PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026

portswigger.net | blog | #appsec | #burp-suite | #owasp | #portswigger
🔗 Original ↗

Summary

Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
Published
Collected

📦 Full-Text Content Snapshot

R2 Archive · Full Article Preserved84 lines · 5.8 KB
📄 Raw .md⬇️ Download .md

Published on: 2026-10-28 · Source: portswigger.net

Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026

Lucy Ashall | Wednesday, 28 October 2026 at 15:32 UTC

OWASP AppSec 2026
OWASP AppSec 2026

_Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share._

OWASP is celebrating its 25th anniversary this year, and we’re heading to San Francisco to join the AppSec community. Whether you’re a pentester, an AppSec lead, or building your organisation’s testing programme, we’d love to meet you.

See what’s new at booth G14

Find us in the expo hall on Thursday 5 and Friday 6 November for:

  • Burp AT, live. See how agentic AI extends human-led pentesting. Explore how it can support your investigations, and bring your questions to the team.
  • Burp Suite DAST. Talk to us about dynamic scanning across your application portfolio and how it complements manual testing.
  • Something new for AppSec teams. We’re keeping the details under wraps for now. Visit the booth to see what’s next.

Get your passport stamped

Collecting stamps for the OWASP vendor passport? Add booth G14 to your route. Stop by for a demo, a chat, and your stamp.

Join us at the networking reception

The expo hall reception runs from 4:30–6:30pm on Thursday 5 November (San Francisco time). We’ll be at the booth throughout, so come and catch up with the team.

Make time for a conversation

Want to talk through your AppSec programme or take a closer look at Burp AT? Request a meeting slot in advance, and we’ll set aside time for you.

Request a meeting slot with our team

See you in San Francisco

Can’t make it? Follow us on LinkedIn and X for updates from the show. If you’re joining us, tag us in your posts and come and say hello at booth G14.

Lucy Ashall
Lucy Ashall

Lucy Ashall

📦 Full-Text Markdown Snapshot archived by Phying News · Original source: portswigger.net

Related coverage

blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
blog · portswigger.net
Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A case study of Burp AT analyzing 66,000 lines of minified JavaScript on a timeboxed engagement, uncovering a path to leak confidential whistleblower reports protected only by brute-forceable codes.
blog · portswigger.net
From capable AI models to trusted security testing
PortSwigger explains the thinking behind Burp AT: agentic capability is useful only when control sits outside the model, scope is enforceable, and agent activity is recorded as evidence.
blog · portswigger.net
Introducing Burp AT: agentic AI, built on two decades of Burp Suite
PortSwigger launches Burp AT (public beta) for Burp Suite Professional: agentic AI inside Burp using its tools, project context and pentesting skills, with user-defined autonomy.
blog · netspi.com
Exploiting XPath Injection Weaknesses
A technical walkthrough of XPath injection: how unvalidated input in XML queries enables authentication bypass and data theft, with a vulnerable lab and Burp Suite techniques for identifying the flaw.
Back