OWASP Global AppSec USA 2026 Nov 2–6 Hyatt Regency, San Francisco Booth S4

Tired of criticals? Get hooked on easy fixes.

AI-Native SDLC Security

We're at OWASP Global AppSec USA in San Francisco. Come by booth S4 to see Green AI Remedy in action, get a card game and books signed by their authors, and drop a ticket in our raffle.

Phoenix Security at OWASP Global AppSec USA 2026 in San Francisco
Thu, Nov 5 · 2:45–3:15 PM
Card game signing

Avi Douglen, Kim Wuyts and Francesco sign and give away Context & Cringe decks.

Learn moresouth
Thu, Nov 5 · 3:15–3:45 PM
Book signing

Francesco, Izar Tarandach and Matthew Coles sign their books.

Learn moresouth
Fri, Nov 6 · 2:30 PM
Raffle draw

A LEGO Ghostbusters set, LED backpacks, an Amazon gift card and signed card decks.

Learn moresouth

Now generally available

Green AI Remedy: fixes your team will actually merge

Pick the findings you already prioritised. See the cost before any model runs. The agent assesses the repository and prepares the fix, and a person opens the pull request. The next scan closes the finding. Come see it live at booth S4.

Phoenix PurpleFix It In the Agent

SAST, SCA and autofix for AI-written code. Flaws get caught and fixed while the agent is still on the task.

Know morearrow_forward
Phoenix BlueVulnerability Intelligence

One risk picture across SAST, SCA, containers and cloud. Scored by what attackers actually exploit.

Know morearrow_forward
Phoenix Blue ShieldProtect your Dev Endpoint

A supply chain firewall for developer machines. Malicious packages get stopped before they reach the laptop.

Know morearrow_forward
Phoenix OrangeAttribute, Prioritize, Remediate

Every finding gets an owner and a business impact. Fix what matters first, and prove the burn-down.

Know morearrow_forward
Phoenix GreenAuto-Remediate at Scale

Green AI Remedy prepares fixes for the findings you prioritised, with the cost shown first. A person opens the pull request.

See it on your own pipeline

We'll show you where hooks catch criticals in your setup, on a real account.

Book a demoarrow_forward
Trusted by 380+ security teams worldwide
ClearBank
Bazaarvoice
Optimizely
Admiral

Card game signing

Context & Cringe, signed by its authors

A fast card game about application privacy. Build an app from three cards: the app, a feature and the data it uses. Then everyone judges how cringe it is. Build apps. Break trust. Laugh awkwardly.

event
When
Thu, Nov 5 · 2:45–3:15 PM
place
Where
Phoenix booth S4
Avi Douglen
Avi Douglen
Co-creator, Context & Cringe
Kim Wuyts
Kim Wuyts
Co-creator, Context & Cringe
Francesco Cipollone
Francesco Cipollone
CEO & Co-Founder, Phoenix Security

Only 25 decks to sign and give away, so come early. 5 more decks go into our raffle.

Context & Cringe card game signing at Phoenix Security booth S4

Get your copy signed

Two books, three authors

Meet the authors at our booth and get your copy signed. Pick up Securing the AI-Native SDLC at booth S4. Threat Modeling is at the OWASP bookstore.

event
Date
Thu, Nov 5
schedule
Time
3:15–3:45 PM
place
Where
Phoenix booth S4
Securing the AI-Native SDLC

Securing the AI-Native SDLC

Built with the Cloud Security Alliance. 11 controls and a 90-day plan for the AI-native SDLC.

Francesco Cipollone
Francesco Cipollone
CEO & Co-Founder, Phoenix Security
Threat Modeling: A Practical Guide for Development Teams

Threat Modeling: A Practical Guide for Development Teams

Get it at the OWASP bookstore, then bring it to S4 to get it signed.

Izar Tarandach
Izar Tarandach
Sr. Principal Security Architect, SiriusXM
Matthew Coles
Matthew Coles
Distinguished Member of Technical Staff, Dell Technologies

Phoenix raffle

Hooked? You might just win.

Paper tickets, a locked box and a live draw at our booth. It takes about a minute to enter. This time, 5 signed Context & Cringe decks are in the box too.

Grand prize emoji_events
LEGO Ghostbusters Ecto-1 & 2 set, grand prize

LEGO® Ghostbusters Ecto-1 & 2 Set

The big one. Clear a shelf.

LED backpacks
2 winners

LED Backpacks

One each for two lucky people

Amazon gift card
1 winner

Amazon Gift Card

Spend it on whatever you want

How to enter

01
Fill in a ticket

Write your name, email and company on the ticket.

02
Drop it in the box

Keep your number. You'll need it at the draw.

03
Come back

The draw is on Friday, Nov 6 at 2:30 PM, right at our booth.

Double your odds
  • photo_cameraSnap a photo with Steve at our photo zone.
  • alternate_emailPost it on LinkedIn and tag @Phoenix Security | ASPM.
  • confirmation_numberDrop a second ticket with your number.
photo_cameraSteve's sign

This is Steve. Still waiting for TeamPCP to take a day off.

event
Drawing · Friday, Nov 62:30 PM San Francisco time, at booth S4

Keep your ticket number handy. You need to be there to claim your prize.

Booth giveaway

Swag worth taking home

Come by booth S4 and grab something for the road. Pocket fans, a sticker set for your laptop, and our new t-shirt. All free, while they last. San Francisco is cool in November, but a full expo hall is always warm.

airOnly Phoenix Fans. Yes, we know.
Phoenix Security swag: t-shirts, stickers and fans

See you in San Francisco

Come find us at booth S4

OWASP Global AppSec USA · Nov 2–6 · Hyatt Regency, San Francisco. Grab a fan, get your decks and books signed, and drop a ticket in the box.

Derek

Derek Fisher

Head of product security at a global fintech

Derek Fisher – Head of product security at a global fintech. Speaker, instructor, and author in application security.

Derek is an award winning author of a children’s book series in cybersecurity as well as the author of “The Application Security Handbook.” He is a university instructor at Temple University where he teaches software development security to undergraduate and graduate students. He is a speaker on topics in the cybersecurity space and has led teams, large and small, at organizations in the healthcare and financial industries. He has built and matured information security teams as well as implemented organizational information security strategies to reduce the organizations risk.

Derek got his start in the hardware engineering space where he learned about designing circuits and building assemblies for commercial and military applications. He later pursued a computer science degree in order to advance a career in software development. This is where Derek was introduced to cybersecurity and soon caught the bug. He found a mentor to help him grow in cybersecurity and then pursued a graduate degree in the subject.

Since then Derek has worked in the product security space as an architect and leader. He has led teams to deliver more secure software in organizations from multiple industries. His focus has been to raise the security awareness of the engineering organization while maintaining a practice of secure code development, delivery, and operations.

In his role, Jeevan handles a range of tasks, from architecting security solutions to collaborating with Engineering Leadership to address security vulnerabilities at scale and embed security into the fabric of the organization.

Jeevan Singh

Jeevan Singh

Founder of Manicode Security

Jeevan Singh is the Director of Security Engineering at Rippling, with a background spanning various Engineering and Security leadership roles over the course of his career. He’s dedicated to the integration of security practices into software development, working to create a security-aware culture within organizations and imparting security best practices to the team.
In his role, Jeevan handles a range of tasks, from architecting security solutions to collaborating with Engineering Leadership to address security vulnerabilities at scale and embed security into the fabric of the organization.

James

James Berthoty

Founder of Latio Tech

James Berthoty has over ten years of experience across product and security domains. He founded Latio Tech to help companies find the right security tools for their needs without vendor bias.

christophe

Christophe Parisel

Senior Cloud Security Architect

Senior Cloud Security Architect

Chris

Chris Romeo

Co-Founder
Security Journey

Chris Romeo is a leading voice and thinker in application security, threat modeling, and security champions and the CEO of Devici and General Partner at Kerr Ventures. Chris hosts the award-winning “Application Security Podcast,” “The Security Table,” and “The Threat Modeling Podcast” and is a highly rated industry speaker and trainer, featured at the RSA Conference, the AppSec Village @ DefCon, OWASP Global AppSec, ISC2 Security Congress, InfoSec World and All Day DevOps. Chris founded Security Journey, a security education company, leading to an exit in 2022. Chris was the Chief Security Advocate at Cisco, spreading security knowledge through education and champion programs. Chris has twenty-six years of security experience, holding positions across the gamut, including application security, security engineering, incident response, and various Executive roles. Chris holds the CISSP and CSSLP certifications.

jim

Jim Manico

Founder of Manicode Security

Jim Manico is the founder of Manicode Security, where he trains software developers on secure coding and security engineering. Jim is also the founder of Brakeman Security, Inc. and an investor/advisor for Signal Sciences. He is the author of Iron-Clad Java: Building Secure Web Applications (McGraw-Hill), a frequent speaker on secure software practices, and a member of the JavaOne Rockstar speaker community. Jim is also a volunteer for and former board member of the OWASP foundation.

Join our Mailing list!

Get all the latest news, exclusive deals, and feature updates.

The IKIGAI concept
Protected By
Shield Security PRO