OWASP Candidate Debate - 2025 Edition
What should OWASP become, and which leaders have a credible plan to get it there? In this special 2025 Board of Directors candidate debate, nine candidates…
Listen to the episodeTopic
Conferences and Community
DEF CON villages, BSides, OWASP chapters and the volunteer effort that holds the field together.
19 episodes
Sean Varga -- OWASP Top 10 for AppSec Sales
We’re discussing the intersections of application security (AppSec) and sales strategy with our guest, Sean Varga.
Listen to the episodeErik Cabetas -- Cracking Codes on Screen and in Contests: An Expert's View on Hacking, Vulnerabilities, and the Evolution of Cybersecurity Language
Erik Cabetas joins Robert and Chris for a thought-provoking discussion about modern software security.
Listen to the episodeOWASP Board of Directors Debate
Six candidates for the 2023 OWASP Board of Directors debate the choices that shape the foundation and its community.
Listen to the episodeJames Mckee -- Developer Security
James Mckee is a developer (MCPDEA) and security advocate (CISSP) whose biggest responsibility is leading developer security practices.
Listen to the episodeSam Stepanyan -- OWASP Nettacker Project
Sam Stepanyan is an OWASP London Chapter Leader and an Independent Application Security Consultant with over 20 years of IT experience and a background in…
Listen to the episode31 mintranscript
Andrew van der Stock — Taking Application Security to the Masses
How does a volunteer security community reach the millions of people who build software? Andrew van der Stock reflects on that challenge after becoming OWASP’s executive director in 2020.
Listen to the episode23 mintranscript
Erez Yalon and Liora Herman – The Application Security Village @ DefCon
What would an application security conference look like inside DEF CON? Erez Yalon and Liora Herman explain how a volunteer idea became the Application…
Listen to the episode2 mintranscript
Erez Yalon – AppSec Village – 5 Minute AppSec
Why did DEF CON have villages for specialized security communities but no home dedicated to application security? Erez Yalon explains how that recurring question became AppSec Village.
Listen to the episode29 mintranscript
Björn Kimminich — The new JuiceShop, GSOC, and Open Security Summit
How do you keep an intentionally vulnerable application useful while its underlying frameworks keep fixing bugs?
Listen to the episode25 mintranscript
Jon McCoy — Hacker outreach
How can hackers and corporate security teams work together when each sees the other through a different set of assumptions?
Listen to the episode20 mintranscript
Bill Sempf — Growing AppSec People and KidzMash
The shortage of AppSec practitioners will not disappear just by posting more job openings.
Listen to the episode31 mintranscript
Josh Grossman, Avi Douglen, and Ofer Maor -- AppSec in Israel and Three Talks to watch from AppSec USA
What can the wider AppSec community learn from Israel’s unusually dense security ecosystem?
Listen to the episode28 mintranscript
Abhay Bhargav -- Threat Modeling as Code
A threat model that lives in an old document rarely keeps pace with the code it describes.
Listen to the episode35 mintranscript
Jessica Robinson and Vandana Verma-- WIA: Women in #AppSec
How can application security become a field where more women enter, contribute, and advance?
Listen to the episode17 mintranscript
Karen Staley -- A Conversation with Karen
What should OWASP members expect from the foundation’s executive leadership, and how can a global nonprofit remain connected to its volunteer community?
Listen to the episode21 mintranscript
Robert Hurlbut -- Blackhat Security Conference
What should an application security professional take away from a conference famous for spectacular hacks?
Listen to the episode26 mintranscript
Jon McCoy -- The Mindset to Reverse Engineer
How does a developer learn to take software apart and use that knowledge to build it more securely?
Listen to the episode27 mintranscript
Chris Romeo -- Security Community at Any Scale
How can a company build a security community when it has only a few interested people and little budget?
Listen to the episode