SANS AI Security Training August 2026 - SANS@Night: Evolving AppSec: Using Agentic Workflows and Building Secure AI Systems

This SANS@Night talk explores how Application Security is transforming in the age of agentic AI, organized around three practical themes: applying AI to strengthen traditional AppSec tools like SAST, SCA, DAST, and WAF through agentic workflows and reusable skills; securing AI systems themselves, including chatbots, RAG pipelines, single and multi-agent architectures, and MCP servers, with defense in depth controls such as guardrails, prompt spotlighting, and human in the loop approvals; and governing the secure use of vendor AI through structured assessments and trusted agentic coding backed by OWASP standards.

Attendees will walk away with a clear mental model of where AI accelerates AppSec, where AI must be defended, and how to adopt vendor AI responsibly, all supported by open-source frameworks and ready to use resources.