Conference Keynote - The next 25 years
summary
OWASP is 25 in September 2026 and claims concrete wins and gaps: a Slack of 26,000 people, 279 chapters and 345 projects but many inactive; the 2021 Top 10 uses data from 500000 apps; recommends starting with ASVS Level 1, adopting SBOMs (CycloneDX) and Dependency-Track, and pushing framework security, agile architecture, developer tooling and open curricula. Goals include residencies for maintainers, a certification path, bigger events (largest ABC 1,100 so far) and more corporate fundraising.
AI-written summary · about
chapters (12)
- 0:00Keynote introduction
- 1:31OWASP vision for 25 years
- 4:23OWASP Top 10 evolution
- 10:18OWASP growth milestones
- 16:01Key OWASP projects
- 18:10OWASP challenges and opportunities
- 24:15AI in software security
- 25:38Volunteerism and membership
- 27:21Security certification and education
- 31:11Leading OWASP projects
- 35:28Future events and expansion
- 36:58Q&A
related talks
51mKeynote: 20:20 The History and Future of OWASP
43mApisecure, 14 & 15 March 2023 - Brenton House, Vice President, Digital Evangelism at Software AG.
44mKeynote: 25 Years in AppSec: Looking Back, Looking Forward
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
10mOpening Remarks
26mFlagship Projects: Top 10 "The making of the OWASP Top 10 and beyond"
57mThe Developer's Field Guide to Software Security
47mOWASP Top 10