OWASP Global AppSec EU 2026 Vienna

OWASP Global AppSec EU 2026 Vienna

9:00am CEST

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 3-Day Training:AI Whiteboard Hacking aka Hands-on Threat Modeling Training

9:00am CEST

2-Day Training: Adam Shostack's Threat Modeling Intensive 2-Day Training: AI SecureOps: Attacking & Defending AI Applications and Agents (Hybrid) 2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning 2-Day Training: The Mobile Playbook - A guide for iOS and Android App Security (Hybrid) 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 3-Day Training:AI Whiteboard Hacking aka Hands-on Threat Modeling Training

9:00am CEST

1-Day Training: API Security: Hands-On Secure API Design & Hardening 1-Day Training: How to build a Successful Security Champions Program 1-Day Training: Master AI Security (Hybrid) 1-Day Training: Secure-by-Design AI Applications: Identifying, Testing, and Validating AI-Specific Threats Before Deployment 2-Day Training: Adam Shostack's Threat Modeling Intensive 2-Day Training: AI SecureOps: Attacking & Defending AI Applications and Agents (Hybrid) 2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning 2-Day Training: The Mobile Playbook - A guide for iOS and Android App Security (Hybrid) 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 3-Day Training:AI Whiteboard Hacking aka Hands-on Threat Modeling Training

10:30am CEST

Why Isn't the Fix in My Container? Tracking CVE Propagation Across 10,000 Projects Hall K1 (Level -2) Builders & Breakers Part II: Securing Agentic AI After the Death of LLM Wrappers Hall G1 (Level -2) AI Explainability Score Card Hall D (Level -2)

11:30am CEST

Actionable Continuous SBOM Diffing Hall K1 (Level -2) Authorization Is Where Your App Goes to Lie Hall D (Level -2) Developing Effective Security Testing Skills with Objective Structured Assessments Hall G2 (Level -2)

1:15pm CEST

OWASP ModSecurity Room -2.82 (Level 2) The Velocity Paradox: Why Slow is Smooth and Smooth is Fast in AppSec Hall K2 (Level -2)

1:45pm CEST

OWASP KubeFIM: Detecting File Integrity Threats with eBPF & AI in Kubernetes Room -2.82 (Level 2)

2:15pm CEST

From 0 to SLSA Level 3: A Practitioner's Field Guide Hall K1 (Level -2) Human Rights Threat Modeling Hall D (Level -2) Taming the AppSec Data Deluge Hall K2 (Level -2) This Build can Break You - Evil Runners and eBPF for Detection Hall G2 (Level -2)

3:30pm CEST

The Devil is in the Defaults - what to do about XSS Hall G1 (Level -2) Agile Development and IT Security – From Conflict to Collaboration Hall K2 (Level -2) Boiling the Ocean for Signal: Lessons from High-Volume OSS Malware Detection Hall G2 (Level -2)

10:30am CEST

Your Localhost Is Lying to You: Trust Boundary Failures in Enterprise SSO Hall G2 (Level -2)

11:30am CEST

Infrastructure Doesn’t Lie: Using Infrastructure Signals to Detect Shadow AI Built Applications Hall K1 (Level -2) Phishing for Passkeys - An Analysis of WebAuthn and CTAP Hall D (Level -2) Effort is All You Need: Testing LLM Applications in the Real World Hall G2 (Level -2)

1:15pm CEST

The OG OWASP Top 10 Might Be Back Thanks to Agentic Browsers Hall G1 (Level -2) AI-Generated Code vs Human Code. Who Really Writes More Vulnerabilities Hall D (Level -2) What Our Pen Tests Never Found — And How Attackers Did Hall G2 (Level -2) Finding strange things in binaries (Workshop) Room -2.33 (Level -2)

1:45pm CEST

Cloud Native Web Application Firewalls - How OWASP Coraza is coming to Kubernetes world Room -2.82 (Level 2)

2:15pm CEST

Marketplace Takeover: One Bug Away from Pwning 10 Million Developer Machines Hall K1 (Level -2) Teaching AI Agents Like Guide Dogs: A Progressive Trust Framework Hall D (Level -2) Using CTFs as a Community of Practice Content Machine Hall K2 (Level -2) Trust No History: Why Every "Remembered" Interaction is a Potential Backdoor Hall G2 (Level -2)

3:15pm CEST

Hack Your Own Dockerfiles (Before Someone Else Does): Hands-On Container Security with OWASP DockSec (Workshop) Room -2.33 (Level -2)

3:30pm CEST

From Safety to Policy: Enforcing Organizational Rules in LLMs and AI Agents Hall K1 (Level -2) The TPM and You - How (and why) to actually make use of your TPM Hall G1 (Level -2) Insecurity as Code: How Modern Software Scaled the Attack Surface Hall K2 (Level -2)