OWASP 2025 Global AppSec EU

OWASP 2025 Global AppSec EU

arrow_back View All Dates

10:30am CEST

A completely pluggable DevSecOps programme, for free, using community resources Room 116+117Spyros Gasteratos Think Before You Prompt: Securing Large Language Models from a Code Perspective Room 114Yaron Avital • Tomer Segev LLMs vs. SAST: How AI Delivers Accurate Vulnerability Detection and Reduces False Positives Room 115Jonathan Santilli • Kirill Efimov

11:00am CEST

OWASP Certified Secure Developer Open Call Room 133-134Shruti Kulkarni

11:30am CEST

Navigating Agentic AI Security Risks: OWASP’s GenAI Guidance for Securing Autonomous AI Agents Room 131-132John Sotiropoulos Restless Guests: From Subscription to Backdoor Intruder Room 113Simon Maxwell-Stewart Surviving prioritisation when CVE stands for “Customer Very Enthusiastic" Room 114Irene Michlin

1:15pm CEST

Abusing misconfigurations in CI/CD to hijack apps and clouds Room 113Håkon Nikolai Stange Sørum • Karim El-Melhaoui Scaling Threat Modeling with a Developer-Centric Approach Room 116+117Andrew Hainault • Andrea Scaduto Scale Security Programs with Scorecarding Room 115Rami McCarthy

2:15pm CEST

OWASP Security Champions Guide Project Room 131-132Aleksandra Kornecka Transaction authorization pitfalls – How to improve current financial, payment, and e-commerce apps? Room 116+117Wojciech Dworakowski GenAI Security - Insights and Current Gaps in OS LLM Vulnerability scanners and Guardrails Room 114Roman Vainshtein

3:30pm CEST

When Regulation Backfires: How a Vulnerable Plugin Led to an XSS Pandemic Room 113Eilon Cohen • Ori Ron LLM-Powered private Threat Modeling Room 116+117Murat Zhumagali Know Thy Judge: Uncovering Vulnerabilities of AI Evaluators Room 114Francisco Girbal Eiras • Eliott Zemour • Dan Ross