Semgrep eventsJoin Semgrep at BSides SF, where we’re a proud Silver Sponsor and will be featured on stage with talks from Dr. Katie Paxton-Fear, Romain Gaucher, Claudio Merloni, and Brandon Wu. Swing by our table to say hello, pick up swag, and see how Semgrep’s AI-driven AppSec platform helps teams find and fix issues earlier, reduce noise across SAST/SCA/Secrets, and ship faster.
📍 City View at Metreon
🗓 March 21 & 22
Here’s where you can catch the Semgrep team on stage:
March 22nd | 1:30 pm | Dr. Katie Paxton-Fear (Staff Security Advocate)
AI Huh? What is good for? Absolutely Nothin'!
It's killing the planet, rotting your brain, and every product has slapped the AI label onto their product to get investors. AI is here whether we want it to or not. This bird of a feather discussion invites AI skeptics, realists and fearmongers to moan, complain and criticise AI and the new AI era.
March 22nd | 2:10 pm | Romain Gaucher (Head of Security Research) & Claudio Merloni (Staff Security Researcher)
The Great SAST Dissonance: How to Please Every Audience, at Scale
SAST tools hit a sour note with modern apps with a dissonant coverage that leaves stretches of code unheard: dangerous sense of security. An AI conductor can fine-tune the orchestration for each application, let human experts focus and produce the right mix of coverage and findings.
March 22nd | 2:15 pm | Brandon Wu (Senior Software Engineer)
One Thousand and Pne AI-Prevented CVEs: Vibe Coding a Whole New Supply Chain Defense
Supply chain attacks are everywhere. with over 20,000 CVEs filed in Q2 2025. We wrote a non-agentic internal tool which combines deterministic callgraph-based methods with selective LLM reasoning to “vibe code” Semgrep rules, colossally decreasing the time security researchers spend processing CVEs.
For more information, visit the BSides SF Website.