Technology

Melbourne Secure Software and AppSec Summit 2026

Strengthen your development process with cutting-edge security practices. Connect with experts, explore automation, secure containers, and gain practical insights through interactive sessions and real-world case studies. The event brings together developers, security experts, and industry leaders to seamlessly integrate security into every step of the develo…

Visit the official site
24Speakers
9Sponsors
23On the bill · sessions
26Companies · in total
§I

Speakers

Programmed at Melbourne, in alphabetical order.
Abdullah Muhammad
Application Defence Manager, Technology Security · Bupa
Andrew Dean
Solutions Architect · Chainguard
Angelina Liu
Account Executive, ANZ · Aikido Security
Brett Drayton
Solutions Architect · Chainguard
Cole Cornford
Chief Executive Officer · Galah Cyber
Edwin Kwan
Head of Product Security · Domain Group
Gaurav Vikash
Head of Security and Risk - APAC · Axon
Girish Darda
Head of Security · Littlepay
Kanik Sachdeva
Security Engineering Manager · Medibank
Louis Nyffenegger
Founder · PentesterLabs
Luke Bampton
Application Security Lead · Monash University
Lycia Chia
Former Container security Product Owner · Financial Services Industry
Paul Theriault
Senior Security Architect · Atlassian
Robert Whelan
Security Architect · Australian Signals Directorate
Rob Williams
Staff Solutions Architect · GitLab
Samer Akkoub
Senior Solutions Engineer · Semgrep
Sayasmito Ghosh
Principal Security Engineering Manager · x15ventures
Scott Ellis
Platform Security Engineering Director · Zuora
Shani Levy
Senior Solutions Engineer · Jfrog
Simon Ellis
Head of Cybersecurity · Lendi Group
Suganthi Krishnavathi
Staff Solutions Engineer · Snyk
Toby Allen
Senior Solutions Engineer · Okta
§II

Sponsors

The houses behind the program. Tiers as disclosed.
Aikido
Chainguard
Checkmarx
Galah Cyber
Gitlab
JFrog
OAuth
Semgrep
Snyk
§III

Agenda

Selected from 23 sessions on the bill.
  • 10:10 AM

    Panel: The Evolving Supply Chain Risk Landscape: What’s Actually Breaking in Production

    Modern applications run on layered platforms, third-party extensions, and AI assisted development and tooling, each introducing dependencies that traditional supply chain controls …

  • 10:40 AM

    How I Solved...

  • 10:40 AM

    How I Solved... Frontier models, software supply chains & trust

    We'll cover: How to prepare your organisation for frontier models; Reducing risk across the software supply chain; Enabling developer velocity through a trusted path.

  • 10:40 AM

    The Source Code Was Clean: How npm Malware Skips the Repository and What Actually Stops It

    Software supply chain attacks are shifting. Attackers aren't really hunting for vulnerabilities in source code anymore, they are going after the trust that developers put in packag…

  • 10:55 AM

    Morning Tea and Networking

  • 11:25 AM

    Audience Activity

    In this innovative session, attendees will be faced with a series of scenarios that they may face in their roles. Attendees will discuss the possible courses of action with their p…

  • 11:40 AM

    Lessons from the Software Supply Chain: What They Teach Us About Securing AI

    The rise of AI is introducing supply chain–style risks we’ve seen before in open source. The way developers pick, use, and secure components has direct parallels to how organisatio…

  • 11:55 AM

    How GitLab Solves... AI-DLC Governance from Commit to Compliance

    Governance and audit processes often span disconnected tools, manual approvals, and time-consuming evidence collection. This session explores how GitLab helps teams bring governanc…

  • 12:10 PM

    Panel: Security vs Velocity: When to Say Yes to Risk (and How to Track What You Said Yes To)

    Modern engineering teams move fast, and AppSec teams are constantly negotiating when to block, when to slow down, and when to accept risk to keep delivery on track. As exceptions, …

Intermission
Part the Second · For the Buyer

What does it mean when 26 companies show up, and 6 bet on three roles at once?

26 companies. six are betting more than once.

The numbers below are derived from the speakers, sponsors, and exhibitors on this page, cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.

Who's in the room
6All threespeak · spons · exh
3Sponsoringsponsor only
17Companies Speakingspeaker only

The Triple-Threat

Chainguard·Galah Cyber·GitLab·JFrog·Semgrep·Snyk

Speakers by seniority

38% of the speakers carry senior titles: C-suite, Founder, VP, or Director-level.

  • C-suite28%
  • Founder / Owner28%
  • Director / Head of521%
  • Manager / Lead729%
  • Engineer · IC729%
  • Other roles14%

Of 24 on the bill · classified by free-text title

Most-represented companies
  1. 01ChainguardSp2V
  2. 02Galah CyberSp1V
  3. 03GitLabSp1V
  4. 04JFrogSp1V
  5. 05SemgrepSp1V
  6. 06SnykSp1V
  7. 07AikidoSp
  8. 08CheckmarxSp
  9. 09OAuthSp
  10. 10Aikido Security1V
  11. 11Atlassian1V
  12. 12Australian Signals Directorate1V
  13. 13Axon1V
  14. 14Bupa1V
Sponsors by tier
unspecified9
100% of 9
At peer events but not here

These companies sponsored two or more peer events recently, but aren't on this program. For an organizer, that's a list of warm prospects.

Related events · by shared sponsors