygovernance and risk
OWASP AIVSS Project: What it is, why we need it and how we are doing it
ai securitygovernance and risk
From Maturity to Mastery: Accelerating Software Security with OWASP SAMM
application securitygovernance and risk
The SCA Balancing Act
application securitysecurity leadership
From Soft Skills to Hard Data: Measuring the Impact of Culture and Security Champions
application securitysecurity leadership
Beyond the Checklist: Building an AppSec Culture That Engineers Don't Dread
application securitysecurity leadership
Two Paths to Security Upskilling: Startup and Enterprise
security leadershipapplication security
Security Champions at Scale: Transforming Security Culture by Aligning Incentives and Gamification
security leadershipapplication security
Indirect Prompt Injection: Architectural Testing Approaches for Real World AI/ML Systems
ai securityapplication securityoffensive security
Plugins Gone Rogue: Attacking Developer Environments
application securityoffensive security
Your RPA is Mine: Complete Takeover of RPA Ecosystems
application securityoffensive security
Attacking AI
offensive securityai security
Peeling Back the Plastic: Finding 0-Days in IoT Devices
mobile and iot securityoffensive securitynetwork and infrastructure