This SANS@Night talk explores how Application Security is transforming in the age of agentic AI, organized around three practical themes: applying AI to strengthen traditional AppSec tools like SAST, SCA, DAST, and WAF through agentic workflows and reusable skills; securing AI systems themselves, including chatbots, RAG pipelines, single and multi-agent architectures, and MCP servers, with defense in depth controls such as guardrails, prompt spotlighting, and human in the loop approvals; and governing the secure use of vendor AI through structured assessments and trusted agentic coding backed by OWASP standards.
In-Person & Virtual
Have you been on a Cloud Security engagement and wished you had a singular tool to use? Enter Neuvik's Quantum Mechanic, a Multi-Cloud Security Assessment tool that is in use at Neuvik. More interestingly is how the tool has been designed and built using an AI Assisted Harness. Walk through the ways that we have figured out how to design these capabilities using standard frontier models.
Virtual
AI is a major topic of discussion today—and rightfully so. But for those of us in cyber security, it's crucial not only to understand how to use AI for security, but also to recognize the threats targeting AI models, their ecosystems, and how to defend and secure them effectively.
In-Person & Virtual
