Join us at Semgrep HQ during RSA Week for a series of technical workshops. Connect with fellow security practitioners, dig into practical topics, and leave with ideas you can use right away.
Please note: To attend these sessions, you must register using the links. We look forward to seeing you there!
Schedule:
Responding to Emergent Supply Chain Threats Workshop
🗓️ Monday, March 23 | 12:30 PM PT
🎤 Katie Kent, Kyle Northcutt, JP Catao
A practical walkthrough for responding to fast-moving supply chain issues with Semgrep, from detection through remediation. You will see Malicious Dependency Detection (now GA) in action and leave with a repeatable playbook for the next high-profile dependency incident.
Finding Logic Flaws and Broken Auth with AI-Powered Multimodal Detection
🗓️ Wednesday, March 25 | 12:30 PM PT
🎤 Jack Moxon, Erik Buchanan
Traditional SAST catches issues like SQL injection and XSS. Some of the biggest bug bounty payouts come from logic flaws like IDOR, broken authorization, and workflow abuse because these are hard to find with traditional SAST techniques alone.
In this technical workshop, you’ll see how Semgrep’s AI-powered detection combines static analysis with LLM reasoning to uncover business logic vulnerabilities without custom rule writing.
Vibe Coding and AI Security Primer: From MCP to Mad Skills.md
🗓️ Thursday, March 26 | 10:30 AM PT
🎤 Dr. Katie Paxton-Fear, Milan Williams, Jayson DeLancey
A hands-on workshop for all skill levels to build an AI-assisted workflow in Cursor with security hooks. Get practical experience with agentic workflows and MCP skills, with security and AI experts available for help along the way.
---
Want something new and trending? Take a look at the Lunch & Learn Talks we are running all week.