OWASP Global AppSec EU 2026 Vienna

OWASP Global AppSec EU 2026 Vienna

arrow_back View All Dates

7:45am CEST

Women in AppSec Breakfast (Sign up Required) Terrace G of Austria Center

8:30am CEST

Coffee/tea Expo Hall X1 OWASP Official Store: Come explore books, games and merch (or Explore CyberSec Games, OWASP books and official merch)

9:00am CEST

Opening Remarks Hall D (Level -2)

9:15am CEST

Keynote: The Reinvention of Software Engineering Hall D (Level -2)

10:00am CEST

AM Break in Expo Hall

10:05am CEST

Hands-On: Building Security Guardrails for AI-Generated Code Room -2.92 (Level -2) Teaching Security Concepts Using Physical Analogies Room -2.92 (Level -2) The Old But Unforgettable Key Room -2.92 (Level -2)

10:30am CEST

OWASP masCon - Introduction by OWASP MAS team to MAS Con Room -2.33 (Level -2) OpenCRE.org: Uniting all standards and guidelines Room -2.82 (Level 2) Why Isn't the Fix in My Container? Tracking CVE Propagation Across 10,000 Projects Hall K1 (Level -2) Builders & Breakers Part II: Securing Agentic AI After the Death of LLM Wrappers Hall G1 (Level -2) AI Explainability Score Card Hall D (Level -2) Why AppSec Fails at Scale (and How to Fix It) Hall K2 (Level -2) Scanning Agentic AI Systems: Beyond Traditional LLM Red Teaming Hall G2 (Level -2) Meet the Mentor

10:35am CEST

OWASP masCon - Let's get frooky: Structured Mobile DAST with Frida Room -2.33 (Level -2)

11:00am CEST

OWASP AI Testing Guide in Practice: Securing LLM Applications Room -2.82 (Level 2)

11:30am CEST

OWASP masCon - Unveiling The Internals From Multiplatform Mobile Runtimes Room -2.33 (Level -2) OWASP AI Security Verification Standard (AISVS) Room -2.82 (Level 2) Actionable Continuous SBOM Diffing Hall K1 (Level -2) The OWASP Top Ten 2025 Hall G1 (Level -2) Authorization Is Where Your App Goes to Lie Hall D (Level -2) Admission of Guilt: I Exploited a Parking System for a Year (And What It Taught Me About AppSec) Hall K2 (Level -2) Developing Effective Security Testing Skills with Objective Structured Assessments Hall G2 (Level -2)

12:15pm CEST

Lunch in Expo Hall Expo Hall X1 Cybersecurity Awareness Card Game : Let's Play Room -2.92 (Level -2) Hunting Critical CVEs: A Hands-On, Pick-Your-Own Exploitation POD Room -2.92 (Level -2) “2001: Agentic Odyssey” When threat modelling meets HAL, agentic AI, testing and safety engineering Room -2.92 (Level -2)

1:15pm CEST

OWASP masCon - Recent Mobile App Security Incidents from Real-World Cases Room -2.33 (Level -2) OWASP ModSecurity Room -2.82 (Level 2) One IDE to Rule Them All - Securing Your Supply Chain’s Weakest Link Hall K1 (Level -2) Retiring CVE Chasing: Defending Against Application Exploit Techniques Hall G1 (Level -2) The Map of Artificial Treasures: What to Automate in Security - and Why? Hall D (Level -2) The Velocity Paradox: Why Slow is Smooth and Smooth is Fast in AppSec Hall K2 (Level -2)

1:30pm CEST

Private Board Meeting Room -2.15 (Level -2)

1:45pm CEST

OWASP masCon - Meet the New Frida Frontend on the Block OWASP KubeFIM: Detecting File Integrity Threats with eBPF & AI in Kubernetes Room -2.82 (Level 2)

2:15pm CEST

OWASP masCon - Attacking ART Evil User Stories Modeling: Ensuring your User Stories in agile playing OWASP Cornucopia Room -2.82 (Level 2) From 0 to SLSA Level 3: A Practitioner's Field Guide Hall K1 (Level -2) Beyond the Chatbox: Implementing Guardrails for Autonomous Agents and LLMs Using Tools Hall G1 (Level -2) Human Rights Threat Modeling Hall D (Level -2) Taming the AppSec Data Deluge Hall K2 (Level -2) This Build can Break You - Evil Runners and eBPF for Detection Hall G2 (Level -2)

2:30pm CEST

AI for Code Security in Modern Codebases Room -2.92 (Level -2) Context & Cringe - Application Privacy through Play Room -2.92 (Level -2) DDoS your friends Room -2.92 (Level -2) From Prompts to Payloads: Exploiting the AI-AppSec Intersection Room -2.92 (Level -2)

2:45pm CEST

OWASP masCon - Closure of conference by OWASP MAS team OWASP MCP Top 10: When AI Agents Go Rogue, Securing the Model Context Protocol Room -2.82 (Level 2)

3:00pm CEST

PM Break in Expo Hall Expo Hall X1

3:15pm CEST

OWASP Leaders Meeting Room -2.15 (Level -2)

3:30pm CEST

OWASP AI Exchange Showcase Room -2.82 (Level 2) Pragmatic least-privilege for cloud and Kubernetes: applying good advice to real systems Hall K1 (Level -2) The Devil is in the Defaults - what to do about XSS Hall G1 (Level -2) AI and the Threat Modeling Manifesto: Conflicts, Failure Modes, and Better Patterns Hall D (Level -2) Agile Development and IT Security – From Conflict to Collaboration Hall K2 (Level -2) Boiling the Ocean for Signal: Lessons from High-Volume OSS Malware Detection Hall G2 (Level -2)

4:15pm CEST

Networking Reception in Expo Hall and OWASP Jeopardy! Expo Hall X1