OWASP 2025 Global AppSec EU

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 9:00am - 5:00pm

3-Day Training: AI Whiteboard Hacking aka Hands-on Threat Modeling Training 9:00am - 5:00pm

3-Day Training: The Mobile Playbook - A guide for iOS and Android App Security 9:00am - 5:00pm

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 9:00am - 5:00pm

3-Day Training: AI Whiteboard Hacking aka Hands-on Threat Modeling Training 9:00am - 5:00pm

3-Day Training: The Mobile Playbook - A guide for iOS and Android App Security 9:00am - 5:00pm

2-Day Training: Adam Shostack's Threat Modeling Intensive 9:00am - 5:00pm

2-Day Training: Application Security Training with Jim Manico 9:00am - 5:00pm

2-Day Training: Building a High-Value App Scanning Programme (2025 Update) 9:00am - 5:00pm

2-Day Training: AppSec Automation Masterclass 9:00am - 5:00pm

2-Day Training: Practical Privacy by Design - Going Beyond Security in your SDLC 9:00am - 5:00pm

2-Day Training: Hacking Modern Web Apps: Master the Future of Attack Vectors 9:00am - 5:00pm

Coffee/Tea 8:15am - 9:00am

3-Day Training: Full-Stack Pentesting Laboratory: 100% Hands-On + Lifetime LAB Access 9:00am - 5:00pm

3-Day Training: AI Whiteboard Hacking aka Hands-on Threat Modeling Training 9:00am - 5:00pm

3-Day Training: The Mobile Playbook - A guide for iOS and Android App Security 9:00am - 5:00pm

2-Day Training: Adam Shostack's Threat Modeling Intensive 9:00am - 5:00pm

2-Day Training: Application Security Training with Jim Manico 9:00am - 5:00pm

2-Day Training: Building a High-Value App Scanning Programme (2025 Update) 9:00am - 5:00pm

2-Day Training: AppSec Automation Masterclass 9:00am - 5:00pm

2-Day Training: Practical Privacy by Design - Going Beyond Security in your SDLC 9:00am - 5:00pm

2-Day Training: Hacking Modern Web Apps: Master the Future of Attack Vectors 9:00am - 5:00pm

Global Board of Directors Public Board Meeting 5:30pm - 7:30pm

1-Day Training: Master AI security 9:00am - 5:00pm

1-Day Training:How to build a Successful Security Champions Program 9:00am - 5:00pm

Women in AppSec Reception (registration required) 7:30pm - 8:30pm

SAMM User Day 9:00am - 5:00pm

Open WAF Day | CRS & ModSecurity & Coraza 9:00am - 6:00pm

OWASP CycloneDX Hackathon with Transparency Exchange API 9:00am - 6:00pm

Coffee/Tea 8:15am - 8:45am

AM Break with Exhibitors 10:00am - 10:30am

PM Break with Exhibitors 3:00pm - 3:30pm

Networking Reception in Expo Hall 4:30pm - 6:30pm

Endor Lab's After Party 6:45pm - 8:30pm

OWASP Member Lounge 9:00am - 5:00pm

Leveraging AI for Secure React Development with... 10:30am - 11:15am

Hacking Your Enterprise Copilot: A Direct Guide... 11:30am - 12:15pm

Beyond the Surface: Exploring Attacker Persisten... 1:15pm - 2:00pm

Builders and Breakers: A Collaborative Look at S... 2:15pm - 3:00pm

To BI or Not to BI? Data Leakage Tragedies with... 3:30pm - 4:15pm

False Positives, Begone! Harnessing AI for Effic... 10:30am - 11:15am

Emerging Frontiers: Ransomware Attacks in AI Sys... 11:30am - 12:15pm

From Prompt to Protect: LLMs as Next-Gen WAF's 1:15pm - 2:00pm

Living the SBOM life - the good, the bad and the... 2:15pm - 3:00pm

Current challenges of GraphQL security 3:30pm - 4:15pm

Human Buffer Overflow: How to Deal with Cognitiv... 10:30am - 11:15am

Your Security Dashboard Is Lying to You: The Sci... 11:30am - 12:15pm

Against all odds: Kickstarting your Product Secu... 1:15pm - 2:00pm

Beyond Best Practices: Uncovering the Organizati... 2:15pm - 3:00pm

Kaizen for your appsec program: Turning big prob... 3:30pm - 4:15pm

Keynote:Nemo Resideo: Managing application security through rapi... 9:00am - 10:00am

The Edge Strikes Back: Challenging OWASP's Take... 10:30am - 11:15am

Securing cross-platform mobile applications 11:30am - 12:15pm

Mastering Security through Simple Machines: How... 1:15pm - 2:00pm

Friend or Foe? TypeScript Security Fallacies 2:15pm - 3:00pm

Policy as Code for Applications at Scale 3:30pm - 4:15pm

CfP/CfTs for the Newcomer: How To Write A Good S... 10:30am - 11:15am

Meet the Mentor 1:15pm - 3:00pm

Speaker Ready Room 8:30am - 5:00pm

Coffee/Tea 8:15am - 9:00am

AM Break with Exhibitors 10:00am - 10:30am

PM Break with Exhibitors 3:00pm - 3:30pm

OWASP Member Lounge 9:00am - 5:00pm

Doors of (AI)pportunity: The Front and Backdoors... 10:30am - 11:15am

Restless Guests: From Subscription to Backdoor I... 11:30am - 12:15pm

Abusing misconfigurations in CI/CD to hijack app... 1:15pm - 2:00pm

Compromised at the Source: Supply Chain Risks in... 2:15pm - 3:00pm

When Regulation Backfires: How a Vulnerable Plug... 3:30pm - 4:15pm

Think Before You Prompt: Securing Large Language... 10:30am - 11:15am

Surviving prioritisation when CVE stands for “Cu... 11:30am - 12:15pm

Signing is Sassy, but CI/CD Security Pays the Bi... 1:15pm - 2:00pm

GenAI Security - Insights and Current Gaps in OS... 2:15pm - 3:00pm

Know Thy Judge: Uncovering Vulnerabilities of AI... 3:30pm - 4:15pm

LLMs vs. SAST: How AI Delivers Accurate Vulnerab... 10:30am - 11:15am

Security Champion Worst Practices 11:30am - 12:15pm

Scale Security Programs with Scorecarding 1:15pm - 2:00pm

Metrics That Matter: Driving AppSec Success with... 2:15pm - 3:00pm

An AppSec Tale: From Zero to Champions 3:30pm - 4:15pm

Keynote: Outside the Ivory Tower: Connecting Practice and Scienc... 9:00am - 10:00am

A completely pluggable DevSecOps programme, for... 10:30am - 11:15am

Introducing the 5.0 release of the ASVS 11:30am - 12:15pm

Scaling Threat Modeling with a Developer-Centric... 1:15pm - 2:00pm

Transaction authorization pitfalls – How to impr... 2:15pm - 3:00pm

LLM-Powered private Threat Modeling 3:30pm - 4:15pm

Closing Ceremony and Raffle 4:30pm - 5:30pm

Bob the Breaker CTF - The Reunion. The No-code/Low-code Hacking Saga Continues. 10:00am - 2:00pm

Speaker Ready Room 8:30am - 5:00pm