OWASP 2025 Global AppSec EU

OWASP 2025 Global AppSec EU

9:00am CEST

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access Room 118Dawid Czagan 3-Day Training: The Mobile Playbook - A guide for iOS and Android App Security Room 120Sven Schleier

9:00am CEST

2-Day Training: Adam Shostack's Threat Modeling Intensive Room 121Adam Shostack 2-Day Training: AppSec Automation Masterclass Room 124Abhay Bhargav 2-Day Training: Hacking Modern Web Apps: Master the Future of Attack Vectors Room 127Abraham Aranguren 2-Day Training: Practical Privacy by Design - Going Beyond Security in your SDLC Room 125Avi Douglen • Dr. Kim Wuyts 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access Room 118Dawid Czagan 3-Day Training: The Mobile Playbook - A guide for iOS and Android App Security Room 120Sven Schleier

9:00am CEST

1-Day Training: Master AI security Room 129Rob van der Veer 1-Day Training:How to build a Successful Security Champions Program Room 130Marisa Fagan • Juliane Reimann 2-Day Training: Adam Shostack's Threat Modeling Intensive Room 121Adam Shostack 2-Day Training: AppSec Automation Masterclass Room 124Abhay Bhargav 2-Day Training: Hacking Modern Web Apps: Master the Future of Attack Vectors Room 127Abraham Aranguren 2-Day Training: Practical Privacy by Design - Going Beyond Security in your SDLC Room 125Dr. Kim Wuyts • Avi Douglen 3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access Room 118Dawid Czagan 3-Day Training: The Mobile Playbook - A guide for iOS and Android App Security Room 120Sven Schleier

10:30am CEST

The Edge Strikes Back: Challenging OWASP's Take on Edge-Level Authorization Room 116+117Dimitrij Drus False Positives, Begone! Harnessing AI for Efficient SAST Triage Room 114Elliot Ward Human Buffer Overflow: How to Deal with Cognitive Load in High-Performing Teams Room 115Juliane Reimann

10:45am CEST

OWASP Certified Secure Developer Open Call Room 133-134Shruti Kulkarni OWASP Web Application Honeypot Project - Creating Comprehensive Threat Intelligence Dataset Room 133-134Kartik Adak • Mukunthan Nagarajan • Adrian Winckles

11:00am CEST

OWASP Juice Shop Demo: Your vitamin shot for security awareness & education Room 133-134Björn Kimminich

11:30am CEST

OWASP Threat Library Room 131-132Petra Vukmirovic Emerging Frontiers: Ransomware Attacks in AI Systems Room 114Behnaz Karimi • Yuvaraj Govindarajulu

1:15pm CEST

Beyond the Surface: Exploring Attacker Persistence Strategies in Kubernetes Room 113Rory McCune Mastering Security through Simple Machines: How Consistency, Not Complexity, Drives Innovation Room 116+117Ken Toler From Prompt to Protect: LLMs as Next-Gen WAF's Room 114Juan Berner

2:15pm CEST

Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps Room 113Javan Rasokat • Rico Komenda Friend or Foe? TypeScript Security Fallacies Room 116+117Liran Tal Beyond Best Practices: Uncovering the Organizational Roots of Software Security Vulnerabilities Room 115Tomer Gershoni

3:30pm CEST

To BI or Not to BI? Data Leakage Tragedies with Power BI Reports Room 113Uriya Elkayam Policy as Code for Applications at Scale Room 116+117Magnus Jungsbluth Current challenges of GraphQL security Room 114Maxence Lecanu • Antoine Carossio

3:35pm CEST

OWASP Domain Protect Project Room 131-132Paul Schwarzenberger

10:30am CEST

A completely pluggable DevSecOps programme, for free, using community resources Room 116+117Spyros Gasteratos Think Before You Prompt: Securing Large Language Models from a Code Perspective Room 114Yaron Avital • Tomer Segev LLMs vs. SAST: How AI Delivers Accurate Vulnerability Detection and Reduces False Positives Room 115Jonathan Santilli • Kirill Efimov

11:00am CEST

OWASP Certified Secure Developer Open Call Room 133-134Shruti Kulkarni

11:30am CEST

Navigating Agentic AI Security Risks: OWASP’s GenAI Guidance for Securing Autonomous AI Agents Room 131-132John Sotiropoulos Restless Guests: From Subscription to Backdoor Intruder Room 113Simon Maxwell-Stewart Surviving prioritisation when CVE stands for “Customer Very Enthusiastic" Room 114Irene Michlin

1:15pm CEST

Abusing misconfigurations in CI/CD to hijack apps and clouds Room 113Håkon Nikolai Stange Sørum • Karim El-Melhaoui Scaling Threat Modeling with a Developer-Centric Approach Room 116+117Andrew Hainault • Andrea Scaduto Scale Security Programs with Scorecarding Room 115Rami McCarthy

2:15pm CEST

OWASP Security Champions Guide Project Room 131-132Aleksandra Kornecka Transaction authorization pitfalls – How to improve current financial, payment, and e-commerce apps? Room 116+117Wojciech Dworakowski GenAI Security - Insights and Current Gaps in OS LLM Vulnerability scanners and Guardrails Room 114Roman Vainshtein

3:30pm CEST

When Regulation Backfires: How a Vulnerable Plugin Led to an XSS Pandemic Room 113Eilon Cohen • Ori Ron LLM-Powered private Threat Modeling Room 116+117Murat Zhumagali Know Thy Judge: Uncovering Vulnerabilities of AI Evaluators Room 114Francisco Girbal Eiras • Eliott Zemour • Dan Ross