Technology

Melbourne Secure Software and AppSec Summit 2026

Strengthen your development process with cutting-edge security practices. Connect with experts, explore automation, secure containers, and gain practical insights through interactive sessions and real-world case studies. The event brings together developers, security experts, and industry leaders to seamlessly integrate security into every step of the develo…

Visit the official site
24Speakers
9Sponsors
23Sessions
26Companies · in total

Speakers

Programmed at Melbourne, in alphabetical order.

Abdullah Muhammad
Application Defence Manager, Technology Security · Bupa
Andrew Dean
Solutions Architect · Chainguard
Angelina Liu
Account Executive, ANZ · Aikido Security
Brett Drayton
Solutions Architect · Chainguard
Cole Cornford
Chief Executive Officer · Galah Cyber
Edwin Kwan
Head of Product Security · Domain Group
Gaurav Vikash
Head of Security and Risk - APAC · Axon
Girish Darda
Head of Security · Littlepay
Kanik Sachdeva
Security Engineering Manager · Medibank
Louis Nyffenegger
Founder · PentesterLabs
Luke Bampton
Application Security Lead · Monash University
Lycia Chia
Former Container security Product Owner · Financial Services Industry
Paul Theriault
Senior Security Architect · Atlassian
Robert Whelan
Security Architect · Australian Signals Directorate
Rob Williams
Staff Solutions Architect · GitLab
Samer Akkoub
Senior Solutions Engineer · Semgrep
Sayasmito Ghosh
Principal Security Engineering Manager · x15ventures
Scott Ellis
Platform Security Engineering Director · Zuora
Shani Levy
Senior Solutions Engineer · Jfrog
Simon Ellis
Head of Cybersecurity · Lendi Group
Suganthi Krishnavathi
Staff Solutions Engineer · Snyk
Toby Allen
Senior Solutions Engineer · Okta

Sponsors

The companies behind the program. Tiers as disclosed.

Aikido
Chainguard
Checkmarx
Galah Cyber
Gitlab
JFrog
OAuth
Semgrep
Snyk

Agenda

Selected from 23 sessions.

  • 10:10 AM

    Panel: The Evolving Supply Chain Risk Landscape: What’s Actually Breaking in Production

    Modern applications run on layered platforms, third-party extensions, and AI assisted development and tooling, each introducing dependencies that traditional supply chain controls …

  • 10:40 AM

    How I Solved...

  • 10:40 AM

    How I Solved... Frontier models, software supply chains & trust

    We'll cover: How to prepare your organisation for frontier models; Reducing risk across the software supply chain; Enabling developer velocity through a trusted path.

  • 10:40 AM

    The Source Code Was Clean: How npm Malware Skips the Repository and What Actually Stops It

    Software supply chain attacks are shifting. Attackers aren't really hunting for vulnerabilities in source code anymore, they are going after the trust that developers put in packag…

  • 10:55 AM

    Morning Tea and Networking

  • 11:25 AM

    Audience Activity

    In this innovative session, attendees will be faced with a series of scenarios that they may face in their roles. Attendees will discuss the possible courses of action with their p…

  • 11:40 AM

    Lessons from the Software Supply Chain: What They Teach Us About Securing AI

    The rise of AI is introducing supply chain–style risks we’ve seen before in open source. The way developers pick, use, and secure components has direct parallels to how organisatio…

  • 11:55 AM

    How GitLab Solves... AI-DLC Governance from Commit to Compliance

    Governance and audit processes often span disconnected tools, manual approvals, and time-consuming evidence collection. This session explores how GitLab helps teams bring governanc…

  • 12:10 PM

    Panel: Security vs Velocity: When to Say Yes to Risk (and How to Track What You Said Yes To)

    Modern engineering teams move fast, and AppSec teams are constantly negotiating when to block, when to slow down, and when to accept risk to keep delivery on track. As exceptions, …

Company intelligence

What does it mean when 26 companies show up, and 6 bet on three roles at once?

26 companies. six are betting more than once.

The numbers below are derived from the speakers, sponsors, and exhibitors on this page, cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.

Who's in the room
6All threespeak · spons · exh
3Sponsoringsponsor only
17Speakingspeaker only

In all three roles

Chainguard·Galah Cyber·GitLab·JFrog·Semgrep·Snyk

Speakers by seniority

38% of the speakers carry senior titles: C-suite, Founder, VP, or Director-level.

  • C-suite28%
  • Founder / Owner28%
  • Director / Head of521%
  • Manager / Lead729%
  • Engineer · IC729%
  • Other roles14%

Of 24 speakers · classified by free-text title

Most-represented companies
#CompanyRolesSpeakers
1ChainguardSponsor2
2Galah CyberSponsor1
3GitLabSponsor1
4JFrogSponsor1
5SemgrepSponsor1
6SnykSponsor1
7AikidoSponsor-
8CheckmarxSponsor-
9OAuthSponsor-
10Aikido Security1
11Atlassian1
12Australian Signals Directorate1
13Axon1
14Bupa1
Sponsors by tier
unspecified9
100% of 9
At peer events but not here

These companies sponsored two or more peer events recently, but aren't on this program. For an organizer, that's a list of warm prospects.

Related events · by shared sponsors
ConferenceDateCityShared sponsors
CISO Sydney 2027February 9, 2027Sydney4
DEVWorld 2027June 3, 2027Amsterdam4
KubeCon + CloudNativeCon North AmericaNovember 9, 2026Salt Lake City3
DevOpsCon Munich 2026November 30, 2026Munich3
AppSec & DevSecOps Sydney 2027February 10, 2027Sydney3
CypherCon 2027March 24, 2027Milwaukee3