APPSEC W
RLD
APPSEC W
RLD

The Global Application Security Forum

About AppSec World

One global meeting place for application security leaders.

Since 2023, AppSec World has become the defining meeting place for the people securing how enterprise software gets built.

Trusted by more than 2,500+ AppSec & Engineering leaders worldwide the past 3 years, alongside the platforms, engineers and innovators deciding how software gets secured.

Software is being written faster than it can be secured, and AI has widened the gap: assistants are producing code at volume, agents are reaching into repositories and pipelines, and the supply chain underneath keeps getting attacked.

AppSec World is where the industry comes together to set the agenda, meet the people who matter and see what's coming next.

AppSec World conference floor
One discipline · one room

1 discipline,
1 room.

At most security conferences, application security is a stream inside a much broader event, never the room itself.

AppSec World is that room: the executives, programme owners and engineers who own how enterprise software gets built and shipped, comparing notes with their peers.

A full conference hall facing a panel on stage
01
Strategy · Investment

Security & engineering executives

CISOs, CTOs and VPs of Security and Engineering who set the strategy and approve investment.

On their desk
Secure by design
AI-generated code at volume
Regulatory expectations
Building an AppSec programme
Who's in the room
Chief Information Security Officer
Chief Technology Officer
Head of Application Security
Head of Product Security
Explore the 2027 events →
+ Hover for what's on their desk and who's in the room
A panel of security leaders on stage in front of a full room
02
Roadmap · Platforms

AppSec programme & platform owners

Heads, directors and managers of AppSec, Product Security and DevSecOps who own the roadmap and evaluate platforms.

On their desk
ASPM
Vulnerability prioritisation
Platform evaluation
DevSecOps roadmap
Who's in the room
Application Security Manager
Security Architect
Engineering Manager
Head of Platform Engineering
DevSecOps Lead
Product Security Lead
Explore the 2027 events →
+ Hover for what's on their desk and who's in the room
Practitioners moving through a busy conference floor
03
Build · Operate

Engineers & security architects

The AppSec, product security, DevSecOps, platform and software engineers who build and operate the controls every day.

On their desk
Securing AI-generated code
Software supply chain & SBOM
EPSS, KEV & reachability
Agents in repos & pipelines
Who's in the room
Application Security Engineer
Product Security Engineer
Security Engineer
DevSecOps Engineer
Software Engineer
Cloud Security Engineer
Explore the 2027 events →
+ Hover for what's on their desk and who's in the room
Who this is for

Built for the people securing how enterprise software gets built.

At least 85% of the audience are engineers, architects and security practitioners: the people writing the code, running the programme and dealing with the same problems you are.

Chief Information Security Officer
Chief Security Officer
Chief Technology Officer
VP Software Engineering
VP Product Security
VP Security Engineering
Head of Application Security
Head of Product Security
Head of DevSecOps
Head of Security Architecture
Director of Application Security
Director of Platform Security
+ You? Explore events →
Five cities, three continents
5
Cities
3
Continents
1,250+
Practitioners
60+
Industry-leading speakers
Past Attendees

Joined by the engineers and security leaders protecting the software the world runs on.

Who you will meet

Your peers will be in the room.

Meet the engineers, architects and security leaders deciding how enterprise software gets secured — and which platforms get selected — at the world's most influential organisations.

250+
Attendees per event
1,250+
Attendees globally
150+
Organisations per event
$500M+
In technology budget influence
Sector breakdown
Technology and Software
30%
Financial Services and Insurance
28%
Healthcare and Life Sciences
10%
Government, Defence and Public Sector
8%
Retail and Consumer
7%
Media and Telecommunications
6%
Professional Services
6%
Education
4%
Manufacturing and Industrial
1%
Seniority breakdown
Security and Engineering Executives
11%
CISOs, CTOs and VPs of Security and Engineering who set the strategy and approve investment.
AppSec and Product Security Owners
22%
Heads, directors and managers of AppSec, Product Security and DevSecOps who own the roadmap and evaluate platforms.
Engineering, Architecture and Delivery Leads
34%
Engineering managers, security architects and DevSecOps leads responsible for building security into software delivery.
Engineers, Architects and Specialists
33%
The AppSec, product security, DevSecOps, platform and software engineers who build and operate the controls every day.
Organisation size
Large enterprise
70%
Mid-market
20%
Small and medium
10%
Job titles you will be sitting with
Chief Information Security Officer
Chief Security Officer
Chief Technology Officer
VP Software Engineering
VP Product Security
VP Security Engineering
VP Cloud Security
VP Security and IT Operations
Head of Application Security
Head of Product Security
Head of DevSecOps
Engineering Director
Head of Security Engineering
Head of Security Architecture
Director of Application Security
Director of Product Security
Director of Platform Security
Director of Security Engineering
Global Event Calendar

Gathering application security leaders across 5 flagship events.

Why AppSec World

The global, trusted voice in application security

01

The room you need to be in.

At least 85% of the audience are engineers, architects and security practitioners — the people writing the code, running the programme and dealing with the same problems you are.

The AppSec World room
02

Content by practitioners, for practitioners.

Every keynote, panel and case study is delivered by someone who has actually done the work. No product pitches from the stage and no theory — just what worked, what didn't and what it cost.

Practitioner roundtables
03

Global insight. Local application.

AppSec World connects the same challenges, ideas and lessons across five global markets — then brings them back to what matters in your region, your regulatory environment and your team.

A global application security community
Insights

Practitioner guides from AppSec World

Vulnerability management
Vulnerability Prioritization That Engineers Actually Trust: Combining CVSS, EPSS, KEV and Reachability

Vulnerability prioritization that engineers trust: how to combine CVSS, EPSS, CISA KEV and reachability into fix-first rules and defensible SLAs.

October 2, 2026
Supply chain & DevSecOps
Software Supply Chain Security in Practice: From Producing SBOMs to Actually Consuming Them

Software supply chain security in practice: what an SBOM must contain, SBOM vs SCA, VEX, SLSA and the controls that stop the attacks that keep recurring.

October 2, 2026
Supply chain & DevSecOps
AI Code Security: How to Govern Coding Assistants, Agents and AI-Generated Code Without Slowing Engineering Down

AI code security for enterprises: the real risks of vibe coding, coding agents and slopsquatting, and the controls that govern AI-generated code at scale.

October 2, 2026
All insights →
Past Speakers

Learn from the best in the business.

Ankur Chakraborty
Ankur Chakraborty
Senior Director, Platform Security
Caleb Sima
Caleb Sima
Chair, AI Security Alliance
Edwin Kwan
Edwin Kwan
Head of Product Security
Gursev Singh Kalra
Gursev Singh Kalra
Vice President, Product Security
Paul Theriault
Paul Theriault
Senior Security Architect
Picklu Paul
Picklu Paul
Senior Engineering Lead, Cybersecurity
Robert Whelan
Robert Whelan
Security Architect
Will Sharpe
Will Sharpe
Chief Information Security Officer
Sponsors

Trusted by the biggest players in application security

Thales
Palo Alto Networks
OpenText
Okta
HCL Software
GitLab
JFrog
Black Duck
Snyk
Docker
Checkmarx
Veracode
Sonatype
Orca Security
Netpoleon
Chainguard
Secure Code Warrior
Security Compass
Semgrep
Aikido
GitGuardian
Cycode
StackHawk
Backslash Security
Manifest Cyber
Trie
DryRun Security
Nullify
Dam Secure

Stay in the know.

Which events would you like to be updated on?
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.