Akto’s API and LLM Security Roadshow in October - SF, LA, Irvine and DC
Akto is doing a roadshow from October 19 to 30th in 4 cities - San Francisco, Los Angeles, Irvine and Washington DC. Join us for hands on workshops, dinners and talks on API Security, LLM Security and DevSecOps.
Raaga Srinivas
10 mins
Catch up with Akto’s founders Ankita Gupta (CEO) and Ankush Jain (CTO) from October 19th to 30th in 4 cities - San Francisco, Los Angeles, Irvine and Washington DC.
TLDR event:
[San Francisco] Roadmap to DevSecOps Adoption with OWASP Bay Area
[ San Francisco] Hands-on Workshop: Integrating Automated Security Checks in CI/CD with OWASP Bay Area
[San Francisco] The Roadmap to DevSecops Adoption at Teleport Conference
[Irvine] Hands-on API Security Workshop with OWASP Orange County
[Los Angeles] Hands on API Security Workshop 2.0 with OWASP LA
[Washington DC] LLM Security Roundtable and Dinner at OWASP Global Appsec DC
Here is a detailed outline of all the events with locations and registration links.
Six Events in Four Cities
#1 [San Francisco] Roadmap to DevSecOps Adoption with OWASP Bay Area
When: Thursday, Oct 19th, 2023 at 5:30 pm
Where: 88 Kearny Street, San Francisco, CA
Details: 45 minute talk on DevSecOps with case Studies
This talk outlines the transition from traditional DevOps to DevSecOps, emphasizing the need for security in software development. It will address key principles of DevSecOps include the shift from traditional security models, continuous integration, delivery, and the "Shift Left" philosophy. The talk also covers setting up a toolchain (SAST, DAST, IAST and integr ating it within CI/CD pipeline), addressing challenges in DevSecOps adoption, best practices, and measuring success through key performance indicators, such as reducing security incidents, faster incident response, and early-stage vulnerability detection and resolution.
#2 [ San Francisco] Hands-on Workshop: Integrating Automated Security Checks in CI/CD with OWASP Bay Area
When: Tuesday, Oct 24th, 2023 at 5:30 pm
Where: San Francisco - Spaces Mission & 3rd
Details: 2.5 hour hands-on workshop with Akto’s co-founders
Join us for a workshop designed to educate participants on the principles of DevSecOps and how to leverage GitHub Actions for secure CI/CD pipelines. The session begins with a 15-minute introduction that highlights the importance of the DevSecOps paradigm, GitHub Actions, and the significance of SAST, DAST and IAST within CI/CD pipelines. This is followed by a 10-minute overview of GitHub Actions' basic components and a demonstration of a simple CI pipeline. The workshop then transitions into hands-on activities, dedicating 20 minutes to integrating SAST into GitHub Actions, where participants select and set up a SAST tool, automate scans, and analyze reports. The majority of the workshop, 60 minutes, is devoted to integrating DAST and IAST with GitHub Actions, including setting up a test environment, configuring scanning tools, and handling findings within the GitHub platform.
#3 [San Francisco] The Roadmap to DevSecops Adoption at Teleport Conference
When: Wednesday, Oct 25th, 2023 at 11:30 am
Where: Merchants Exchange Club, 75 Leidesdorff Street, San Francisco
Details: Talk by Ankita Gupta - Co-founder and CEO of Akto
This presentation offers a thorough guide to embracing DevSecOps, emphasizing the critical role of incorporating security practices from the initial ideation phase to the final deployment stage of software development. The key takeaways encompass several essential aspects of this journey. It starts with awareness and education, underlining the importance of understanding and recognizing security's significance in the development process. Next, there's the need for a cultural shift within organizations, promoting a collaborative atmosphere where security is everyone's responsibility. The talk will go on to outline how to assess current security posture to identify existing strengths and weaknesses. Subsequently, the presentation highlights the integration of security at various stages: Development, CI/CD Pipeline, and Deployment. It will further address the importance of continuous monitoring, feedback loops, measurement, and reporting in quantifying and communicating the effectiveness of DevSecOps practices.
Monthly product updates in your inbox. No spam.
#4 [Irvine] Hands-on API Security Workshop with OWASP Orange County
When: Thursday, Oct 26th, 2023 at 5:30 pm
Where: Bake Parkway, Irvine, CA
Details: 2.5 hours hands-on workshop with Akto’s co-founders
A hands-on workshop focused on creating and running business logic tests using Akto. You will learn to write ten different business logic tests, which will then be executed against Juice Shop and other vulnerable apps. The goal of the workshop is to give a hands-on experience in writing and automating custom API security tests related to authentication, authorization and access control issues. The workshop aims to be interactive, engaging, and an enriching learning experience. You will learn the fundamentals of writing, automating, and executing business logic tests. By the end of this training, participants will be able to automate 10 business logic tests, a key skill in the realm of API security. Participants are encouraged to bring their own API projects or sample APIs they are trying to test to receive personalized guidance and recommendations during the workshop. We will help everyone write their own custom tests during the workshop itself so you can test your own APIs. If not, we will be using Juiceshop or other vulnerable apps for demo purposes.
#5 [Los Angeles] Hands on API Security Workshop 2.0 with OWASP LA
When: Thursday, Oct 27th, 2023 at 5:00 pm
Where: 1450 2nd Street, Santa Monica, CA
Details: 2.5 hour hands-on workshop with Akto’s co-founders
This workshop will equip participants with the knowledge and hands-on skills to integrate Security Testing into their DevSecOps pipelines. It starts with a 15-minute introduction to DevSecOps, GitHub Actions, and the importance of security. This is followed by a 10-minute overview of GitHub Actions' basic components and a demonstration of a CI pipeline. The core of the workshop includes hands-on sessions spanning 20 minutes for integrating SAST with GitHub Actions and a substantial 60-minute segment for integrating DAST and IAST. Participants will set up testing environments, configure tools, write automation workflows, and handle findings within the GitHub platform. The workshop promises skill enhancement, hands-on experience application in their organizations, and networking opportunities with peers encountering similar challenges.
#6 [Washington DC] LLM Security Roundtable and Dinner at OWASP Global Appsec DC
When: Monday, Oct 30th, 2023, 7:00 - 8:30pm
Where: Yardbird Table & Bar, 901 New York Ave NW, Washington, DC
Details: Meet Akto’s founders and talk about LLM security! Large Language Models (LLMs) like ChatGPT, Bard, and LLaMA2 have seen rapid growth in natural language processing since 2017, particularly in areas such as text generation, sentiment analysis, and data insights. However, it highlights a significant concern regarding their security, especially in applications like chatbots, content generation, and the potential for data leaks. To address these concerns, Akto is pioneering LLM security features tailored for these APIs. The roundtable event deep dives into LLM vulnerabilities, such as OWASP Top 10 for LLMs, prompt injection threats, and insecure output handling. It offers participants a chance to network with industry leaders, engage with company founders, and explore the future of LLM security. Attendees also have the opportunity to trial Akto's LLM Security features, positioning themselves at the forefront of this growing field. The event is framed as an essential conversation and networking opportunity for those interested in LLM security.
Coffee with Founders
From October 19th to 30th, seize the unique opportunity to sit down with Akto’s founders for an in-depth conversation about API security and Akto over coffee. You can schedule a time to meet the founders and learn more about Akto's groundbreaking approach to API security.
Hope to see you there!
Keep reading
News
7 mins
March Product News: 98 New Tests, Dynamic wordlists, and more
This edition of Akto’s newsletter is packed with new features and tests that will greatly decrease your API Security testing time and increase targeted testing.
Product updates
5 mins
Detailed Errors on Postman and Swagger File Import
Akto now replays APIs to automatically get data during an import of Postman and Swagger files and transparently displays reasons why each specific API couldn't be replayed in the case of an error.
Product updates
5 mins
Added 98 New API Security Tests across 5 OWASP categories
Akto has introduced new tests across several categories including BOLA, Broken Authentication, Unrestricted Resource Consumption, BFLA, and SSRF that you can explore with Akto’s Test Editor.