OWASP Global AppSec USA 2026

OWASP Global AppSec USA is the flagship US conference of the OWASP Foundation, the non-profit behind open application security projects such as the OWASP Top 10. The 2026 edition runs from 2 to 6 November at the Hyatt Regency San Francisco on the Embarcadero: three days of paid training from 2 to 4 November, then a two-day conference on 5 and 6 November, with training and conference sold as separate tickets. It is an application security event rather than a DevOps one, but it is the largest vendor-neutral gathering in the US for the people who work where security meets the delivery pipeline: AppSec engineers, developers, DevSecOps practitioners and security leaders. OWASP's event pages invite attendees to connect with more than 800 security professionals. The conference runs six tracks, including builder and developer, breaker, defender, manager and culture, and OWASP projects, plus an expo hall, a capture-the-flag competition, an OWASP projects demo room, a mentoring programme and evening receptions; sessions can count toward continuing education credits. Ticket prices sit behind the registration system, and the call for papers has closed. Go if you own software supply chain, SAST and DAST tooling or secure-by-default pipelines in your organisation.