OWASP London Chapter Meetup [IN-PERSON]

This event is kindly sponsored by Nuaware, Sysdig and Black Duck.

There is limited seating available for in-person attendees. Registration required.

This event will also be live-streamed on YouTube.

Recordings will be available on the OWASP London YouTube channel

Venue Location: Rich Mix, 35-47 Bethnal Grn Rd, London E1 6LA

Nearest Tube Stations: Shoreditch High Street Overground (2 min walk), Liverpool Street (15 min walk)

Doors Open at 6pm for registration, pizza, drinks and networking. The talks start at 6:30pm (we start on time!).

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan, Andra Lezza, Sherif Mansour - OWASP London Chapter Leaders

"Platform as a Product: What happens when we treat security as a user?" - Hannah Foxwell

Security teams are suffering from information overload and alert fatigue. They are outnumbered by developers and the pace of change keeps accelerating. The endless list of CVEs just gets longer and longer and "AI transformation" brings with it new attack vectors and emerging risks. And now hackers come equipped with swarms of AI agents. If there is a chink in your cyber-armour an AI agent will find it and exploit it. The pressure has never been greater. How can internal platforms help security teams? If we treat security teams as platform users, and listen to their needs, suddenly the answers come into focus. In this talk Hannah will share what she's learned from building platforms that delight both developers and security.

"Judgement Day is Now : Machine speed defense in the Age of AI based attacks" - Bhavin Bhatt

"Judgment Day Is Now" uses Terminator 2 as a frame to explain why cloud breaches now execute in minutes, not months. Drawing on recent breach data and disclosed AI-driven attack cases, this talk explains how defenders can counter these AI based attacks at machine speed and stay ahead of attackers.

"Agentic AppSec for the AI Era" - Emmanuel Gonzalez Carmona

Demonstrate how AI powered coding assistants can be integrated safely and efficiently into agentic SDLC environments without compromising security, compliance, or intellectual property as well Signal - Black Duck's agentic AI application security solution that uses the power of LLMs to automatically find, prioritize, and fix security and other defects and 0-days in source code.

RAFFLE - win a prize (or two!) kindly donated by our sponsors!

SPEAKERS:

Hannah Foxwell

With over a decade of experience in engineering leadership, Hannah Foxwell has always advocated for the human aspects of technology transformation and evolution. Hannah is relentlessly curious about the tools, technologies, processes, and practices that make life better for the people involved in software development. This curiosity has naturally evolved alongside technological changes—from Agile to DevOps, DevSecOps, Cloud Native, and Platform Engineering. Hannah currently works at the intersection of cybersecurity, platform engineering, and AI, as the co-founder of BIMP, The Base Image Management Platform. As the creator of "AI for the Rest of Us," Hannah leads a community of over 2,000 enthusiasts in the UK, providing free monthly events and an annual conference aimed at demystifying the technology and improving AI fluency.

Bhavin Bhatt

I am a Cybersecurity Solutions engineer with 15+ years of experience helping enterprise and financial services organisations secure their environments across network, cloud and applications. My current focus is CNAPP, including runtime detection and response in the cloud.

Emmanuel Gonzalez Carmona

I am an experienced Application Security and DevSecOps expert, working as Lead Partner Sales Engineer at Black Duck Software. He supports partners and enterprise teams in identifying and reducing security risks across the entire software development lifecycle — covering SCA, SAST, DAST, supply chain risk management, CI/CD hardening, and Shift Left strategies as well as helping secure AI powered agentic software development workflows. His career includes leading global pre sales organisations and many years as a system and cloud engineer, giving him a rare combination of deep technical expertise and practical implementation experience. Based in Italy, I advise international customers on modern security and development practices.

TICKETS:

OWASP meetups are free and open to anyone interested in application security. Please note that you MUST book your place to be admitted to the event by the building security. Your name will be checked against the guest list

CODE OF CONDUCT:

We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously. OWASP Code Of Conduct: https://policy.owasp.org/operational/code-of-conduct

PHOTOGRAPHY:

Please note that OWASP events are open to the public, and OWASP does not restrict attendees (including OWASP staff, volunteers, sponsors, and media) from taking photos or videos at our events. The talks will be video recorded.
By attending OWASP events, you acknowledge that you are in a public space and that attendees (including OWASP staff, volunteers, sponsors, and media) may capture your image in photos and videos. Nevertheless, OWASP encourages event attendees to exercise common sense and good judgment and respect the wishes of other attendees who do not wish to be photographed at our events.

SPONSORS

This event is kindly sponsored by Nuaware, Sysdig and Black Duck