OWASP Global AppSec USA 2027

OWASP Global AppSec USA moves to Atlanta for 2027, scheduled for 20 to 24 September 2027 according to the OWASP Foundation's own event listing; the venue, registration and call for papers had not been announced when we checked. It is the flagship US conference of the non-profit behind the OWASP Top 10 and many other open application security projects, and it is one of the main vendor-neutral events for people who secure software delivery. The format has been stable: several days of paid hands-on training, followed by a two-day conference, with training and conference sold separately. Recent editions ran six tracks, among them builder and developer, breaker, defender, manager and culture, and OWASP projects, alongside an expo hall, a capture-the-flag competition and a projects demo room, and the 2026 event pages cited more than 800 attendees. The audience is AppSec engineers, developers, DevSecOps practitioners and security leaders. The US edition changes city every year, from Washington DC in 2025 to San Francisco in 2026 and now Atlanta, so it is worth watching if the Southeast is easier to reach. Expect the call for papers to open several months ahead of the event, on OWASP's events pages.