apisec|con 2026 · Fall edition · Call for speakers open
Four hours, no vendor pitches. Practitioners on what changes when the code is written by models and the traffic is generated by agents.
Free, and every session is on demand afterwards. Registration is handled on our event platform, which sends your calendar hold, the reminder the week of, and the join link on the day.
Registration is processed by RingCentral Events. No sponsor list sharing.
Why this year
AI did not add a new category to application security. It changed the volume, the authorship, and the identity of everything already in it. Three shifts are driving this year's program.
Shift 01 · Authorship
Assistants ship endpoints faster than review can absorb them. The generated controller handles input validation well and object-level authorization badly, because authorization is context the model never had. Broken object level authorization was already the top API risk. Now it scales.
Shift 02 · Identity
Agents, tool-calling frameworks, and MCP servers authenticate as service accounts with standing privileges and no session. Non-human identities now outnumber human ones in most environments, and almost none of them have an owner, a rotation schedule, or a scope anyone can justify.
Shift 03 · Volume
Automated discovery maps an undocumented endpoint in minutes. Rate limits tuned for humans are trivial for agents. Detection has to work on behavior across a session, not on a signature in a single request.
Agenda shape
The shape is fixed, the content is not. Sessions are filled from the CFP and published September 23.
Speaking
Sessions are filled from an open call. If you have working code, a real incident, or a method that failed in an instructive way, the call is open until September 13. Product pitches are rejected on sight, including ours.
Decisions sent by September 18 · Program published September 23
Track record
Past apisec|con speakers include
Prior editions have drawn practitioners from Kong, Akamai, Ford, Costco, and Axis Bank.
Two ways in
Registration is open now and free. Want to be on the program instead? The call for speakers closes September 13.