Technology
IT Security Summit Munich 2026
The IT Security Summit Munich 2026 focuses on Cloud, DevSecOps, Web, API, and AI-Driven Security.
28Speakers
24Sponsors
46Sessions
42Companies · in total
Speakers
Programmed at IT, in alphabetical order.
Anna Lavrova
Leadership & Delivery Expert | Human-Centered Systems Thinker
Barak Abekasis
Senior Solutions Engineer with 13+ years of experience in DevOps and IT · Thales Group
Bea Hughes
Infrastructure Security Expert · Color
Boaz Barzel
Field CTO Specializing in Shift-Left Innovation, Risk Management, and DevSecOps · OX Security
Christian Salzmann-Jäckel
Linux Architect and Kubernetes Expert · Zuse Institute Berlin
Christian Schneider
Security Architect, Threat Modeling and AI Security Expert · Schneider IT-Security
Christian Wenz
Web veteran and expert in web security · Arrabiata Solutions
Diana Průšová
Senior Security Leader in Critical Infrastructure | CVSS v4 Co-author | ENISA Advisor · Yunex Traffic
Filip W
Quantum Computing nomad · Sonova
James Eastham
Expert in modern software architecture
Johannes Rudolph
Expert in Platform Engineering and scaling enterprise cloud adoption. · meshcloud GmbH
John Willis
DevOps & IT Risk Researcher, Author & Governance Expert
Kris Buytaert
DevOps pioneer: Building resilient, collaborative infrastructures
Manuel Schuller
DevOps/DevSecOps Industry expert
Marc Herren
Platform Engineering & DevSecOps Automation Expert · remmen.io GmbH
Marcus Bointon
Email expert Security wiz PHP developer · Devalps
Martin Gegenleitner
Expert in Cryptography and Key Management · Thales Group
Michael Hofmann
Expert in Software Architecture, Java Enterprise, and DevOps · Hofmann IT-Consulting
Mike van der Bijl
Cybersecurity Expert with Full-Stack & IT Management Experience · DHL
Pawel Piwosz
Serverless and CI/CD Pioneer, DevOps Advocate · UpCloud
Rob Haines
Expert in AppSec tooling, processes, and integration · Black Duck
Romina Druta
Expert in Cloud Security and DevOps Practices · Visma
Sponsors
The companies behind the program. Tiers as disclosed.
Agenda
Selected from 46 sessions.
- 10:30 - 11:15AI-Powered Security Automation
AI-Accelerated Delivery: Predicting Release Risk Before Production
Modern software delivery is entering a high-velocity phase driven by AI-assisted development and platform engineering. While CI/CD pipelines allow teams to ship faster than ever, c…
- 10:30 - 11:15Secure Coding & Software Development Lifecycle (SDLC)
Latest is not a strategy
Modern software isn't just the code we write - it's a constantly shifting collection of dependencies, build tools, containers, and services, all with their own versions. This talk …
- 10:45 - 11:30DevSecOps
It's just a jump to the left: the Time Warp of DevSecOps
It's just a jump to the left: the Time Warp of DevSecOps. We bought into the Emperor's New DevOps, so we're secure now, right? Well, maybe, maybe not. Let's talk about what securit…
- 10:45 - 11:30Secure Coding & Software Development Lifecycle (SDLC)
Security HTTP Headers: The Good, the Bad and the Ugly
A while ago, web browsers were considered the #1 security risk on the web. Today, they are the last line of defense. Modern, secure web applications leverage such headers for two r…
- 11:45 - 12:30Cloud, API & Identity Security
Digital sovereignty with OpenStack on Kubernetes – a GitOps approach for managing OpenStack clouds with operators
Organizations are increasingly seeking ways to maintain control over their infrastructure and data. This talk presents an approach to achieving digital sovereignty by deploying Ope…
- 11:45 - 12:30AI-Powered Security Automation
Threat Modeling Agentic AI Systems Across Five Threat Zones
EchoLeak (CVE-2025-32711) in Microsoft Copilot showed what happens when prompt injection hits an agentic system: a single malicious email, no click required, cascaded through retri…
- 12:00 - 12:45AI-Powered Security Automation
Taming LLMs: Observability, Tracing, and Security in the Wild
LLMs don't play by the rules. Their inputs and outputs are inherently unpredictable – and when you deploy them in customer-facing applications like chatbots, that unpredictability …
- 12:00 - 12:45Pentesting, Vulnerability Management & Forensics
There Is No "Left" Left: Building a Self-Pentesting Pipeline
Shift left was a nice idea. In a world where AI ships hundreds of changes a day, there is no 'left' to shift to, and your quarterly pentest is out of date the moment it lands. So I…
- 14:45 - 15:30Cloud, API & Identity Security
Data sovereignty - what it really means?
When we talk about “where data lives,” it’s not just about the storage location. It’s also about where the data is processed, transformed, and governed, and which jurisdiction ulti…
Company intelligence
What does it mean when 42 companies show up, and 2 bet on three roles at once?
42 companies. two are betting more than once.
The numbers below are derived from the speakers, sponsors, and exhibitors on this page, cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.
In the same series
Prior and forthcoming editions
- IT Security Summit Munich 2025Dec 2025· past